Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:31 a.m.5 views

CVE-2019-16923

kkcms 1.3 has jx.php?url= XSS...

6.1CVSS7AI score0.0024EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:8 a.m.6 views

CVE-2017-16923

Command Injection vulnerability in appdatacenter on Shenzhen Tenda Ac9 USAC9V1.0BRV15.03.05.14multiTD01, Ac9 ac9kfV15.03.05.196318cn, Ac15 USAC15V1.0BRV15.03.05.18multiTD01, Ac15 USAC15V1.0BRV15.03.05.19multiTD01, Ac18 USAC18V1.0BRV15.03.05.05multiTD01, and Ac18 ac18kfV15.03.05.196318cn devices...

8.8CVSS8.5AI score0.03467EPSS
Exploits0References1
CVE
CVE
added 2020/11/05 11:24 p.m.23 views

CVE-2018-16923

CVE-2018-16923 is rejected and does not represent an active vulnerability entry.

7.4AI score
Exploits0
OSV
OSV
added 2020/10/16 11:15 p.m.1 views

CVE-2020-16923

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafte...

7.8CVSS7.9AI score0.12332EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/10/16 10:17 p.m.21 views

CVE-2020-16923 Microsoft Graphics Components Remote Code Execution Vulnerability

...

7.8CVSS8.1AI score0.12332EPSS
Exploits0References1
CVE
CVE
added 2020/10/16 10:17 p.m.184 views

CVE-2020-16923

CVE-2020-16923 is a remote code execution vulnerability in Microsoft Graphics Components, due to improper handling of objects in memory. An attacker could execute arbitrary code on a target system by convincing a user to open a specially crafted file. Public documents consistently state the issue...

7.8CVSS8.5AI score0.12332EPSS
Exploits0References1Affected Software8
OpenVAS
OpenVAS
added 2020/10/14 12:0 a.m.34 views

Microsoft Windows Multiple Vulnerabilities (KB4580327)

This host is missing a critical security update according to Microsoft KB4580327 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.9343EPSS
Exploits10References3
Tenable Nessus
Tenable Nessus
added 2020/10/13 12:0 a.m.212 views

KB4577668: Windows 10 Version 1809 and Windows Server 2019 October 2020 Security Update

The remote Windows host is missing security update 4577668. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

9.3CVSS7.9AI score0.4098EPSS
Exploits12References48
Tenable Nessus
Tenable Nessus
added 2020/10/13 12:0 a.m.54 views

KB4580358: Windows 8.1 and Windows Server 2012 R2 October 2020 Security Update

The remote Windows host is missing security update 4580358 or cumulative update 4580347. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability...

9.3CVSS8AI score0.19942EPSS
Exploits0References23
NVD
NVD
added 2019/09/27 5:15 p.m.6 views

CVE-2019-16923

kkcms 1.3 has jx.php?url= XSS...

6.1CVSS6.3AI score0.0024EPSS
Exploits1References1
CVE
CVE
added 2019/09/27 4:51 p.m.32 views

CVE-2019-16923

CVE-2019-16923 affects kkcms 1.3 and is described as an XSS via the parameter jx.php?url=. The connected Red Hat and NVD records corroborate the same description (kkcms 1.3 has jx.php?url= XSS). Details on affected versions beyond 1.3, exact impact, exploit status, or remediation are not provided...

6.1CVSS6.3AI score0.0024EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2017/11/21 2:0 p.m.55 views

CVE-2017-16923

The CVE-2017-16923 entry describes a Command Injection vulnerability in the app_data_center component of several Shenzhen Tenda router models (e.g., Ac9, Ac15, Ac18 variants). The underlying issue is that the function sub_A6E8 usbeject_process_entry executes a system function using untrusted inpu...

8.8CVSS9.1AI score0.03467EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder