Lucene search
+L

127 matches found

NVD
NVD
added 2021/01/26 6:15 p.m.20 views

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

6.1CVSS6AI score0.0066EPSS
SaveExploits1References1
Prion
Prion
added 2021/01/26 6:15 p.m.13 views

Cross site scripting

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

4.3CVSS5.9AI score0.0066EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/01/26 5:15 p.m.26 views

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

6AI score0.0066EPSS
SaveExploits1References1
CVE
CVE
added 2021/01/26 5:15 p.m.53 views

CVE-2020-23447

CVE-2020-23447 affects newbee-mall 1.0 with a cross-site scripting vulnerability in shop-cart/settle. An attacker can inject an XSS payload in the address information during purchase, triggered when viewing the Order Management Office’s “View Recipient Information.” Connected CNVD/CVEs corroborat...

6.1CVSS5.9AI score0.0066EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2020/08/31 9:15 p.m.6 views

CVE-2020-25046

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

5.5CVSS6.6AI score0.00148EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/31 9:15 p.m.23 views

CVE-2020-25046

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

5.5CVSS5.4AI score0.00148EPSS
SaveExploits0References1
Prion
Prion
added 2020/08/31 9:15 p.m.20 views

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

2.1CVSS5.4AI score0.00148EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/31 8:26 p.m.29 views

CVE-2020-25046

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The USB driver leaks address information via kernel logging. The Samsung IDs are SVE-2020-17602, SVE-2020-17603, SVE-2020-17604 August 2020...

5.4AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
added 2020/08/31 8:26 p.m.46 views

CVE-2020-25046

CVE-2020-25046 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). The issue is in the USB driver where address information is leaked via kernel logging. Root cause is the USB driver handling/logging that exposes kernel address data; impact reportedly includes partial confidential...

5.5CVSS5.4AI score0.00148EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/04/21 12:0 a.m.1 views

Logic flaw vulnerability in JLCMS of Beijing Liangjing Zhicheng Technology Co.

LJCMS is a PHP+MYSQL based enterprise website system. There is a logic flaw vulnerability in JLCMS of Beijing Liang Jing Zhi Cheng Technology Co., Ltd. that can be exploited by attackers to obtain other people's user address information...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2020/04/08 5:19 a.m.36 views

CVE-2018-20510

The printbindertransactionilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "from code flags" lines in a debugfs file...

5.5CVSS2.8AI score0.0041EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2020/04/02 8:12 p.m.21 views

CVE-2018-7754

A flaw was found in the Linux kernel in that the aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c allows local users to obtain some kernel address information by reading a debugfs file. This address is not useful to commit a further attack...

5.5CVSS3.8AI score0.00379EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2020/03/06 1:28 a.m.33 views

CVE-2018-20511

An issue was discovered in the Linux kernel before 4.18.11. The ipddpioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel address information by leveraging CAPNETADMIN to read the ipddproute dev and next fields via an SIOCFINDIPDDPRT ioctl call...

5.5CVSS3.5AI score0.0045EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2020/01/08 3:47 a.m.41 views

CVE-2018-5750

The acpismbushcadd function in drivers/acpi/sbshc.c in the Linux kernel, through 4.14.15, allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call...

5.5CVSS2.4AI score0.0049EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/06/07 12:0 a.m.63 views

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4670)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4670 advisory. - Bluetooth: Verify that l2capgetconfopt provides large enough buffer Marcel Holtmann Orabug: 29526426 CVE-2019-3459 - Bluetooth: Check L2CAP optio...

9.3CVSS6.9AI score0.08743EPSS
SaveExploits3References8
NVD
NVD
added 2019/04/30 6:29 p.m.33 views

CVE-2018-20509

The printbinderrefolocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref desc node" lines in a debugfs file...

5.5CVSS4.9AI score0.00369EPSS
SaveExploits0References3
OSV
OSV
added 2019/04/30 6:29 p.m.16 views

CVE-2018-20509

The printbinderrefolocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref desc node" lines in a debugfs file...

5.5CVSS5.9AI score
SaveExploits0References3
NVD
NVD
added 2019/04/30 6:29 p.m.18 views

CVE-2018-20510

The printbindertransactionilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "from code flags" lines in a debugfs file...

5.5CVSS4.9AI score0.0041EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2019/04/30 6:29 p.m.56 views

CVE-2018-20510

The printbindertransactionilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "from code flags" lines in a debugfs file...

5.5CVSS6.5AI score0.0041EPSS
SaveExploits0References2
OSV
OSV
added 2019/04/30 6:29 p.m.8 views

UBUNTU-CVE-2018-20510

The printbindertransactionilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "from code flags" lines in a debugfs file...

5.5CVSS6.4AI score0.0041EPSS
SaveExploits0References3
Rows per page
Query Builder