Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:33 a.m.3 views

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00144EPSS
Exploits0References1
CVE
CVE
added 2025/04/03 12:0 a.m.38 views

CVE-2025-29504

The CVE-2025-29504 entry concerns the student-manage product (version 1) with an insecure permission verification that enables local privilege escalation. The advisory indicates a local attack vector with high impact to confidentiality, integrity, and availability (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/...

7.8CVSS7AI score0.00176EPSS
Exploits1References1Affected Software1
vulnersOsv
vulnersOsv
added 2024/04/11 12:30 a.m.1 views

@bidvine/react-summernote (=2.0.2), @uday_test/wm_codegen_angular_app (=0.0.0) +14 more potentially affected by CVE-2024-29504 via summernote (>=0.5.9 <=0.8.18)

summernote NPM version =0.5.9, =1.0.2, =4.8.14, =4.9.23, =4.9.23, =4.9.23, =4.9.23, =5.0.6, =1.0.0, =0.0.1, =1.2.1 - wm-ng-webcomponent =1.0.1 and more Source cves: CVE-2024-29504 Source advisory: OSV:GHSA-4WH3-3WF2-39M9...

7.6CVSS7.1AI score0.00603EPSS
Exploits1
CVE
CVE
added 2024/04/10 12:0 a.m.62 views

CVE-2024-29504

CVE-2024-29504 affects Summernote up to v0.8.18 (and earlier). The root cause described across connected sources is improper sanitization of the codeview parameter, leading to Cross Site Scripting (XSS) that can allow execution of arbitrary JavaScript in the context of the affected page. Impact d...

7.6CVSS6.8AI score0.00603EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/04/10 12:0 a.m.11 views

CVE-2024-29504

Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted payload to the codeview parameter...

6.7AI score0.00603EPSS
Exploits1References2
Circl
Circl
added 2024/02/02 5:26 p.m.2 views

CVE-2020-29504

creationtimestamp| type| source ---|---|--- 2024-02-02 17:26:44+00:00| seen| https://t.me/ctinow/178163 2024-02-25 10:41:38+00:00| seen| https://t.me/ctinow/192823...

9.8CVSS8.7AI score0.00175EPSS
Exploits0References2
CVE
CVE
added 2024/02/02 3:58 p.m.37 views

CVE-2020-29504

Dell BSAFE Crypto-C Micro Edition (before 4.1.5) and Dell BSAFE Micro Edition Suite (before 4.5.2) are affected by a Missing Required Cryptographic Step vulnerability. The issue, documented across multiple sources, can impact confidentiality, integrity, and availability and is rated high/critical...

9.8CVSS9.4AI score0.00175EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/11/14 7:15 p.m.1 views

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2023/11/14 7:15 p.m.8 views

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS0.00144EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/14 7:5 p.m.10 views

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS8AI score0.00144EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/11/14 7:5 p.m.17 views

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.1AI score0.00144EPSS
Exploits0References1
CVE
CVE
added 2023/11/14 7:5 p.m.31 views

CVE-2023-29504

CVE-2023-29504 concerns Intel® RealSense™ Dynamic Calibration software earlier than 2.13.1.0, where an Uncontrolled search path element could allow an authenticated local user to escalate privileges. The vulnerability affects the Intel RealSense Dynamic Calibration component and is triggered via ...

7.8CVSS7.7AI score0.00144EPSS
Exploits0References1Affected Software1
Intel
Intel
added 2023/11/14 12:0 a.m.16 views

Intel® RealSense™ Dynamic Calibration Software Advisory

Summary: A potential security vulnerability in some Intel® RealSense™ Dynamic Calibration software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-29504 Description: Uncontrolled search path...

7.8CVSS7.1AI score0.00144EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 3:43 a.m.2 views

SUSE CVE-2021-29504

WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communication to remotely disable the certificate verification on WP-CLI side, gaining full control over the...

7.4CVSS7.8AI score0.01149EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/09/29 4:35 p.m.8 views

CVE-2022-29504

...

Exploits0
CVE
CVE
added 2022/09/29 4:35 p.m.27 views

CVE-2022-29504

CVE-2022-29504 is linked to a memory corruption vulnerability in the uClibC/uClibC-ng libraries (cpLocation function) affecting uClibC 0.9.33.2 and uClibC-ng 1.0.40. Talos ties this to TALOS-2022-1517 and notes potential impact on Unix-based devices using these libraries. PT-2022-4861 describes a...

7.2AI score
Exploits0
Rows per page
Query Builder