33 matches found
CVE-2024-9874
creationtimestamp| type| source ---|---|--- 2024-11-09 06:42:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113451633574123948 2024-11-09 09:06:18+00:00| seen| https://t.me/cvedetector/10278...
WordPress Poll Maker Plugin <= 5.4.6 is vulnerable to SQL Injection
Software Poll Maker Type Plugin Vulnerable versions = 5.4.6 Fixed in 5.4.7 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-9874 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 26f7f7b011e3 Credits tmrswrr Required privilege Administrator Published 8...
CVE-2020-9874
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may...
CVE-2020-9874
CVE-2020-9874 is an out-of-bounds write issue affecting Apple's ImageIO/OpenEXR-related image processing paths. The description in the CVE notes that processing a maliciously crafted image may lead to arbitrary code execution, with fixed versions listed as iOS 13.6 / iPadOS 13.6, macOS Catalina 1...
CVE-2019-9874
CVE-2019-9874 affects Sitecore CMS 7.0–7.2 and Sitecore XP 7.5–8.2 via the Sitecore.Security.AntiCSRF deserialization module. An unauthenticated attacker can trigger remote code execution by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN**, exploiting untrusted data deser...
CVE-2019-9874
Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF aka anti CSRF module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter CSRFTOKEN...
CVE-2019-9874
Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF aka anti CSRF module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter CSRFTOKEN. Recent assessments:...
CVE-2017-9874
IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000007822."...
ISC BIND 9.x < 9.9.9-P1 / 9.9.9-S3 / 9.10.4-P1 / 9.11.0b1 DoS
Binary data 9874.prm...
CVE-2016-9874
CVE-2016-9874 is rejected/not used and does not represent an active vulnerability entry.
CVE-2014-9874
Buffer overflow in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 2013 devices allows attackers to gain privileges via a crafted application, related to arch/arm/mach-msm/qdsp6v2/audioutils.c and sound/soc/msm/qdsp6v2/q6asm.c, aka Android internal bug 28751152 and...
CVE-2014-9874
CVE-2014-9874 is a buffer overflow in Qualcomm components of Android (before 2016-08-05) affecting Nexus 5, 5X, 6P and 7 (2013). The root cause is memory corruption in audio_utils.c and q6asm.c (Android internal bug 28751152; Qualcomm bug CR563086). Impact is privilege escalation via a crafted ap...