Lucene search
K

17 matches found

Circl
Circl
added 2026/04/24 1:35 p.m.0 views

CVE-2026-40531

creationtimestamp| type| source ---|---|--- 2026-04-24 13:35:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkanes5drn2e...

4.8AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:28 p.m.3 views

CVE-2023-40531

Archer AX6000 firmware versions prior to 'Archer AX6000JPV11.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

8CVSS7.4AI score0.00102EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:27 a.m.1 views

CVE-2024-40531

A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions...

8.8CVSS6.5AI score0.00326EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/05 7:52 p.m.6 views

CVE-2022-40531

Memory corruption in WLAN due to incorrect type cast while sending WMISCANSCHPRIOTBLCMDID message...

8.4CVSS7AI score0.00118EPSS
Exploits0References1
Circl
Circl
added 2024/08/05 6:55 p.m.0 views

CVE-2024-40531

creationtimestamp| type| source ---|---|--- 2024-08-05 18:55:56+00:00| seen| https://t.me/cvedetector/2472...

8.8CVSS4.8AI score0.00326EPSS
Exploits0References1
NVD
NVD
added 2024/08/05 4:15 p.m.12 views

CVE-2024-40531

A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions...

8.8CVSS0.00326EPSS
Exploits0References1
CVE
CVE
added 2024/08/05 12:0 a.m.21 views

CVE-2024-40531

CVE-2024-40531 affects Pantera CRM versions 401.152 and 402.072. The vulnerability is a mass assignment flaw in profile management that allows an authenticated user to inject extra parameters and modify any user attribute, including roles. CVSS 3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, bas...

8.8CVSS8.4AI score0.00326EPSS
Exploits0References1
Circl
Circl
added 2023/09/06 2:17 p.m.3 views

CVE-2023-40531

creationtimestamp| type| source ---|---|--- 2023-09-06 14:17:50+00:00| seen| https://t.me/cibsecurity/69986...

8CVSS7.9AI score0.00102EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/09/06 9:21 a.m.15 views

CVE-2023-40531

Archer AX6000 firmware versions prior to 'Archer AX6000JPV11.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...

8.1AI score0.00102EPSS
Exploits0References2
CVE
CVE
added 2023/09/06 9:21 a.m.40 views

CVE-2023-40531

The CVE-2023-40531 issue affects TP-Link Archer AX6000 family firmware. A network-adjacent, authenticated attacker can execute arbitrary OS commands due to a vulnerability in versions prior to Archer AX6000(JP)_V1_1.3.0 Build 20221208. The exposure stems from how the router handles input in its a...

8CVSS7.9AI score0.00102EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/03/11 12:21 a.m.1 views

CVE-2022-40531

creationtimestamp| type| source ---|---|--- 2023-03-11 00:21:20+00:00| seen| https://t.me/cibsecurity/59827...

8.4CVSS7.5AI score0.00118EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/03/07 4:43 a.m.15 views

CVE-2022-40531 Incorrect type conversion in WLAN

Memory corruption in WLAN due to incorrect type cast while sending WMISCANSCHPRIOTBLCMDID message...

8.4CVSS8.7AI score0.00118EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/03/07 4:43 a.m.16 views

CVE-2022-40531 Incorrect type conversion in WLAN

Memory corruption in WLAN due to incorrect type cast while sending WMISCANSCHPRIOTBLCMDID message...

8.4CVSS7.1AI score0.00118EPSS
Exploits0References1
CVE
CVE
added 2023/03/07 4:43 a.m.75 views

CVE-2022-40531

CVE-2022-40531: Memory corruption in WLAN due to an incorrect type cast when sending WMI_SCAN_SCH_PRIO_TBL_CMDID. Documented CVSSv3.1 base score 7.8 (NVD) / 8.4 (Qualcomm bulletin) with Local, Low-Privilege, No-User-Interaction access and High impact to confidentiality, integrity, and availabilit...

8.4CVSS8.1AI score0.00118EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/09/06 8:17 p.m.109 views

CVE-2021-40531

CVE-2021-40531 affects Sketch (macOS). The vulnerability arises when Sketch 75 or earlier allows library feeds to bypass the com.apple.quarantine attribute, causing files to be downloaded and opened automatically. This quarantine bypass can lead to remote code execution, as demonstrated by embedd...

9.8CVSS9.6AI score0.16595EPSS
Exploits2References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2010/10/20 12:0 a.m.261 views

MS10-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2027452) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, these issues could be leveraged to execute arbitrary code subject to the user's privilege...

9.3CVSS6AI score0.80447EPSS
Exploits41References13
Saint
Saint
added 2010/07/08 12:0 a.m.33 views

Microsoft Excel DBQueryExt record parsing vulnerability

Added: 07/08/2010 CVE: CVE-2010-1253 BID: 40531 OSVDB: 65228 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a spreadshee...

9.3CVSS6.3AI score0.60976EPSS
Exploits4
Rows per page
Query Builder