131 matches found
CVE-2026-28221 Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer overflow exists in printhexstring in wazuh-remoted. The bug is triggered when formatting attacker-controlled bytes using sprintfdstbuf +...
EUVD-2026-26270
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer overflow exists in printhexstring in wazuh-remoted. The bug is triggered when formatting attacker-controlled bytes using sprintfdstbuf +...
CVE-2026-1514
creationtimestamp| type| source ---|---|--- 2026-01-28 03:29:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10659-264cd-2.html 2026-01-28 05:26:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdhjy5d4gq2t...
EUVD-2010-1210
Malware in sbrugna...
EUVD-2019-1514
Malware in sbrugna...
ECHO-DF3A-1514-72F7
Bulletin has no description...
CVE-2011-1514
The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request containing crafted parameters...
Exploit for Improper Certificate Validation in Hitachienergy Rtu500_Scripting_Interface
CVE-2023-1514-S...
CVE-2025-1514
The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to unauthorized filter calling due to insufficient restrictions on the getsmth function in all versions up to, and including, 1.0.6.7. This makes it possible for unauthenticated attacke...
CVE-2025-1514
CVE-2025-1514 (Active Products Tables for WooCommerce) affects the WordPress plugin by allowing unauthenticated attackers to call arbitrary WordPress filters due to insufficient restrictions on get_smth() in all versions up to 1.0.6.7. Impact is unauthorized filter invocation (no exploitation vec...
CVE-2025-1514 Active Products Tables for WooCommerce <= 1.0.6.7 - Unauthenticated Arbitrary Filter Call
The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to unauthorized filter calling due to insufficient restrictions on the getsmth function in all versions up to, and including, 1.0.6.7. This makes it possible for unauthenticated attacke...
Wazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wazuh. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Analysis Engine service, which listens on TCP port 1514 by default. The issue results from the...
Oracle Linux 8 : libreoffice (ELSA-2024-1514)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1514 advisory. - Fix CVE-2023-6185 escape url passed to gstreamer Tenable has extracted the preceding description block directly from the Oracle Linux security...
RHEL 8 : libreoffice (RHSA-2024:1514)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1514 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor...
CVE-2024-1514
creationtimestamp| type| source ---|---|--- 2024-03-14 19:27:03+00:00| seen| https://t.me/ctinow/208059...
CVE-2024-1514
CVE-2024-1514 affects the WP eCommerce plugin for WordPress. It allows time-based blind SQL injection via the cart_contents parameter in all versions up to 3.15.1 due to insufficient escaping and lack of prepared statements, enabling unauthenticated attackers to append SQL to existing queries to ...
WordPress WP eCommerce Plugin <= 3.15.1 is vulnerable to SQL Injection
Software WP eCommerce Type Plugin Vulnerable versions = 3.15.1 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-1514 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID f754fed772bb Credits Krzysztof Zając Required privilege Unauthenticated...
CVE-2023-1514
creationtimestamp| type| source ---|---|--- 2024-01-12 23:46:34+00:00| seen| https://t.me/ctinow/167607 2024-11-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-05...
CVE-2023-1514
Hitachi Energy RTU500 Scripting Interface has a TLS trust-management flaw: if a client does not validate certificate parameters, an attacker could forge the identity of an RTU500 device and intercept messages via the scripting interface. Affected component: RTU500 Scripting interface (Hitachi Ene...