Lucene search
+L

48 matches found

CVE
CVE
added 2019/09/12 3:58 p.m.116 views

CVE-2019-6005

CVE-2019-6005 affects Smart TV Box firmware versions prior to 1300 (KDDI) where enabling LAN access after changing initial network settings allows remote attackers to access Android Debug Bridge on port 5555/TCP. The underlying issue is an access control error (CWE-284) that bypasses restrictions...

9.8CVSS9.2AI score0.02123EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/07/31 8:29 p.m.27 views

CVE-2018-14242

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.02882EPSS
SaveExploits0References2
Prion
Prion
added 2018/07/31 8:29 p.m.19 views

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS8.8AI score0.02882EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2018/07/31 8:0 p.m.29 views

CVE-2018-14242

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8AI score0.02882EPSS
SaveExploits0References2
CVE
CVE
added 2018/07/31 8:0 p.m.56 views

CVE-2018-14242

CVE-2018-14242 is a type-confusion remote code execution vulnerability in Foxit Reader, fixed by updates after Foxit Reader 9.2.0.9097. The flaw resides in the addField method and can be triggered by JavaScript actions on a malicious page or file, requiring user interaction. Impact is arbitrary c...

8.8CVSS8.8AI score0.02882EPSS
SaveExploits0References2Affected Software2
NVD
NVD
added 2018/02/17 7:29 a.m.16 views

CVE-2018-6005

SQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter...

9.8CVSS9.9AI score0.02652EPSS
SaveExploits5References1
Cvelist
Cvelist
added 2018/02/17 7:0 a.m.21 views

CVE-2018-6005

SQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter...

10AI score0.02652EPSS
SaveExploits5References1
CVE
CVE
added 2018/02/17 7:0 a.m.59 views

CVE-2018-6005

CVE-2018-6005 affects the Realpin Joomla! extension (Realpin, versions up to 1.5.04). The vulnerability is a SQL Injection in the pinboard parameter, enabling an attacker to potentially manipulate backend data. The CVE is documented in NVD with a high/critical impact (CVSS v2: 7.5/Partial impact;...

9.8CVSS9.8AI score0.02652EPSS
SaveExploits5References1Affected Software1
zdt
zdt
added 2018/02/17 12:0 a.m.36 views

Joomla Realpin 1.5.04 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Realpin = 1.5.04 - SQL Injection Vendor Homepage: http://realpin.frumania.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-display/realpin/ Software Download:...

7.5CVSS9.2AI score0.02652EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2018/02/17 12:0 a.m.60 views

Joomla! Realpin 1.5.04 SQL Injection

Exploit Title: Joomla! Component Realpin = 1.5.04 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://realpin.frumania.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-display/realpin/ Software Download:...

9.2AI score0.02652EPSS
SaveExploits5
exploitpack
exploitpack
added 2018/02/16 12:0 a.m.27 views

Joomla! Component Realpin 1.5.04 - SQL Injection

Joomla! Component Realpin 1.5.04 - SQL Injection Exploit Title: Joomla! Component Realpin = 1.5.04 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://realpin.frumania.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-display/realpin/...

7.5CVSS0.3AI score0.02652EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2018/02/16 12:0 a.m.54 views

Joomla! Component Realpin 1.5.04 - SQL Injection

Exploit Title: Joomla! Component Realpin = 1.5.04 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://realpin.frumania.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-display/realpin/ Software Download:...

9.8CVSS8.4AI score0.02652EPSS
SaveExploits5
NVD
NVD
added 2017/07/26 8:29 a.m.22 views

CVE-2017-6005

Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileg...

7CVSS7.1AI score0.00292EPSS
SaveExploits0References1
OSV
OSV
added 2017/07/26 8:29 a.m.5 views

CVE-2017-6005

Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileg...

7CVSS6.1AI score0.00292EPSS
SaveExploits0References1
CVE
CVE
added 2017/07/26 8:0 a.m.57 views

CVE-2017-6005

CVE-2017-6005 corresponds to a local privilege escalation in Waves MaxxAudio on Dell laptops. Multiple connected sources describe the issue as an Unquoted Service Path in the WavesSysSvc Windows service (File Version 1.1.6.0), allowing an authorized but non-privileged local user to execute arbitr...

7CVSS7.7AI score0.00292EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.9 views

CVE-2006-6005

...

SaveExploits0
CVE
CVE
added 2017/05/11 2:1 p.m.24 views

CVE-2006-6005

CVE-2006-6005 is rejected/not used; this entry does not represent an active vulnerability.

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2016/08/02 12:0 a.m.20 views

Ipswitch WhatsUp < 16.4 Multiple Vulnerabilities

Ipswitch WhatsUp Gold is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:progress:whatsupgold"...

6.9CVSS7.8AI score0.02266EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2016/01/22 12:0 a.m.49 views

Ipswitch WhatsUp Gold < 16.4 Multiple Vulnerabilities

The remote host has a version of Ipswitch WhatsUp Gold installed that is prior to 16.4.0. It is, therefore, affected by the following vulnerabilities : - Multiple SQL injection vulnerabilities exist due to improper sanitization of user-supplied input to the 'sUniqueID' parameter and the 'find...

9.8CVSS7.4AI score0.0355EPSS
SaveExploits6References4
CVE
CVE
added 2015/12/27 2:0 a.m.60 views

CVE-2015-6005

Ipswitch WhatsUp Gold (pre-16.4) is affected by multiple XSS vulnerabilities (CVE-2015-6005) due to improper validation in various fields (e.g., SNMP OID objects, SNMP traps, View/Group/Policy/Template Libraries, System Script Library, CLI Settings, etc.). An authenticated remote attacker could i...

6.9CVSS6.4AI score0.01866EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder