Lucene search
K

16 matches found

Cvelist
Cvelist
added 2025/09/25 12:2 p.m.4 views

CVE-2025-10943 MikeCen WeChat-Face-Recognition wx.php valid cross site scripting

A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely...

5.1CVSS0.00029EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/04/25 12:0 a.m.4 views

Rockwell Automation FactoryTalk Updater Authentication Bypass (CVE-2024-10943

Binary data rockwellfactorytalkupdatercve-2024-10943.nbin...

9.1CVSS7.3AI score0.00117EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/12/19 12:0 a.m.11 views

RockyLinux 8 : kernel (RLSA-2024:10943)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:10943 advisory. kernel: selinux,smack: don't bypass permissions check in inodesetsecctx hook CVE-2024-46695 kernel: net: avoid potential underflow in qdiscpktleninit wi...

7.8CVSS7AI score0.00043EPSS
Exploits1References19
Circl
Circl
added 2024/11/12 5:1 p.m.2 views

CVE-2024-10943

creationtimestamp| type| source ---|---|--- 2024-11-12 17:01:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113471054051069316 2024-11-12 18:53:59+00:00| seen| https://t.me/cvedetector/10673 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

9.1CVSS4.8AI score0.00117EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/11/12 4:57 p.m.5 views

CVE-2024-10943 FactoryTalk® Updater Authentication Bypass

An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able to enumerate additional information required during authentication...

9.1CVSS7AI score0.00117EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/12 4:57 p.m.10 views

CVE-2024-10943 FactoryTalk® Updater Authentication Bypass

An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able to enumerate additional information required during authentication...

9.1CVSS0.00117EPSS
Exploits0References1
ICS
ICS
added 2019/12/10 12:0 a.m.62 views

Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update B)

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC S7-1200 and S7-1500 CPU families Vulnerabilities: Use of a Broken or Risky Cryptographic Algorithm, Missing Support for Integrity Check 2. UPDATE INFORMATION This updated...

7.5CVSS6.7AI score0.00139EPSS
Exploits0References5
Circl
Circl
added 2019/09/13 4:28 p.m.0 views

CVE-2016-10943

creationtimestamp| type| source ---|---|--- 2019-09-13 16:28:30+00:00| seen| https://t.me/cibsecurity/6747...

7.2CVSS7AI score0.00644EPSS
Exploits2References1
NVD
NVD
added 2019/09/13 12:15 p.m.8 views

CVE-2016-10943

The zx-csv-upload plugin 1 for WordPress has SQL injection via the id parameter...

7.2CVSS7.5AI score0.00644EPSS
Exploits2References3
CVE
CVE
added 2019/09/13 11:55 a.m.35 views

CVE-2016-10943

CVE-2016-10943 affects the WordPress plugin zx-csv-upload (version 1). The vulnerability is an SQL injection through the id parameter in the plugin’s SQL queries, as documented across multiple sources (NVD entry, Red Hat advisory, CNVD/CVE listings, and WP vulnerability records). Exploitation is ...

7.2CVSS7.5AI score0.00644EPSS
Exploits2References3Affected Software1
CVE
CVE
added 2019/08/13 6:55 p.m.76 views

CVE-2019-10943

CVE-2019-10943 affects Siemens SIMATIC devices including Drive Controller family, ET 200SP Open Controller CPUs 1515SP PC/PC2, S7-1200 CPUs, S7-1500 CPUs and related software/S7-PLCSIM Advanced. Root cause: missing integrity check allows an attacker with network access to port 102/tcp to modify t...

7.5CVSS7.3AI score0.00113EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/07/10 3:0 p.m.37 views

CVE-2018-10943

Barco ClickShare CSE-200 and CS-100 Base Units with firmware earlier than 1.6.0.3 are affected. The vulnerability arises from improper input handling on TCP port 7100: sending an arbitrary unexpected string at a certain frequency disconnects all clients and crashes the unit. The issue is document...

7.8CVSS7.5AI score0.0032EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2017/11/10 12:0 a.m.20 views

Foxit Reader Multiple Vulnerabilities (Nov 2017) - Windows

Foxit Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:reader";...

8.8CVSS8.3AI score0.1651EPSS
Exploits0References2
OSV
OSV
added 2017/10/31 7:29 p.m.1 views

CVE-2017-10943

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS5AI score
Exploits0References2
CVE
CVE
added 2017/10/31 7:0 p.m.73 views

CVE-2017-10943

CVE-2017-10943 affects Foxit Reader 8.3.0.14878 and earlier. The issue arises from PDF parsing and improper validation, causing an out-of-bounds read (read past the end of an allocated object) that can disclose sensitive information. Exploitation described in sources involves a user-assisted vect...

6.5CVSS7.2AI score0.00103EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/07/13 12:0 a.m.37 views

Foxit Reader < 8.3.1 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 8.3.1. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the AFParseDateEx function. An unauthenticated, remote attacker can exploit this, by convincing a user to open a speciall...

9.3CVSS7.2AI score0.01632EPSS
Exploits0References10
Rows per page
Query Builder