Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 4:37 a.m.2 views

CVE-2019-15836

The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS...

5.4CVSS6.8AI score0.00259EPSS
Exploits0References1
CNVD
CNVD
added 2022/02/10 12:0 a.m.22 views

Unspecified Vulnerability in Bentley Systems Bentley View (CNVD-2022-15836)

Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A security vulnerability exists in Bentley View that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.7AI score0.00621EPSS
Exploits0References1
CVE
CVE
added 2021/02/01 1:44 a.m.62 views

CVE-2020-15836

CVE-2020-15836 affects Mofi Network MOFI4500-4GXeLTE devices running 4.1.5-std. The root cause is an authentication function that passes untrusted data to the operating system without proper sanitization, enabling a crafted request to execute arbitrary commands as root. The available documents do...

10CVSS9.8AI score0.00937EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/08/30 4:8 p.m.9 views

CVE-2019-15836

The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS...

5.6AI score0.00259EPSS
Exploits0References2
CVE
CVE
added 2019/08/30 4:8 p.m.328 views

CVE-2019-15836

CVE-2019-15836 affects the WordPress plugin wp-ultimate-recipe, with stored XSS in versions before 3.12.7. The vulnerability is introduced in the plugin code and leads to client‑side code execution when exploited. Remediation per available sources is to upgrade to version 3.12.7 or later. Exploit...

5.4CVSS5.5AI score0.00259EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2018/09/28 3:49 a.m.16 views

CVE-2018-15836

In verifysignedhash in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2...

7.5CVSS4.2AI score0.00149EPSS
Exploits0References2
NVD
NVD
added 2018/09/26 9:29 p.m.11 views

CVE-2018-15836

In verifysignedhash in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2...

7.5CVSS7.5AI score0.00149EPSS
Exploits0References3
CVE
CVE
added 2018/09/26 9:0 p.m.45 views

CVE-2018-15836

CVE-2018-15836 affects Openswan before 2.6.50.1. In verify_signed_hash() (lib/liboswkeys/signatures.c), the RSA PKCS#1 v1.5 padding value is not verified during signature verification, enabling signature forgery when small public exponents are used. IKEv2 signature verification is affected when R...

7.5CVSS7.5AI score0.00149EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2018/04/03 5:0 p.m.50 views

CVE-2017-15836

Summary: CVE-2017-15836 describes a potential integer overflow leading to a buffer overflow in Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernels before 2018-04-05, triggered when the firmware sends a service ready event containing a very large value for n...

7.5CVSS7.1AI score0.0011EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder