Lucene search
K

10 matches found

Patchstack
Patchstack
added 2025/12/17 10:16 p.m.4 views

WordPress Ultimate Member plugin <= 2.11.0 - Authenticated (Subscriber+) Profile Privacy Setting Bypass vulnerability

Authenticated Subscriber+ Profile Privacy Setting Bypass vulnerability discovered by Boris Bogosavac in WordPress Plugin Ultimate Member versions = 2.11.0...

4.3CVSS6.8AI score0.00039EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.1 views

Trend Micro Apex One Multiple Vulnerabilities (KA-0020652)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 14081 and Agent Build 14081. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability in Trend Micro Apex One...

9.8CVSS8.5AI score0.13892EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 4:19 p.m.6 views

CVE-2020-14081

TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action sendlogemail with the key authacname or authpasswd, allowing an authenticated user to run arbitrary commands on the device...

9CVSS7.3AI score0.09413EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:6 a.m.4 views

CVE-2019-14081

Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networki...

7.1CVSS7.2AI score0.00033EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/06/15 3:36 a.m.12 views

CVE-2020-14081

TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action sendlogemail with the key authacname or authpasswd, allowing an authenticated user to run arbitrary commands on the device...

8.9AI score0.09413EPSS
Exploits0References1
CVE
CVE
added 2020/06/15 3:36 a.m.55 views

CVE-2020-14081

TRENDnet TEW-827DRU routers (firmware up to 2.06B04) contain a command injection in apply.cgi via the action send_log_email using the auth_acname or auth_passwd parameter. An authenticated user can execute arbitrary commands on the device. The affected component is the apply.cgi handling in TEW-8...

9CVSS8.8AI score0.09413EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/03/05 8:56 a.m.18 views

CVE-2019-14081

Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networki...

7AI score0.00033EPSS
Exploits0References1
CVE
CVE
added 2020/03/05 8:56 a.m.47 views

CVE-2019-14081

CVE-2019-14081 describes a buffer over-read in the WLAN module when handling a WMI message for SAR limits with an invalid number of limits. Affected products include Snapdragon family components (Compute/Consumer Connectivity/IoT lines and related APQ/IPQ/SDM/QCA/QCN/SDA devices). The root cause ...

7.1CVSS7AI score0.00033EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2017/09/22 4:29 p.m.8 views

CVE-2017-14081

Proxy command injection vulnerabilities in Trend Micro Mobile Security Enterprise versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations...

8.8CVSS9.2AI score0.10279EPSS
Exploits1References4
CVE
CVE
added 2017/09/22 4:0 p.m.48 views

CVE-2017-14081

CVE-2017-14081 involves Trend Micro Mobile Security for Enterprise (pre-9.7 Patch 3) with a proxy command injection flaw in the modTMCSS Proxy functionality. A remote attacker can execute arbitrary code by manipulating parameters used to spawn system calls. ZDI advisories (ZDI-17-752, ZDI-17-774)...

8.8CVSS9.2AI score0.10279EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder