Lucene search
K

69 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:16 a.m.5 views

CVE-2021-0939

In setdefaultpassthrucfg of passthru.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

4.4CVSS6.2AI score0.00018EPSS
Exploits0References1
Photon
Photon
added 2026/01/07 12:0 a.m.2 views

Important Photon OS Security Update - PHSA-2026-4.0-0939

Updates of 'python3' packages of Photon OS have been released...

7.5CVSS7.5AI score0.00215EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:0 a.m.4 views

TencentOS Server 4: libwebp (TSSA-2024:0939)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0939 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

8.8CVSS7.4AI score0.93301EPSS
Exploits9References3
RedhatCVE
RedhatCVE
added 2025/05/23 10:9 a.m.6 views

CVE-2024-0939

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiated...

9.8CVSS7AI score0.87521EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:58 a.m.5 views

CVE-2013-0939

EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors involving cross-origin frame navigation, related to a "Cross Frame Scripting"...

5.8CVSS6.5AI score0.00224EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:28 p.m.12 views

CVE-2022-0939

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.18...

9.9CVSS6.8AI score0.0026EPSS
Exploits1References1
Circl
Circl
added 2025/02/01 7:15 a.m.4 views

CVE-2025-0939

creationtimestamp| type| source ---|---|--- 2025-02-01 07:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3xqa72pz2c 2025-02-01 07:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z4bdpmc2k 2025-02-01 09:26:09+00:00|...

6.3CVSS7.3AI score0.00049EPSS
Exploits0References5
OSV
OSV
added 2024/01/26 7:15 p.m.0 views

CVE-2024-0939

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiated...

9.8CVSS5.4AI score0.87521EPSS
Exploits1References4
CVE
CVE
added 2024/01/26 6:31 p.m.60 views

CVE-2024-0939

The CVE-2024-0939 entry concerns Byzoro Beijing Baichuo Smart S210 Management Platform (versions up to 20240117). The vulnerability lies in /Tool/uploadfile.php where manipulating the file_upload parameter allows unrestricted file uploads, enabling remote code execution and potentially compromisi...

9.8CVSS9.4AI score0.87521EPSS
Exploits1References4Affected Software1
Circl
Circl
added 2023/02/23 12:18 p.m.2 views

CVE-2023-0939

creationtimestamp| type| source ---|---|--- 2023-02-23 12:18:13+00:00| seen| https://t.me/cibsecurity/58772...

9.8CVSS8.7AI score0.0017EPSS
Exploits0References1
NVD
NVD
added 2023/02/23 8:15 a.m.8 views

CVE-2023-0939

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NTN Information Technologies Online Services Software allows SQL Injection. This issue affects Online Services Software: before 1.17...

9.8CVSS9.9AI score0.0017EPSS
Exploits0References2
CVE
CVE
added 2023/02/23 7:28 a.m.85 views

CVE-2023-0939

CVE-2023-0939 affects NTN Information Technologies Online Services Software, prior to version 1.17. It is an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands, with potential impact to confidentiality, integrity, and availability (CVSS v3.1 base score ...

9.8CVSS7.4AI score0.0017EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/02/23 7:28 a.m.13 views

CVE-2023-0939 Multiple SQL Injection on NTN Information Technologies' Online Services software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NTN Information Technologies Online Services Software allows SQL Injection. This issue affects Online Services Software: before 1.17...

9.8CVSS10AI score0.0017EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:4 a.m.1 views

SUSE CVE-2009-0939

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...

10CVSS7AI score0.0067EPSS
Exploits0References3
Circl
Circl
added 2022/04/04 2:27 p.m.2 views

CVE-2022-0939

creationtimestamp| type| source ---|---|--- 2022-04-04 14:27:42+00:00| seen| https://t.me/cibsecurity/40090...

9.9CVSS8.4AI score0.0026EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/04/04 9:40 a.m.14 views

CVE-2022-0939 Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.18...

9CVSS9.8AI score0.0026EPSS
Exploits1References2
CVE
CVE
added 2022/04/04 9:40 a.m.87 views

CVE-2022-0939

CVE-2022-0939 affects Calibre-Web (janeczku/calibre-web) before 0.6.18. It is a Server-Side Request Forgery (SSRF) vulnerability, with multiple sources confirming an SSRF issue in this project prior to 0.6.18. Reported impacts include the ability for an attacker to induce the server to fetch reso...

9.9CVSS9.4AI score0.0026EPSS
Exploits1References2Affected Software1
OpenVAS
OpenVAS
added 2022/03/24 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2022:0939-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.5AI score0.00695EPSS
Exploits7References4
Circl
Circl
added 2021/10/25 6:13 p.m.0 views

CVE-2021-0939

creationtimestamp| type| source ---|---|--- 2021-10-25 18:13:45+00:00| seen| https://t.me/cibsecurity/31121...

4.4CVSS4.6AI score0.00018EPSS
Exploits0References1
CVE
CVE
added 2021/10/25 1:20 p.m.68 views

CVE-2021-0939

CVE-2021-0939 affects the Android kernel, description states: in set_default_passthru_cfg of passthru.c there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with system privileges required; user interaction not needed. The provided ...

4.4CVSS4.3AI score0.00018EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder