Lucene search
+L

19805 matches found

Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•17 views

PT-2024-8219

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted X B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This issue can...

10CVSS8AI score0.0042EPSS
SaveExploits0References12
Microsoft Security Update
Microsoft Security Update
•added 2024/02/13 6:00 p.m.•44 views

2024-02 Dynamic Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5034763)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

7.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2024/02/13 6:00 p.m.•30 views

2024-02 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5034763)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

7.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2024/02/13 6:00 p.m.•19 views

2024-02 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5034763)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

7.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2024/02/13 6:00 p.m.•25 views

2024-02 Dynamic Cumulative Update for Windows 11 for x64-based Systems (KB5034766)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

7.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2024/02/13 6:00 p.m.•31 views

2024-02 Dynamic Cumulative Update for Windows 11 for ARM64-based Systems (KB5034766)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•19 views

AMI MegaRAC SP-X Software Compromise

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

8.3CVSS8.8AI score0.00259EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•24 views

AMI MegaRAC SP-X Software Compromise Data Compromise

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

8.3CVSS8.8AI score0.00259EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
•added 2024/02/12 10:38 a.m.•21 views

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

9.8CVSS7.7AI score0.99931EPSS
SaveExploits44References7
Positive Technologies
Positive Technologies
•added 2024/02/12 12:00 a.m.•12 views

PT-2024-7782

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted file, such as MODEL, SLDPRT, or SLDASM, can cause a Heap-based Overflow when parsed in ODXSW DLL.dll and libodxdll.dll through Autodesk applications. This can...

7.8CVSS7.7AI score0.00515EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
•added 2024/02/12 12:00 a.m.•23 views

PT-2024-19684 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted IGS or IGES file in tbb.dll, when parsed through Autodesk AutoCAD, can be used in a user-after-free issue. This issue, along with other issues, could lead to...

7.8CVSS7.5AI score0.00488EPSS
SaveExploits0References11
NVD
NVD
•added 2024/02/10 9:15 a.m.•58 views

CVE-2023-51492

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.6.3.1...

6.5CVSS6.4AI score0.00328EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/02/10 9:15 a.m.•16 views

CVE-2023-51492

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.6.3.1...

5.4CVSS6.7AI score0.00328EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/10 9:15 a.m.•29 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.6.3.1...

4.9CVSS7.2AI score0.00328EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/02/10 8:23 a.m.•17 views

CVE-2023-51492 WordPress If-So Dynamic Content Personalization Plugin <= 1.6.3.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.6.3.1...

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/10 8:23 a.m.•86 views

CVE-2023-51492

CVE-2023-51492 is a Stored Cross-Site Scripting (XSS) vulnerability in the If-So Dynamic Content Personalization WordPress plugin. The issue arises from improper input neutralization during web page generation, affecting the plugin’s input handling for authenticated users (Contributor+). Affected...

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References1Affected Software1
Fedora
Fedora
•added 2024/02/10 1:27 a.m.•22 views

[SECURITY] Fedora 39 Update: libkrun-1.7.2-4.fc39

Dynamic library providing Virtualization-based process isolation capabilities...

9.8CVSS8.2AI score0.00652EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2024/02/10 12:00 a.m.•18 views

Fedora: Security Advisory for libkrun (FEDORA-2024-04877592b7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.4AI score0.00652EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/10 12:00 a.m.•23 views

PT-2024-14151 · Unknown · If-So Dynamic Content Personalization

Name of the Vulnerable Software and Affected Versions: If-So Dynamic Content Personalization versions 1.6.3.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that ...

6.5CVSS6.7AI score0.00328EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/10 12:00 a.m.•8 views

CVE-2023-51492: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.6.3.1...

6.5CVSS6.8AI score0.00328EPSS
SaveExploits0References3
Rows per page
Query Builder