Lucene search
K

57 matches found

OSV
OSV
added yesterday3 views

MINI-Q83C-C2V6-7497

Bulletin has no description...

6.5CVSS5.7AI score0.00023EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/07/31 6:11 p.m.1 views

CVE-2025-7497

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

7.8CVSS7AI score0.0014EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/07/29 5:57 p.m.1 views

CVE-2025-7497

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

7.8CVSS7.4AI score0.0014EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2025/07/29 3:0 a.m.2 views

CVE-2025-7497

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-705/ 2025-07-29 19:20:38+00:00| seen| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0015 2025-07-29 20:45:45+00:00| seen|...

7.8CVSS7.5AI score0.0014EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 9:51 a.m.3 views

CVE-2024-7497

A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

8.8CVSS8.8AI score0.00294EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:54 p.m.4 views

CVE-2020-7497

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior formerly known as Vijeo XDwhich could cause arbitrary application execution when the computer starts...

9.8CVSS7AI score0.01486EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2015-7497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of...

5CVSS7AI score0.01161EPSS
Exploits0References2
Circl
Circl
added 2024/08/06 4:58 a.m.0 views

CVE-2024-7497

creationtimestamp| type| source ---|---|--- 2024-08-06 04:58:03+00:00| seen| https://t.me/cvedetector/2511...

8.8CVSS6.2AI score0.00294EPSS
Exploits1References1
CVE
CVE
added 2024/08/06 2:0 a.m.25 views

CVE-2024-7497

The CVE-2024-7497 entry concerns the itsourcecode Airline Reservation System v1.0. A vulnerability in /admin/index.php arises from manipulating the page parameter to trigger local file inclusion. The issue is exploitable remotely and exploitation has been disclosed publicly. Multiple sources (NVD...

8.8CVSS6.5AI score0.00294EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/08/06 2:0 a.m.12 views

CVE-2024-7497 itsourcecode Airline Reservation System index.php file inclusion

A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00294EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/08/06 2:0 a.m.15 views

CVE-2024-7497 itsourcecode Airline Reservation System index.php file inclusion

A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

6.5CVSS7.2AI score0.00294EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2016:0030-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS8.8AI score0.02045EPSS
Exploits3References14
OpenVAS
OpenVAS
added 2021/04/21 12:0 a.m.23 views

CentOS: Security Advisory for libxml2 (CESA-2015:2549)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.1CVSS9.5AI score0.01397EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2016:0049-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS8.1AI score0.02045EPSS
Exploits4References15
OSV
OSV
added 2020/06/16 8:15 p.m.1 views

CVE-2020-7497

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior formerly known as Vijeo XDwhich could cause arbitrary application execution when the computer starts...

9.8CVSS6AI score
Exploits0References1
CVE
CVE
added 2020/06/16 7:13 p.m.54 views

CVE-2020-7497

The CVE-2020-7497 entry concerns a Path Traversal (CWE-22) vulnerability in Schneider Electric EcoStruxure Operator Terminal Expert (O Te) 3.1 Service Pack 1 and earlier (formerly Vijeo XD) that could cause arbitrary application execution when the computer starts. Affected component: the OT Exper...

9.8CVSS9.3AI score0.01486EPSS
Exploits0References1Affected Software1
Amazon
Amazon
added 2019/05/29 12:0 a.m.67 views

Medium: libxml2

Issue Overview: A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.CVE-2015-8242 A denial of service flaw w...

9.8CVSS8.6AI score0.04711EPSS
Exploits3
Veracode
Veracode
added 2019/05/02 5:51 a.m.39 views

Denial Of Service (DoS)

The libxml2 library is a development toolbox providing the implementation of various XML standards. Several denial of service flaws were found in libxml2, a library providing support for reading, modifying, and writing XML and HTML files. A remote attacker could provide a specially crafted XML or...

7.1CVSS9.2AI score0.04711EPSS
Exploits3References33Affected Software1
NVD
NVD
added 2018/07/27 3:29 p.m.18 views

CVE-2017-7497

The dialog for creating cloud volumes cinder provider in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant...

4.3CVSS4.3AI score0.00121EPSS
Exploits0References3
CVE
CVE
added 2018/07/27 3:0 p.m.96 views

CVE-2017-7497

CVE-2017-7497 affects Red Hat CloudForms (CloudForms Management Engine) where the dialog for creating cloud volumes (cinder provider) fails to filter cloud tenants by user. The underlying issue allows an attacker who can create storage volumes to allocate volumes for other tenants, enabling unaut...

4.3CVSS4.5AI score0.00121EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder