Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 2:50 a.m.4 views

CVE-2023-21252

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00035EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:51 p.m.4 views

CVE-2020-21252

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter...

8.8CVSS8.1AI score0.00896EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 9:12 a.m.5 views

CVE-2018-21252

An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3. Attackers could use multiple e-mail addresses to bypass a domain-based policy for signups...

4.3CVSS6.9AI score0.00152EPSS
Exploits0References1
NVD
NVD
added 2025/01/14 6:15 p.m.7 views

CVE-2025-21252

Windows Telephony Service Remote Code Execution Vulnerability...

8.8CVSS0.0225EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/14 6:3 p.m.17 views

CVE-2025-21252 Windows Telephony Service Remote Code Execution Vulnerability

...

8.8CVSS8.7AI score0.0225EPSS
Exploits0References1
CVE
CVE
added 2025/01/14 6:3 p.m.87 views

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

8.8CVSS9AI score0.0225EPSS
Exploits0References1Affected Software15
Vulnrichment
Vulnrichment
added 2024/10/15 7:52 p.m.12 views

CVE-2024-21252

...

8.1CVSS7AI score0.01437EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/15 7:52 p.m.16 views

CVE-2024-21252

...

8.1CVSS0.01437EPSS
Exploits0References1
Circl
Circl
added 2023/10/06 10:13 p.m.0 views

CVE-2023-21252

creationtimestamp| type| source ---|---|--- 2023-10-06 22:13:49+00:00| seen| https://t.me/cibsecurity/71761...

5.5CVSS5.5AI score0.00035EPSS
Exploits0References1
NVD
NVD
added 2023/10/06 7:15 p.m.15 views

CVE-2023-21252

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.4AI score0.00035EPSS
Exploits0References3
CVE
CVE
added 2023/10/06 6:48 p.m.160 views

CVE-2023-21252

CVE-2023-21252 affects Android’s WifiConfigurationUtil.java, specifically its validatePassword function. The root cause is improper input validation, which can cause the device to boot loop and result in local denial of service without requiring user interaction. The issue is categorized as DoS w...

5.5CVSS5.3AI score0.00035EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/06/20 3:15 p.m.0 views

CVE-2020-21252

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter...

8.8CVSS6.1AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/06/20 12:0 a.m.11 views

CVE-2020-21252

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter...

8.3AI score0.00896EPSS
Exploits1References1
CVE
CVE
added 2023/06/20 12:0 a.m.44 views

CVE-2020-21252

CVE-2020-21252 affects Neeke HongCMS 3.0.0. The vulnerability is a CSRF issue that can let an attacker remotely execute arbitrary code and elevate privileges via the updateusers parameter. Documented under CVE-2020-21252 with CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (base score 8.8). Exploi...

8.8CVSS9AI score0.00896EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/06/20 12:0 a.m.13 views

CVE-2020-21252

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter...

9.1AI score0.00896EPSS
Exploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/27 5:17 p.m.34 views

Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerability CVE-2021-21252

Summary There is a vulnerability CVE-2021-21252 which affects IBM Engineering Workflow Management EWM. Vulnerability Details CVEID:CVE-2021-21252 DESCRIPTION: jQuery Validation Plugin is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw when validating...

7.5CVSS6.2AI score0.00727EPSS
Exploits0Affected Software1
CVE
CVE
added 2022/01/19 11:22 a.m.143 views

CVE-2022-21252

CVE-2022-21252 is an Oracle WebLogic Server vulnerability, affecting the Samples component in Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.1.0.0. The issue allows an unauthenticated attacker, over HTTP, to compromise WebLogic Server, enabling unauthorized update/insert/delete oper...

6.5CVSS5.7AI score0.00968EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/01/13 12:0 a.m.318 views

CVE-2021-21252

CVE-2021-21252 affects the jquery-validation (jquery-validation) package. It is a ReDoS (Regular Expression Denial of Service) in Regular Expressions used by the plugin prior to version 1.19.3. The issue is fixed in 1.19.3. Public sources in the connected docs (NVD, GitHub advisory GHSA-jxwx-85vp...

7.5CVSS6.1AI score0.00727EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2020/06/19 5:44 p.m.34 views

CVE-2018-21252

CVE-2018-21252 affects Mattermost Server prior to 5.2, 5.1.1, 5.0.3, and 4.10.3. Attackers could bypass domain-based signup policies by using multiple email addresses. The provided connected documents confirm affected versions and the bypass behavior; no remediation or exploitation details are in...

4.3CVSS4.6AI score0.00152EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder