Lucene search
K

21 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:50 p.m.5 views

CVE-2022-30771

Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions. This issue was discovered by Insyde engineering during a security review. Fixed in:...

8.2CVSS7.1AI score0.00051EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:31 p.m.4 views

CVE-2021-30771

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14.6. Processing a maliciously crafted font file may lead to arbitrary code execution...

7.8CVSS6.8AI score0.00406EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/29 12:12 p.m.6 views

CVE-2025-30771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alain-Aymerick FRANCOIS WP Cassify wp-cassify allows DOM-Based XSS.This issue affects WP Cassify: from n/a through = 2.3.5...

6.5CVSS7.2AI score0.00174EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.3 views

CVE-2025-30771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alain-Aymerick FRANCOIS WP Cassify wp-cassify allows DOM-Based XSS.This issue affects WP Cassify: from n/a through = 2.3.5...

6.5CVSS0.00174EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/27 10:54 a.m.10 views

CVE-2025-30771 WordPress WP Cassify plugin <= 2.3.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alain-Aymerick FRANCOIS WP Cassify wp-cassify allows DOM-Based XSS.This issue affects WP Cassify: from n/a through = 2.3.5...

6.5CVSS0.00174EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 10:37 a.m.9 views

CVE-2023-30771

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of...

9.8CVSS6.7AI score0.00315EPSS
Exploits0References1
Circl
Circl
added 2023/04/17 12:28 p.m.1 views

CVE-2023-30771

creationtimestamp| type| source ---|---|--- 2023-04-17 12:28:13+00:00| seen| https://t.me/cibsecurity/62265...

9.8CVSS8.7AI score0.00315EPSS
Exploits0References1
OSV
OSV
added 2023/04/17 8:15 a.m.13 views

CVE-2023-30771

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of...

9.8CVSS9.3AI score
Exploits0References2
NVD
NVD
added 2023/04/17 8:15 a.m.8 views

CVE-2023-30771

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of...

9.8CVSS9.4AI score0.00315EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2023/04/17 8:15 a.m.1 views

anylearn (>=0.20.5 <=0.20.7rc3), pymetard (>=0.0.1 <=0.0.4) potentially affected by CVE-2023-30771 via apache-iotdb (=1.3.2.post0)

apache-iotdb PYPI version =1.3.2.post0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-iotdb and may be impacted: - anylearn =0.20.5, =0.0.1, =0.0.4 Source cves: CVE-2023-30771 Source advisory: OSV:PYSEC-2023-8...

9.8CVSS7.2AI score0.00315EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2023/04/17 7:26 a.m.11 views

CVE-2023-30771 Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of...

9.4AI score0.00315EPSS
Exploits0References2
CVE
CVE
added 2023/04/17 7:26 a.m.55 views

CVE-2023-30771

CVE-2023-30771 concerns Apache IoTDB’s optional iotdb-web-workbench web console. The vulnerability is an Incorrect Authorization issue affecting iotdb-web-workbench version 0.13.3, allowing high-severity impact on confidentiality, integrity, and availability (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:...

9.8CVSS9.4AI score0.00315EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2022/11/15 9:15 p.m.10 views

CVE-2022-30771

Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions. This issue was discovered by Insyde engineering during a security review. Fixed in:...

8.2CVSS0.00051EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/11/15 12:0 a.m.5 views

CVE-2022-30771

Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions Initialization function in PnpSmm could lead to SMRAM corruption when using subsequent PNP SMI functions. This issue was discovered by Insyde engineering during a security review. Fixed in:...

7.1AI score0.00051EPSS
Exploits0References2
CVE
CVE
added 2022/11/15 12:0 a.m.52 views

CVE-2022-30771

CVE-2022-30771 affects InsydeH2O BIOS (5.1–5.5) via an initialization function in PnpSmm that may cause SMRAM corruption when using subsequent PNP SMI functions. Root cause: initialization path in PnpSmm. Impact: potential SMRAM corruption with high confidentiality, integrity, and availability im...

8.2CVSS8.2AI score0.00051EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2022/03/18 9:22 p.m.1 views

CVE-2021-30771

creationtimestamp| type| source ---|---|--- 2022-03-18 21:22:53+00:00| seen| https://t.me/cibsecurity/39224...

7.8CVSS6.7AI score0.00406EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/18 6:15 p.m.3 views

CVE-2021-30771

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14.6. Processing a maliciously crafted font file may lead to arbitrary code execution...

7.8CVSS5.8AI score0.00406EPSS
Exploits0References5
NVD
NVD
added 2022/03/18 6:15 p.m.15 views

CVE-2021-30771

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14.6. Processing a maliciously crafted font file may lead to arbitrary code execution...

7.8CVSS0.00406EPSS
Exploits0References4
CVE
CVE
added 2022/03/18 5:59 p.m.77 views

CVE-2021-30771

The CVE-2021-30771 entry affects Apple’s FontParser component (macOS Big Sur 11.4, iOS 14.6/iPadOS 14.6, watchOS 7.5, tvOS 14.6). It is caused by an out-of-bounds write when processing a maliciously crafted font file, with the impact described as arbitrary code execution. Apple’s advisory indicat...

7.8CVSS7.8AI score0.00406EPSS
Exploits0References4Affected Software5
Apple
Apple
added 2021/05/24 12:0 a.m.108 views

About the security content of watchOS 7.5

About the security content of watchOS 7.5 This document describes the security content of watchOS 7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS9.6AI score0.01256EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder