Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:16 p.m.3 views

CVE-2026-42738

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Stored XSS.This issue affects Smart Online Order for Clover: from n/a through = 1.6.0...

7.1CVSS5.4AI score0.00036EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:21 a.m.6 views

CVE-2023-42738

In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

7.8CVSS7.2AI score0.00022EPSS
Exploits0
Circl
Circl
added 2024/08/13 5:7 p.m.1 views

CVE-2024-42738

creationtimestamp| type| source ---|---|--- 2024-08-13 17:07:05+00:00| seen| https://t.me/cvedetector/3022...

8.8CVSS4.8AI score0.05425EPSS
Exploits1References1
NVD
NVD
added 2024/08/13 2:15 p.m.17 views

CVE-2024-42738

In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setDmzCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands...

8.8CVSS0.05425EPSS
Exploits1References1
Circl
Circl
added 2023/12/23 8:1 a.m.1 views

CVE-2023-42738

creationtimestamp| type| source ---|---|--- 2023-12-23 08:01:30+00:00| seen| https://t.me/ctinow/158711...

7.8CVSS7.5AI score0.00022EPSS
Exploits0References1
NVD
NVD
added 2023/12/04 1:15 a.m.10 views

CVE-2023-42738

In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

7.8CVSS0.00022EPSS
Exploits0References1
OSV
OSV
added 2023/12/04 1:15 a.m.2 views

CVE-2023-42738

In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

7.8CVSS5.9AI score0.00022EPSS
Exploits0References1
CVE
CVE
added 2023/12/04 12:54 a.m.30 views

CVE-2023-42738

CVE-2023-42738 involves the telocom service with a missing permission check that could allow local escalation of privilege. The NVD/Red Hat/PT-Security records describe a local-privilege escalation without requiring additional execution privileges. No concrete patch/version details are provided i...

7.8CVSS7.8AI score0.00022EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/04 12:54 a.m.15 views

CVE-2023-42738

In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

8AI score0.00022EPSS
Exploits0References1
Circl
Circl
added 2021/11/22 6:24 p.m.3 views

CVE-2021-42738

creationtimestamp| type| source ---|---|--- 2021-11-22 18:24:00+00:00| seen| https://t.me/cibsecurity/32798...

9.3CVSS7.5AI score0.01803EPSS
Exploits0References1
CVE
CVE
added 2021/11/22 3:25 p.m.64 views

CVE-2021-42738

CVE-2021-42738 concerns Adobe Prelude 10.1 and earlier, with memory corruption due to insecure handling of a malicious MXF file. The vulnerability could lead to arbitrary code execution in the current user context. Exploitation requires the victim to open a specially crafted MXF file (user intera...

9.3CVSS7.8AI score0.01803EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/10/29 12:0 a.m.30 views

Adobe Prelude < 22.0 Multiple Vulnerabilities (APSB21-96)

The version of Adobe Prelude installed on the remote Windows host is prior to 22.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-96 advisory. - Adobe Prelude version 10.1 and earlier are affected by a memory corruption vulnerability. An unauthenticated attack...

9.3CVSS7.5AI score0.04942EPSS
Exploits0References12
CVE
CVE
added 1976/01/01 12:0 a.m.43 views

CVE-2022-42738

CVE-2022-42738 is rejected and not used per the Initial Description.

7.4AI score
Exploits0
Rows per page
Query Builder