Lucene search
+L

5902 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/04/15 12:0 a.m.35 views

Intel Wi-Fi Link Driver Netwtw04 Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Intel Wi-Fi Link Driver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of 802.11 frames. The issue results from the lack of...

8.8CVSS1.7AI score0.00633EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/15 12:0 a.m.31 views

Microsoft Windows JET Database Engine Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7.8CVSS3.3AI score0.11685EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/15 12:0 a.m.7 views

Torchbox Wagtail Cross-Site Scripting Vulnerability

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A cross-site scripting vulnerability exists in Torchbox Wagtail version 2.8.1 and versions prior to 2.7.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

6.8CVSS6.3AI score0.01273EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.7 views

The vulnerability of Xen hypervisors arises from insufficient validation of input data, allowing attackers to trigger service failures or increase their privileges.

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges...

8.8CVSS6.8AI score0.00349EPSS
SaveExploits0References8Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.10 views

The vulnerability of Xen hypervisors arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures...

6.5CVSS6.7AI score0.0035EPSS
SaveExploits0References7Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.7 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

7.1CVSS6.8AI score0.01915EPSS
SaveExploits1References14Affected Software6
CNVD
CNVD
added 2020/04/14 12:0 a.m.7 views

WordPress Media Library Assistant Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Media Library Assistant is a media library assistant plugin used in it. A cross-site scripting vulnerability exists in Wordpress Media...

6.1CVSS6.3AI score0.01154EPSS
SaveExploits3
NVD
NVD
added 2020/04/13 6:15 p.m.20 views

CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

8.8CVSS8.3AI score0.01803EPSS
SaveExploits0References8
OSV
OSV
added 2020/04/13 6:15 p.m.4 views

DEBIAN-CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

8.8CVSS8.8AI score0.01803EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/13 6:15 p.m.7 views

CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

8.8CVSS8.4AI score
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2020/04/13 6:15 p.m.22 views

CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

8.8CVSS7.5AI score0.01803EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/13 6:15 p.m.13 views

Input validation

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

6.8CVSS8.2AI score0.01803EPSS
SaveExploits0References8Affected Software5
OSV
OSV
added 2020/04/13 6:15 p.m.6 views

UBUNTU-CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

8.8CVSS7.5AI score0.01803EPSS
SaveExploits0References2
CVE
CVE
added 2020/04/13 5:30 p.m.324 views

CVE-2020-6443

Chromium/Google Chrome before 81.0.4044.92 is affected by CVE-2020-6443 due to an insufficient data validation flaw in the DevTools component, enabling a remote attacker to execute arbitrary code via a crafted HTML page after convincing a user to use DevTools. Affected product: Chromium/Chrome; r...

8.8CVSS8.2AI score0.01803EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2020/04/13 5:30 p.m.29 views

CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

8.3AI score0.01803EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2020/04/13 5:30 p.m.33 views

CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

8.8CVSS9AI score0.01803EPSS
SaveExploits0
CNVD
CNVD
added 2020/04/13 12:0 a.m.3 views

Vastgota-Data ProVide Admin Web Interface Cross-Site Scripting Vulnerability

Vastgota-Data ProVide is a file transfer server with a graphical user interface from Vastgota-Data, Sweden. A cross-site scripting vulnerability exists in the Admin Web Interface in Vastgota-Data ProVide 13.1 and earlier versions. The vulnerability stems from a lack of proper validation of client...

6.1CVSS6.3AI score0.00678EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2020/04/13 12:0 a.m.9 views

The vulnerability of Google Chrome’s mechanism for processing external browser protocols lies in the lack of a mechanism for checking entered data. This allows attackers to compromise the integrity of the data.

The vulnerability of Google Chrome’s mechanism for processing external browser protocols is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to influence the integrity of data by creating a malicious HTML page...

7.1CVSS7AI score0.01277EPSS
SaveExploits0References13Affected Software5
RedhatCVE
RedhatCVE
added 2020/04/09 2:6 p.m.26 views

CVE-2020-6443

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page...

8.8CVSS4.8AI score0.01803EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/04/08 12:0 a.m.6 views

express-mock-middleware input validation error vulnerability

express-mock-middleware is a mock middleware. An input validation error vulnerability exists in express-mock-middleware version 0.0.6 and earlier. The vulnerability stems from a network system or product that does not properly validate input data. No detailed vulnerability details are provided at...

5.3CVSS7AI score0.01243EPSS
SaveExploits1References1
Rows per page
Query Builder