13 matches found
UBUNTU-CVE-2026-13070
A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling validation is enabled by default for outgoing TLS connections. Affected scenarios require the remote peer to hold a...
CVE-2025-13070
The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as contributor to perform LFI attacks...
CVE-2025-13070
creationtimestamp| type| source ---|---|--- 2025-12-09 08:02:04+00:00| seen| https://gist.github.com/Darkcrai86/baacc8ad5563c97f761a4ef6885de84e 2025-12-09 09:28:24+00:00| seen| https://gist.github.com/Darkcrai86/96e109b213679104d177602e4c03bfe1...
CVE-2018-13070
The mintToken function of a smart contract implementation for EncryptedToken ECC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2024-13070
creationtimestamp| type| source ---|---|--- 2024-12-31 14:35:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113747934429813549 2024-12-31 15:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemdnc6usk22 2024-12-31 17:03:40+00:00| seen|...
CVE-2024-13070
The CVE-2024-13070 entry concerns CodeAstro Online Food Ordering System 1.0. The vulnerability is described as a SQL injection in the Update User Page, specifically the /admin/update_users.php functionality, where manipulating the argument (user_upd or similar) enables remote exploitation. Multip...
CVE-2020-13070
CVE-2020-13070 is rejected and does not represent an active vulnerability entry.
CVE-2019-13070
CVE-2019-13070 is a stored XSS vulnerability in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0. The issue allows a privileged attacker to embed malicious JavaScript via the SNMP trap receivers form; when a user visits the /agent/action_recipient Event Action/Recipient ...
CVE-2018-13070
The mintToken function of a smart contract implementation for EncryptedToken ECC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2018-13070
CVE-2018-13070 affects the EncryptedToken (ECC) Ethereum smart contract. The issue is an integer overflow in the mintToken function that allows the contract owner to arbitrarily set any user’s balance. The Red Hat and CNVD entries corroborate the same description. Exploitation details are not pro...
CVE-2017-13070
A DLL Hijacking vulnerability in QNAP Qsync for Windows exe version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines...
CVE-2017-13070
A DLL Hijacking vulnerability in QNAP Qsync for Windows exe version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines...
Fedora Update for rubygem-httpclient FEDORA-2014-13070
Check the version of rubygem-httpclient SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868441";...