Lucene search
+L

96 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 11:16 a.m.•24 views

CVE-2021-0971

In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

6.5CVSS6.8AI score0.00671EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/06 1:46 a.m.•15 views

EUVD-2026-0971

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182914; Issue ID: MSV-4699...

7.8CVSS6.4AI score0.0008EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•28 views

EUVD-2024-0971

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01652EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/05/23 2:53 a.m.•21 views

CVE-2023-0971

A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered...

9.6CVSS7.1AI score0.0025EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:11 a.m.•29 views

CVE-2013-0971

Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted ink annotations in a PDF document...

6.8CVSS7.9AI score0.01844EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/02/08 4:39 a.m.•15 views

CVE-2025-0971

A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Account/EditProfile of the component Profile Editing. The manipulation of the argument username leads to cross site scripting. The attac...

5.3CVSS6.1AI score0.00292EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/03 12:15 a.m.•12 views

CVE-2025-0971

A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Account/EditProfile of the component Profile Editing. The manipulation of the argument username leads to cross site scripting. The attac...

5.4CVSS3.7AI score0.00292EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/02/02 11:31 p.m.•5 views

CVE-2025-0971 Zenvia Movidesk Profile Editing EditProfile cross site scripting

A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Account/EditProfile of the component Profile Editing. The manipulation of the argument username leads to cross site scripting. The attac...

5.3CVSS3.7AI score0.00292EPSS
SaveExploits0References3
CVE
CVE
•added 2025/02/02 11:31 p.m.•69 views

CVE-2025-0971

CVE-2025-0971 affects Zenvia Movidesk. The flaw resides in the Profile Editing component, specifically the /Account/EditProfile function, where manipulating the username parameter can trigger cross-site scripting. The issue appears to be exploitable remotely and was publicly disclosed. All eviden...

5.4CVSS3.7AI score0.00292EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/03/23 12:00 a.m.•54 views

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2024:0971-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0971-1 advisory. Firefox Extended Support Release 115.9.0 ESR bsc1221327: - CVE-2024-0743: Crash in NSS TLS method bmo1867408. - CVE-2024-2605:...

8.8CVSS6.9AI score0.01285EPSS
SaveExploits4References22
Circl
Circl
•added 2024/02/07 1:26 a.m.•17 views

CVE-2024-0971

creationtimestamp| type| source ---|---|--- 2024-02-07 01:26:39+00:00| seen| https://t.me/ctinow/180452 2024-03-01 15:46:11+00:00| seen| https://t.me/ctinow/197740...

6.5CVSS6.3AI score0.00779EPSS
SaveExploits0References2
CVE
CVE
•added 2024/02/06 11:38 p.m.•93 views

CVE-2024-0971

CVE-2024-0971 is a SQL injection vulnerability in Tenable Nessus. The linked documents confirm that an authenticated, low-privileged remote attacker could potentially alter contents of the scan DB. Exploitation details are not provided beyond this CVE entry. A remediation path is indicated by Ten...

6.5CVSS6.8AI score0.00779EPSS
SaveExploits0References1Affected Software1
Tenable Product Security Advisories
Tenable Product Security Advisories
•added 2024/02/06 4:07 p.m.•148 views

[R1] Nessus Version 10.7.0 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.7.0 Fixes Multiple Vulnerabilities Arnie Cabral Tue, 02/06/2024 - 11:07 Two separate vulnerabilities were discovered, reported and fixed: A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could...

6.5CVSS6.4AI score0.00779EPSS
SaveExploits0
Circl
Circl
•added 2023/06/22 12:39 a.m.•15 views

CVE-2023-0971

creationtimestamp| type| source ---|---|--- 2023-06-22 00:39:41+00:00| seen| https://t.me/cibsecurity/65401...

9.6CVSS8.1AI score0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/06/21 7:42 p.m.•15 views

CVE-2023-0971 Command Authentication Bypass in Z/IP Gateway

A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered...

9.6CVSS7.2AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/21 7:42 p.m.•57 views

CVE-2023-0971

SiLabs Z/IP Gateway SDK 7.18.02 and earlier are affected by a logic error that allows authentication bypass, enabling remote administration of Z‑Wave controllers and recovery of S0/S2 encryption keys. The Red Hat/NVD/CVE entries corroborate this description, with no exploitation details provided ...

9.6CVSS9.2AI score0.0025EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2023/04/13 9:30 p.m.•1 views

MSC-2021-0971

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2022/07/21 11:15 p.m.•14 views

CVE-2022-0971

Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.9AI score0.01302EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2022/07/21 9:05 p.m.•82 views

CVE-2022-0971

Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.1AI score0.01302EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2022/07/21 9:05 p.m.•148 views

CVE-2022-0971

Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.4AI score0.01302EPSS
SaveExploits1
Rows per page
Query Builder