Lucene search
+L

6116 matches found

CNVD
CNVD
•added 2021/11/13 12:00 a.m.•59 views

Airangel Hsmx Gateway Cross-Site Scripting Vulnerability

Airangel Hsmx Gateway is a platform from Airangel UK. It is used to manage authentication and billing in the network.A cross-site scripting vulnerability exists in versions of Airangel Hsmx Gateway prior to 5.2.04, which stems from a lack of data validation filtering of user-supplied data and...

5.4CVSS2.2AI score0.00527EPSS
SaveExploits1References1
NVD
NVD
•added 2021/11/12 4:15 p.m.•33 views

CVE-2021-38972

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly...

4.3CVSS0.0063EPSS
SaveExploits0References2
Prion
Prion
•added 2021/11/12 4:15 p.m.•34 views

Input validation

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly...

4CVSS4.5AI score0.0063EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•24 views

Advanced Micro Devices SNP: Input validation vulnerability

Advanced Micro Devices SNP AMD SNP is a firmware from AMD Advanced Micro Devices, Inc.. The Advanced Micro Devices SNP Firmware suffers from an input validation error vulnerability that arises from a networked system or product that does not properly validate incoming data...

5.5CVSS5.8AI score0.0024EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•30 views

Advanced Micro Devices SNP: Input validation vulnerability

Advanced Micro Devices SNP AMD SNP is a firmware from AMD Advanced Micro Devices, Inc.. The Advanced Micro Devices SNP suffers from an input validation error vulnerability that arises from a networked system or product that does not properly validate incoming data...

7.8CVSS7.4AI score0.00246EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/11/11 12:00 a.m.•18 views

PDF Viewer Insufficient Input Validation Unauthorized Access

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to insufficient validation of input data. Exploiting these vulnerabilities can allow unauthorized actors to gain...

8.5CVSS6.6AI score0.07882EPSS
SaveExploits1References2Affected Software2
CNVD
CNVD
•added 2021/11/10 12:00 a.m.•96 views

WordPress Booking.com Banner Creator Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Booking.com Banner Creator plugin in version 1.4....

4.8CVSS4.9AI score0.00617EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/11/10 12:00 a.m.•59 views

WordPress AddToAny Share Buttons Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress AddToAny Share Buttons plugin in versions prior t...

4.8CVSS4.8AI score0.00676EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/11/10 12:00 a.m.•35 views

WordPress Unlimited PopUps Plugin SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Unlimited PopUps plugin in version 4.5.3 and earlier suffers from a SQL injection vulnerability that...

8.8CVSS8.9AI score0.01567EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/11/10 12:00 a.m.•60 views

WordPress Translate WordPress-Google Language Translator plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. Translate WordPress-Google Language Translator prior to version 6.0.12 suffers from a cross-site scripting vulnerability, which...

4.8CVSS2.1AI score0.00676EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/11/10 12:00 a.m.•51 views

WordPress Booking.com Product Helper Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Booking.com Product Helper plugin in version 1.0....

4.8CVSS4.8AI score0.00617EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•21 views

Appointment Booking Calendar System Cross-site Script Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Appointment Booking Calendar System...

6.1CVSS5.7AI score0.01284EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•21 views

TYPO3 cross-site scripting vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland.TYPO3 has a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output, which can be exploited by an attacker with TYP...

5.4CVSS5.6AI score0.00509EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/11/10 12:00 a.m.•19 views

Windows TCP/IP DoS

The vulnerability of the TCP/IP protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.05046EPSS
SaveExploits0References3
Prion
Prion
•added 2021/11/09 5:15 p.m.•20 views

Input validation

NLnet Labs Routinator prior to 0.10.2 happily processes a chain of RRDP repositories of infinite length causing it to never finish a validation run. In RPKI, a CA can choose the RRDP repository it wishes to publish its data in. By continuously generating a new child CA that only consists of anoth...

5CVSS7.4AI score0.01493EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•18 views

PHP cross-site scripting vulnerabilities

PHP is a scripting language that executes on the server side. PHP suffers from a security vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side code...

5.4CVSS5.9AI score0.01635EPSS
SaveExploits4References5
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•19 views

SourceCodester Tailor Management Cross-site Scripting Vulnerabilities

SourceCodester Tailor Management is an open source tailor management system software from the individual developer Warren Daloyan. A security vulnerability exists in SourceCodester Tailor Management, which stems from a lack of proper validation of client-side data in the web application. An...

6.1CVSS6.4AI score0.00662EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•20 views

WordPress plugin cross-site scripting vulnerabilities

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress AddToAny Share Buttons plugin in versions prior t...

4.8CVSS5.7AI score0.00676EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•19 views

CASAP Automated Enrollment Cross-site Scripting Vulnerability

CASAP Automated Enrollment is an automated enrollment system organized by CASAP USA. The purpose of this project is to provide an automated enrollment system for CASAP to streamline the school process and make it more effective, efficient and easy to retrieve. SourceCodester CASAP Automated...

6.1CVSS6.1AI score0.00662EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•45 views

GNU C Library has unspecified vulnerabilities

The GNU C Library glibc, libc6 is an open source, free C compiler released under the LGPL license. version 2.34 of the GNU C Library aka glibc contains a security vulnerability that stems from a data validation issue in the affected version of the library, iconvdata/iso-2022-jp-3.c's iconv in the...

7.5CVSS4.1AI score0.03293EPSS
SaveExploits1References1
Rows per page
Query Builder