Lucene search
+L

267 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/18 12:00 a.m.•3 views

CVE-2024-55997: Missing Authorization

Missing Authorization vulnerability in webchunky Order Delivery & Pickup Location Date Time order-delivery-pickup-location-date-time-free-version allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery & Pickup Location Date Time: from n/a through...

6.5CVSS5.9AI score0.00475EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/14 8:53 p.m.•15 views

WordPress Order Delivery & Pickup Location Date Time plugin <= 1.1.0 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Order Delivery & Pickup Location Date Time versions = 1.1.0...

6.5CVSS7AI score0.00475EPSS
SaveExploits0Affected Software1
Microsoft KB
Microsoft KB
•added 2024/11/21 12:00 a.m.•15 views

November 21, 2024—KB5046732 (OS Builds 22621.4541 and 22631.4541) Preview

None None...

6.1AI score
SaveExploits0
Circl
Circl
•added 2024/10/09 5:19 p.m.•14 views

CVE-2024-45144

creationtimestamp| type| source ---|---|--- 2024-10-09 17:19:22+00:00| seen| https://t.me/cvedetector/7475...

7.8CVSS4.8AI score0.00281EPSS
SaveExploits0References1
Circl
Circl
•added 2024/10/03 8:48 p.m.•29 views

CVE-2024-41987

creationtimestamp| type| source ---|---|--- 2024-10-03 20:48:05+00:00| seen| https://t.me/cvedetector/6921...

8.6CVSS4.8AI score0.00245EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/23 12:00 a.m.•9 views

PT-2024-40036 · Ouch · Ouch

Name of the Vulnerable Software and Affected Versions: ouch affected versions not specified Description: The issue arises when attempting to decompress a file using ouch. It involves reaching the function ouch::archive::zip::convert zip date time, which contains an unsafe function, transmute. Thi...

5.1CVSS6.9AI score
SaveExploits0References4
RustSec
RustSec
•added 2024/09/22 12:00 p.m.•12 views

Segmentation fault due to use of uninitialized memory

When trying to decompress a file using "ouch", we can reach the function "ouch::archive::zip::convertzipdatetime". In the function, there is a unsafe function, "transmute". Once the "transmute" function is called to convert the type of "month" object, the address of the object is changed to the...

7.1AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2024/09/22 12:00 a.m.•10 views

PT-2024-40921 · Ouch · Ouch

Name of the Vulnerable Software and Affected Versions: ouch affected versions not specified Description: The issue arises when attempting to decompress a file using ouch. It involves reaching the function ouch::archive::zip::convert zip date time, where an unsafe function, transmute, is called...

6.9AI score
SaveExploits0References4
CNVD
CNVD
•added 2024/07/19 12:00 a.m.•10 views

D-Link DAP-2622 Stack Buffer Overflow Remote Code Execution Vulnerability (CNVD-2025-29676)

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a DDP...

8.8CVSS8.9AI score0.00872EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•16 views

D-Link DAP-2622 Stack Buffer Overflow Remote Code Execution Vulnerability (CNVD-2025-29679)

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS8.9AI score0.0108EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•46 views

D-Link DAP-2622 Stack Buffer Overflow Remote Code Execution Vulnerability (CNVD-2025-29680)

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS8.9AI score0.0108EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:23 p.m.•8 views

Malicious code in Bе.Vlaanderen.Basisregisters.Utilitіes.Rfc3339DatеTіmeOffset (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
attackerkb
attackerkb
•added 2024/05/07 11:15 p.m.•7 views

CVE-2023-35757

D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS6.4AI score0.00605EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/07 12:00 a.m.•13 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a stack-based buffer overflow remote code execution vulnerability in the DDP Set Date Time NTP server. An attacker could exploit the...

8.8CVSS8.5AI score0.00605EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•15 views

D-Link DAP-2622 安全漏洞

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a DDP...

8.8CVSS8.8AI score0.00872EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•15 views

D-Link DAP-2622 安全漏洞

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS8.8AI score0.0108EPSS
SaveExploits0References3
OSV
OSV
•added 2024/04/25 12:15 p.m.•15 views

CVE-2024-4167

A vulnerability was found in Tenda 4G300 1.01.42 and classified as critical. Affected by this issue is the function sub422AA4. The manipulation of the argument year/month/day/hour/minute/second leads to stack-based buffer overflow. The attack may be launched remotely. VDB-261986 is the identifier...

8.8CVSS6.3AI score0.0177EPSS
SaveExploits1References4
NVD
NVD
•added 2024/04/23 5:15 a.m.•49 views

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...

9.8CVSS9.6AI score0.01025EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/04/23 5:00 a.m.•15 views

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...

9.8CVSS9.6AI score0.01025EPSS
SaveExploits0References4
OSV
OSV
•added 2024/04/23 5:00 a.m.•28 views

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...

9.8CVSS7.4AI score
SaveExploits0References6
Rows per page
Query Builder