10 matches found
CVE-2020-29280
The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page...
CVE-2025-29280
Stored cross-site scripting vulnerability exists in PerfreeBlog v4.0.11 in the website name field of the backend system settings interface allows an attacker to insert and execute arbitrary malicious code...
CVE-2023-29280
Adobe Substance 3D Painter (versions 8.3.0 and earlier) is affected by an out-of-bounds read in PLY/file parsing that could yield code execution in the current user context. Exploitation requires user interaction (open a malicious file). A vendor security update APSB23-29 addresses critical/impor...
CVE-2022-29280
CVE-2022-29280 is a reservation duplicate of CVE-2022-28366 and is not a separate active vulnerability entry; the connected details show the underlying issue in HtmlUnit-NekoHtml/ CyberNeko HTML: a denial-of-service via crafted Processing Instruction input causing heap memory consumption. Affecte...
CVE-2021-29280
creationtimestamp| type| source ---|---|--- 2021-08-19 20:18:21+00:00| seen| https://t.me/cibsecurity/27611...
CVE-2021-29280
CVE-2021-29280 concerns a vulnerability in the TP-Link Wireless N Router WR840N where an ARP poisoning attack can lead to a buffer overflow. Multiple sources in connected documents confirm the affected device and the attack vector, with root cause described as ARP manipulation causing overflow. T...
CVE-2020-29280
creationtimestamp| type| source ---|---|--- 2020-12-03 00:55:19+00:00| seen| https://t.me/cibsecurity/17061...
CVE-2020-29280
The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page...
CVE-2020-29280
Victor CMS v1.0 is vulnerable to SQL injection via the search parameter on search.php. The vulnerability arises from unsanitized input in the search parameter, enabling potentially unauthorized data access and manipulation. CVSS data indicates high impact (C/I/A partial to high across v2/v3) with...