Lucene search
+L

12 matches found

Snyk
Snyk
•added 2026/07/31 1:48 a.m.•17 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the MMS BER decoder when processing certain fields within confirmed-request messages. An attacker can cause the MMS handling process to terminate unexpectedly by sending a crafted BER-encoded element over an...

7.1CVSS5.5AI score0.00436EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/30 11:16 p.m.•15 views

CVE-2026-63550

The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages. When a crafted BER-encoded element is received over an established MMS session TCP port 102, the decoder may advance its internal read position incorrectly, leading to a he...

7.1CVSS0.00436EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/10 6:31 p.m.•18 views

EUVD-2025-208500

CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause condition where authenticated attackers can have a victim’s browser run arbitrary JavaScript when the victim hovers over a maliciously crafted element on a web server...

5.1CVSS5.9AI score0.00225EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-4529

Malware in sbrugna...

5.4CVSS5.6AI score0.01363EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2018-0783

Malware in sbrugna...

6.1CVSS6.2AI score0.00788EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/04/11 12:00 a.m.•12 views

Fortinet FortiSOAR 安全漏洞

Fortinet FortiSOAR is a Security Orchestration, Automation and Response SOAR solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiSOAR versions 7.3.0 through 7.3.1, which stems from improper neutralization of a specially crafted element used. An attacker could exploit the...

8.8CVSS8.4AI score0.01141EPSS
SaveExploits0References2
OSV
OSV
•added 2016/03/31 12:00 a.m.•11 views

UBUNTU-CVE-2016-3141

Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact by triggering a wddxdeserialize call on XML data...

9.8CVSS7.3AI score0.36009EPSS
SaveExploits0References5
OSV
OSV
•added 2013/07/31 1:20 p.m.•11 views

UBUNTU-CVE-2013-4156

Apache OpenOffice.org OOo before 4.0 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted element in an OOXML document file...

6.8CVSS5.9AI score0.03941EPSS
SaveExploits1References2
NVD
NVD
•added 2013/04/25 10:55 a.m.•25 views

CVE-2013-1192

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802...

9.3CVSS7.6AI score0.02409EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2009/02/04 12:00 a.m.•32 views

Microsoft Internet Explorer Clickjacking Vulnerability

This host has installed Internet Explorer and is prone to clickjacking vulnerability OpenVAS Vulnerability Test $Id: gbmsieclickjackingvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Clickjacking Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone...

4.3CVSS6.7AI score0.10627EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/30 12:00 a.m.•2 views

CVE-2009-0374: Undefined Security Weakness

Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Clickjacking" vulnerability. NOTE: a third party disputes the relevance of this issue, stating that "ever...

4.3CVSS6.1AI score0.02401EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2006/08/08 12:00 a.m.•52 views

Microsoft Internet Explorer CSS Class Ordering Memory Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific vulnerability exists due to improper handling of CSS...

7.5CVSS4AI score0.41112EPSS
SaveExploits0References1
Rows per page
Query Builder