Lucene search
+L

745 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 8:07 a.m.14 views

CVE-2019-14134

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074,...

10CVSS7.3AI score0.00907EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:12 a.m.13 views

CVE-2018-13448

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

9.8CVSS8.7AI score0.01918EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:01 a.m.18 views

CVE-2017-9623

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data...

6.1CVSS5.9AI score0.01014EPSS
SaveExploits1References1
Packet Storm News
Packet Storm News
added 2025/05/15 12:00 a.m.15 views

Managerial Insights on Investment Strategy in Cybersecurity: Findings from Multi-Country Research

This study examines the strategic role of cybersecurity based on survey data from 1,083 managers across Europe, the UK, and the United States. The findings indicate growing recognition of cybersecurity as a source of competitive advantage, although firms continue to face barriers such as limited...

6.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/04/08 2:34 p.m.138 views

Exploit for Classic Buffer Overflow in Qualcomm Qca9367_Firmware

CVE-2024-53027-WIP Work in Progress for POC CVE-2024-53027:...

7.5CVSS8.2AI score0.0029EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2025/04/03 12:00 a.m.13 views

PT-2025-14567 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 9 and earlier than 9.4.0RC2 Concrete CMS versions earlier than 8.5.20 Description: The issue concerns Concrete CMS's Address attribute, where addresses are not properly sanitized in the output when a country is not...

5.1CVSS6.2AI score0.00167EPSS
SaveExploits0References12
OSV
OSV
added 2025/04/01 4:15 p.m.9 views

UBUNTU-CVE-2025-21910

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: regulatory: improve invalid hints checking Syzbot keeps reporting an issue 1 that occurs when erroneous symbols sent from userspace get through into useralpha2 via regulatoryhintuser call. Such invalid regulatory...

5.5CVSS6.1AI score0.00221EPSS
SaveExploits0References59
RedhatCVE
RedhatCVE
added 2025/03/05 10:52 a.m.45 views

CVE-2024-53027

Transient DOS may occur while processing the country IE...

7.5CVSS7.1AI score0.0029EPSS
SaveExploits1References1
NVD
NVD
added 2025/03/03 11:15 a.m.41 views

CVE-2024-53027

Transient DOS may occur while processing the country IE...

7.5CVSS0.0029EPSS
SaveExploits1References1
CVE
CVE
added 2025/03/03 10:07 a.m.147 views

CVE-2024-53027

CVE-2024-53027 is a transient DoS vulnerability triggered while processing a malformed Country Information Element in Qualcomm WLAN firmware and Bluetooth stacks. Exploitation requires proximity (remote over Wi‑Fi/Bluetooth) and can crash the chipset firmware, potentially disrupting connectivity ...

7.5CVSS7.2AI score0.0029EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/03/03 10:07 a.m.41 views

CVE-2024-53027 Buffer Copy Without Checking Size of Input in WLAN Host

Transient DOS may occur while processing the country IE...

7.5CVSS0.0029EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.16 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from a transient denial of service when processing country IE...

7.5CVSS6.4AI score0.0029EPSS
SaveExploits1References3
OSV
OSV
added 2025/02/25 10:15 p.m.9 views

CVE-2025-22211

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the country management area in backend...

3.4CVSS6AI score0.00352EPSS
SaveExploits1References2
NVD
NVD
added 2025/02/25 10:15 p.m.23 views

CVE-2025-22211

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the country management area in backend...

3.4CVSS0.00352EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/02/25 9:29 p.m.8 views

CVE-2025-22211 Extension - webdesigner-profi.de - SQL injection in JoomShopping component version 1.0.0 - 5.5.5 for Joomla

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the country management area in backend...

5.3AI score0.00352EPSS
SaveExploits1References2
OSV
OSV
added 2025/02/22 9:15 a.m.11 views

CVE-2025-1361

The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admininit function. This makes it possible for unauthenticated attackers to view the plugin's settings...

5.3CVSS7.3AI score0.01313EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/02/22 8:22 a.m.13 views

CVE-2025-1361 IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function

The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admininit function. This makes it possible for unauthenticated attackers to view the plugin's settings...

7.5CVSS6.7AI score0.01313EPSS
SaveExploits0References4
CVE
CVE
added 2025/02/22 8:22 a.m.81 views

CVE-2025-1361

CVE-2025-1361 affects the IP2Location Country Blocker WordPress plugin. The vulnerability stems from missing capability checks in admin_init(), enabling unauthenticated attackers to view the plugin’s settings. It affects all versions up to and including 2.38.8. The connected Red Hat and Wordfence...

7.5CVSS7.3AI score0.01313EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/02/22 8:22 a.m.53 views

CVE-2025-1361 IP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function

The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admininit function. This makes it possible for unauthenticated attackers to view the plugin's settings...

7.5CVSS0.01313EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/02/22 12:00 a.m.11 views

WordPress plugin IP2Location Country Blocker 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An authorization issue vulnerability exists in...

7.5CVSS8.4AI score0.01313EPSS
SaveExploits0References6
Rows per page
Query Builder