Lucene search
+L

7674 matches found

CNNVD
CNNVD
added 2022/03/07 12:00 a.m.10 views

WordPress 的 Custom Content Shortcode插件访问控制错误漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress application plugin. WordPress Custom Content Shortcode plugin versions prio...

4.3CVSS5.6AI score0.00794EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2022/03/05 12:00 a.m.24 views

The vulnerability of NETGEAR’s integrated router software, including models R6260, R6800, R6700v2, R6900v2, R7450, AC2100, AC2400, and AC2600, arises due to buffer overflows in the stack. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the embedded software of NETGEAR routers such as R6260, R6800, R6700v2, R6900v2, R7450, AC2100, AC2400, and AC2600 arises due to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...

10CVSS8.2AI score0.01199EPSS
SaveExploits0References3Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.14 views

The vulnerability of the built-in software of NETGEAR’s RBK352, RBR350, and RBS350 routers lies in the lack of protection for service data, which allows attackers to exploit this weakness to disclose protected information.

The vulnerability of NETGEAR’s embedded routing software, such as RBK352, RBR350, and RBS350, is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

7.8CVSS7.2AI score0.01365EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.15 views

The vulnerability of the Bot Framework SDK, related to improper code generation management, allows a perpetrator to disclose protected information.

The vulnerability of the Bot Framework SDK is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS8.2AI score0.02764EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.11 views

The vulnerability of the file system filter driver of the Microsoft Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the file system filter driver in the Microsoft Windows operating system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.03872EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.11 views

The vulnerability of the Microsoft Visual Basic development environment and the Microsoft Office suite relates to the disclosure of information in the error-prone data area, allowing the disclosure of protected information.

The vulnerability of the Microsoft Visual Basic development environment and the Microsoft Office suite is related to the disclosure of sensitive information in error-prone data areas. Exploiting this vulnerability can allow attackers to disclose protected information...

7.1CVSS6.6AI score0.02886EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/03/04 12:00 a.m.6 views

Omron CX-Programmer缓冲区错误漏洞

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron, Japan. A security vulnerability exists in CX-Programmer v9.76.1 and earlier versions, which can be exploited by an attacker to cause a user to open a carefully crafted CXP file, leading to information...

7.8CVSS7.7AI score0.01025EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/03/04 12:00 a.m.10 views

Omron CX-Programmer 资源管理错误漏洞

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron, Japan. A security vulnerability exists in CX-Programmer v9.76.1 and earlier versions, which can be exploited by an attacker to trick a user into opening a carefully crafted CXP file to cause information...

7.8CVSS7.6AI score0.01077EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2022/03/01 12:00 a.m.29 views

WordPress Amelia plugin <= 1.0.46 - Arbitrary Appointments Update and Sensitive Data Disclosure vulnerability

Arbitrary Appointments Update and Sensitive Data Disclosure vulnerability discovered by Huli Cymetrics in WordPress Amelia plugin versions = 1.0.46. Solution Update the WordPress Amelia plugin to the latest available version at least 1.0.47...

5.5CVSS3.1AI score0.00619EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.14 views

The vulnerability of the Windows Common Log File System Driver in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Windows Common Log File System Driver in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

5.5CVSS6.5AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.13 views

The vulnerability of Windows operating systems arises from insufficient checking of input data, allowing attackers to disclose sensitive information that should be protected.

Vulnerabilities in Windows operating systems exist due to insufficient checking of input data. Exploiting these vulnerabilities can allow attackers to disclose protected information...

5.5CVSS7.4AI score0.0102EPSS
SaveExploits0References3
Hacker One
Hacker One
added 2022/02/23 7:17 p.m.32 views

U.S. Dept Of Defense: Military name,email,phone,address,certdata Disclosure

A DoD public facing asset Military was misconfigured and disclosed name, email ,phone address , and certdata of users...

2.1AI score
SaveExploits0
OSV
OSV
added 2022/02/18 8:15 p.m.9 views

CVE-2022-24370

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif...

6.5CVSS4.9AI score0.01889EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.19 views

CVE-2022-24370

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specif...

6.5CVSS5.2AI score0.01889EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.8 views

CVE-2022-24368

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

6.5CVSS5.2AI score0.02095EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/02/18 8:15 p.m.10 views

CVE-2022-24055

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5.5CVSS4.9AI score0.01538EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.3 views

CVE-2022-24060

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5.5CVSS4AI score0.01538EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.11 views

CVE-2022-24055

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5.5CVSS4AI score0.01538EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/02/18 8:15 p.m.11 views

CVE-2021-46654

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

5.5CVSS4.9AI score0.01592EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/18 8:15 p.m.8 views

CVE-2021-46651

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

5.5CVSS5AI score0.01678EPSS
SaveExploits0References2
Rows per page
Query Builder