Lucene search
+L

49 matches found

CNNVD
CNNVD
added 2023/02/11 12:0 a.m.5 views

Dell System Update 信任管理问题漏洞

Dell System Update is an application package from Dell, Inc. that provides application updates. A security vulnerability exists in Dell System Update version 2.0.0 and prior versions, which stems from the inclusion of incorrect certificate validation in the data parser module. No details of the...

6.5CVSS6.9AI score0.00176EPSS
SaveExploits0References2
CVE
CVE
added 2023/02/10 8:30 p.m.50 views

CVE-2022-34404

Summary (CVE-2022-34404) Dell System Update (versions 2.0.0 and earlier) contains an improper certificate validation flaw in the data parser module. The underlying issue is a certificate validation weakness that could enable a local attacker with high privileges to cause credential theft and/or d...

6.5CVSS5.8AI score0.00176EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/04/14 8:15 p.m.7 views

CVE-2021-44354

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

7.5CVSS7.2AI score0.01771EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/28 10:15 p.m.5 views

CVE-2021-44372

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetLocalLink param is not object. An attacker can send an HTTP request to trigger this vulnerability...

7.7CVSS7.2AI score0.01145EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/28 10:15 p.m.8 views

CVE-2021-44390

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. Format param is not object. An attacker can send an HTTP request to trigger this vulnerability...

7.7CVSS7.2AI score0.01207EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2019/11/01 1:3 p.m.9 views

php: Heap buffer over-read in exif_scan_thumbnail()

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exifreaddata function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information...

7.1CVSS7.3AI score0.0442EPSS
SaveExploits1References4
NVD
NVD
added 2017/07/17 1:18 p.m.18 views

CVE-2017-1000058

Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser...

6.1CVSS6.1AI score0.00726EPSS
SaveExploits0References1
Prion
Prion
added 2017/07/17 1:18 p.m.14 views

Cross site scripting

Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser...

4.3CVSS6.1AI score0.00726EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2017/07/13 8:0 p.m.24 views

CVE-2017-1000058

Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser...

6.1AI score0.00726EPSS
SaveExploits0References1
Rows per page
Query Builder