Lucene search
+L

744 matches found

Vulnrichment
Vulnrichment
•added 2024/06/12 12:00 a.m.•13 views

CVE-2023-49559

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function...

6.6AI score0.00595EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/15 7:15 p.m.•19 views

CVE-2024-35102

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

8.8CVSS6.7AI score0.00522EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/15 6:25 p.m.•19 views

CVE-2024-35102

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

7.1AI score0.00522EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•0 views

CVE-2024-35102: Undefined Security Weakness

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

8.8CVSS5.9AI score0.00522EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•13 views

VITEC AvediaServer 安全漏洞

VITEC AvediaServer is a centralized server from VITEC France. A security vulnerability exists in VITEC AvediaServer version 8.6.2-1, which stems from the presence of an insecure privilege vulnerability that allows remote attackers to escalate privileges via a crafted script...

8.8CVSS7.1AI score0.00522EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•0 views

CVE-2024-33454: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component...

6.5CVSS6.6AI score0.01127EPSS
SaveExploits1References1
OSV
OSV
•added 2024/05/09 3:57 p.m.•5 views

CVE-2024-33454

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component...

6.5CVSS8AI score
SaveExploits0References3
Veracode
Veracode
•added 2024/05/03 7:06 a.m.•25 views

Cross Site Scripting (XSS)

Jfinalcms is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper input validation in the friendship link component, allowing a remote attacker to execute arbitrary code through a crafted script...

6.1CVSS7.9AI score0.00552EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2024/05/02 4:15 p.m.•33 views

CVE-2023-50685

An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the clientport parameter...

7.5CVSS6.5AI score0.01219EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/05/02 12:00 a.m.•24 views

CVE-2023-50685

An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the clientport parameter...

6.8AI score0.01219EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/02 12:00 a.m.•15 views

Hipcam RealServer 安全漏洞

Hipcam RealServer is a real-time streaming protocol from Hipcam, Inc. A security vulnerability exists in Hipcam RealServer version v.1.0, which originated from a vulnerability that allows remote attackers to cause a denial of service via a crafted script...

7.5CVSS6.6AI score0.01219EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/05/02 12:00 a.m.•38 views

CVE-2023-50685

An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the clientport parameter...

6.7AI score0.01219EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/02 12:00 a.m.•136 views

CVE-2023-50685

Hipcam Cameras RealServer v.1.0 is vulnerable to a denial of service (DoS) via a format validation vulnerability in the RTSP service . The root cause is inadequate input validation of the client_port parameter within the RTSP SETUP request. An attacker can trigger the vulnerability by sending a c...

6.8AI score0.01219EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/30 7:15 p.m.•24 views

CVE-2020-27478

Cross Site Scripting vulnerability found in Simplcommerce v.40734964b0811f3cbaf64b6dac261683d256f961 thru 3103357200c70b4767986544e01b19dbf11505a7 allows a remote attacker to execute arbitrary code via a crafted script to the search bar feature...

7.1CVSS6.9AI score0.00459EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/30 12:00 a.m.•16 views

Simplcommerce 安全漏洞

Simplcommerce is a .Net based e-commerce platform by the individual developer of Simplcommerce. A security vulnerability exists in Simplcommerce. A remote attacker can exploit the vulnerability to execute arbitrary code in the search bar function via a specially crafted script...

7.1CVSS7.7AI score0.00459EPSS
SaveExploits0References2
OSV
OSV
•added 2024/04/29 6:30 p.m.•101 views

GHSA-6WP6-22X5-RR3W Flowise vulnerable to code injection via api/v1

An issue in FlowiseAI Inc Flowise prior to v1.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component...

7.6CVSS7.6AI score0.59867EPSS
SaveExploits4References6
NVD
NVD
•added 2024/04/29 6:15 p.m.•24 views

CVE-2023-51254

Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component...

6.1CVSS6.9AI score0.00552EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/29 5:15 p.m.•76 views

CVE-2024-33444

SQL injection vulnerability in onethink v.1.1 allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component...

9.8CVSS7.7AI score0.00899EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•1 views

CVE-2024-33445: Improper Control of Generation of Code

An issue in hisiphp v2.0.111 allows a remote attacker to execute arbitrary code via a crafted script to the SystemPlugins::mkInfo parameter in the SystemPlugins.php component...

9.8CVSS6.5AI score0.01349EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/04/29 12:00 a.m.•47 views

CVE-2024-33443

An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsController.class.php component...

7.7AI score0.00705EPSS
SaveExploits1References2
Rows per page
Query Builder