Lucene search
+L

145 matches found

Cvelist
Cvelist
•added 2021/12/08 2:12 p.m.•39 views

CVE-2021-37052

There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage...

7.6AI score0.00701EPSS
SaveExploits0References2
CVE
CVE
•added 2021/12/08 2:12 p.m.•63 views

CVE-2021-37052

The CVE-2021-37052 entry describes an exception log vulnerability in Huawei HarmonyOS/Huawei smartphones. Affected component is the device operating system’s logging/exception mechanism, with exploitation leading to leakage of address information. In the linked NVD entry, the CVSS v3.1 base score...

7.5CVSS7.4AI score0.00701EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/08 12:00 a.m.•6 views

CVE-2021-37052: Improper Handling of Exceptional Conditions

There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage...

7.5CVSS5.8AI score0.00701EPSS
SaveExploits0References2
NVD
NVD
•added 2021/01/26 6:15 p.m.•27 views

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

6.1CVSS6AI score0.0066EPSS
SaveExploits1References1
Prion
Prion
•added 2021/01/26 6:15 p.m.•20 views

Cross site scripting

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

4.3CVSS5.9AI score0.0066EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/01/26 5:15 p.m.•2 views

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

6.1CVSS0.0066EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/01/26 5:15 p.m.•35 views

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

6AI score0.0066EPSS
SaveExploits1References1
CVE
CVE
•added 2021/01/26 5:15 p.m.•62 views

CVE-2020-23447

CVE-2020-23447 affects newbee-mall 1.0 with a cross-site scripting vulnerability in shop-cart/settle. An attacker can inject an XSS payload in the address information during purchase, triggered when viewing the Order Management Office’s “View Recipient Information.” Connected CNVD/CVEs corroborat...

6.1CVSS6.2AI score0.0066EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/01/26 12:00 a.m.•3 views

PT-2021-10897

Name of the Vulnerable Software and Affected Versions newbee-mall version 1.0 Description The issue allows for cross-site scripting. It can be triggered by writing an xss payload in the address information when buying goods, which is then executed when viewing the "View Recipient Information" of...

6.1CVSS0.0066EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/26 12:00 a.m.•8 views

CVE-2020-23447: Improper Neutralization of Input During Web Page Generation

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

6.1CVSS5.7AI score0.0066EPSS
SaveExploits1References2
OSV
OSV
•added 2020/08/31 9:15 p.m.•12 views

CVE-2020-25046

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

5.5CVSS6.6AI score0.00148EPSS
SaveExploits0References1
NVD
NVD
•added 2020/08/31 9:15 p.m.•32 views

CVE-2020-25046

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

5.5CVSS5.4AI score0.00148EPSS
SaveExploits0References1
Prion
Prion
•added 2020/08/31 9:15 p.m.•28 views

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

2.1CVSS5.4AI score0.00148EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/08/31 8:26 p.m.•60 views

CVE-2020-25046

CVE-2020-25046 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue is in the USB driver where address information is leaked via kernel logging. Root cause is the USB driver handling/logging that exposes kernel address data; impact reportedly includes partial confidential...

5.5CVSS5.4AI score0.00148EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/08/31 8:26 p.m.•39 views

CVE-2020-25046

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

5.4AI score0.00148EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/08/31 12:00 a.m.•3 views

PT-2020-15906

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Samsung mobile devices with Q10.0 software Description An issue was discovered where the USB driver leaks address information via kernel logging. Recommendatio...

5.5CVSS0.00148EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/31 12:00 a.m.•5 views

CVE-2020-25046: Insertion of Sensitive Information into Log File

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/06/19 12:00 a.m.•2 views

PT-2020-10829

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.12.0 Description An issue was discovered where the use of a Proxy HTTP header for obtaining IP address information was mishandled, rather than using the source address in an IP packet header. Recommendatio...

5.3CVSS0.0092EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/04/21 12:00 a.m.•6 views

Logic flaw vulnerability in JLCMS of Beijing Liangjing Zhicheng Technology Co.

LJCMS is a PHP+MYSQL based enterprise website system. There is a logic flaw vulnerability in JLCMS of Beijing Liang Jing Zhi Cheng Technology Co., Ltd. that can be exploited by attackers to obtain other people's user address information...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2020/04/08 5:19 a.m.•40 views

CVE-2018-20510

The printbindertransactionilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "from code flags" lines in a debugfs file...

5.5CVSS2.8AI score0.0041EPSS
SaveExploits0References3
Rows per page
Query Builder