Lucene search
+L

147 matches found

Cvelist
Cvelist
added 2023/04/08 11:00 a.m.35 views

CVE-2023-1959 SourceCodester Online Computer and Laptop Store sql injection

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=savecategory. The manipulation of the argument category leads to sql injection. The attack can be initiated...

6.5CVSS9.2AI score0.00717EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2023/03/08 12:00 a.m.13 views

Debian: Security Advisory (DSA-1959-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.03285EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/02/23 12:00 a.m.60 views

Amazon Linux 2 : rust (ALAS-2023-1959)

The version of rust installed on the remote host is prior to 1.66.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1959 advisory. Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code ...

8.1CVSS8.1AI score0.01198EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:03 a.m.8 views

SUSE CVE-2009-1959

Off-by-one error in the eventwallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service crash via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow...

5CVSS7AI score0.08385EPSS
SaveExploits2References4
Circl
Circl
added 2022/09/30 8:36 p.m.11 views

CVE-2022-1959

creationtimestamp| type| source ---|---|--- 2022-09-30 20:36:27+00:00| seen| https://t.me/cibsecurity/50787...

6.6CVSS6.4AI score0.00435EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/30 5:15 p.m.11 views

CVE-2022-1959

AppLock version 7.9.29 allows an attacker with physical access to the device to bypass biometric authentication. This is possible because the application did not correctly implement fingerprint validations...

6.6CVSS5.8AI score0.00435EPSS
SaveExploits1References2
NVD
NVD
added 2022/09/30 5:15 p.m.14 views

CVE-2022-1959

AppLock version 7.9.29 allows an attacker with physical access to the device to bypass biometric authentication. This is possible because the application did not correctly implement fingerprint validations...

6.6CVSS0.00435EPSS
SaveExploits1References2
CVE
CVE
added 2022/09/30 4:22 p.m.59 views

CVE-2022-1959

CVE-2022-1959 affects AppLock version 7.9.29, where biometric authentication can be bypassed by an attacker with physical access due to improper fingerprint validation. Multiple connected sources corroborate the flaw in AppLock 7.9.29 and describe the impact as bypassing biometric auth. Reported ...

6.6CVSS6.2AI score0.00435EPSS
SaveExploits1References2Affected Software1
Circl
Circl
added 2021/10/20 12:35 p.m.11 views

CVE-2021-1959

creationtimestamp| type| source ---|---|--- 2021-10-20 12:35:20+00:00| seen| https://t.me/cibsecurity/30861...

7.8CVSS7.5AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/20 6:31 a.m.73 views

CVE-2021-1959

CVE-2021-1959 describes memory corruption due to a missing bound check on an input index in Qualcomm Snapdragon components across Snapdragon Auto, Compute, Connectivity, Consumer/Industrial IoT, IoT, Mobile, Voice & Music, and Wearables. The vulnerability is triggered locally and has a high impac...

7.8CVSS7.5AI score0.00169EPSS
SaveExploits0References1Affected Software1
Rosalinux
Rosalinux
added 2021/07/02 6:04 p.m.122 views

Advisory ROSA-SA-2021-1959

Software: qt 4.8.7 OS: Cobalt 7.9 CVE-ID: CVE-2014-0190 CVE-Crit: HIGH CVE-DESC: The GIF decoder in QtGui in Qt before version 5.3 allows remote attackers to cause a denial of service dereferencing a NULL pointer via invalid width and height values in a GIF image. CVE-STATUS: default CVE-REV:...

9.8CVSS7.8AI score0.06311EPSS
SaveExploits2
NVD
NVD
added 2020/05/04 1:15 p.m.59 views

CVE-2020-1959

A Server-Side Template Injection was identified in Apache Syncope prior to 2.1.6 enabling attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution RCE vulnerability. Apache Syncope uses Java Bean Validation JSR 380 custom constraint validators. When...

9.8CVSS9.8AI score0.04861EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/04 1:15 p.m.38 views

CVE-2020-1959

A Server-Side Template Injection was identified in Apache Syncope prior to 2.1.6 enabling attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution RCE vulnerability. Apache Syncope uses Java Bean Validation JSR 380 custom constraint validators. When...

9.8CVSS7.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2019/10/04 9:44 p.m.19 views

CVE-2009-1959

Off-by-one error in the eventwallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service crash via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow...

5CVSS6.9AI score0.08385EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
added 2019/10/04 7:52 p.m.17 views

CVE-2008-1959

Stack-based buffer overflow in the getremotevideoportmedia function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SIP message. NOTE: some of these details are obtained from third party information...

7.5CVSS8.3AI score0.03485EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:00 a.m.45 views

RHEL 8 : kernel (RHSA-2019:1959)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1959 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: insufficient input validation ...

9.8CVSS6.7AI score0.05789EPSS
SaveExploits0References11
CVE
CVE
added 2019/08/08 7:35 a.m.63 views

CVE-2019-1959

Cisco NFV Infrastructure Software (NFVIS) contains an Arbitrary File Read vulnerability (CVE-2019-1959) that can be exploited by an authenticated, local attacker to read arbitrary files on the underlying OS. The issue affects NFVIS versions prior to 3.11.1; root cause details are not fully disclo...

4.4CVSS4.7AI score0.00351EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2019/05/02 4:45 a.m.40 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. A heap-based buffer overflow flaw was found in the way Wireshark handled Endace ERF Extensible Record Format capture files. If Wireshark opened a...

4.3CVSS7AI score0.06523EPSS
SaveExploits9References20Affected Software1
Veracode
Veracode
added 2019/05/02 4:45 a.m.40 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. A heap-based buffer overflow flaw was found in the way Wireshark handled Endace ERF Extensible Record Format capture files. If Wireshark opened a...

4.3CVSS7AI score0.06523EPSS
SaveExploits9References20Affected Software1
Veracode
Veracode
added 2019/05/02 4:45 a.m.34 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. A heap-based buffer overflow flaw was found in the way Wireshark handled Endace ERF Extensible Record Format capture files. If Wireshark opened a...

4.3CVSS7AI score0.06523EPSS
SaveExploits9References17Affected Software1
Rows per page
Query Builder