Lucene search
+L

11697 matches found

CNNVD
CNNVD
added 2024/04/08 12:0 a.m.9 views

Open-Xchange App Suite 跨站脚本漏洞

Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite that stems from an embedded content reference in a task that can be used to temporarily execute script code in the context of a user's...

5.4CVSS7AI score0.00531EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/04/08 12:0 a.m.12 views

PT-2024-19705 · Open Xchange Gmbh · Ox App Suite

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: Embedded content references at tasks could be used to temporarily execute script code in the context of the user's browser session. To...

5.4CVSS7.1AI score0.00531EPSS
SaveExploits0References9
Kitploit
Kitploit
added 2024/04/07 12:30 p.m.147 views

GDBFuzz - Fuzzing Embedded Systems Using Hardware Breakpoints

This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper. Please cite the above paper whe...

7.6AI score
SaveExploits0References6
NVD
NVD
added 2024/04/06 3:15 a.m.24 views

CVE-2024-3245

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Youtube block in all versions up to, and including, 3.9.14 due to insufficie...

6.4CVSS5.7AI score0.0032EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/05 5:42 p.m.98 views

CVE-2024-31850

CVE-2024-31850 affects CData Arc prior to 23.4.8839 (Java version) running with embedded Jetty. A path traversal flaw can let an unauthenticated remote attacker access sensitive information and perform limited actions via crafted HTTP requests. Root cause described as errors in handling relative ...

8.6CVSS6.8AI score0.03037EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/05 5:39 p.m.35 views

CVE-2024-31848

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application...

9.8CVSS9.8AI score0.08086EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2024/04/03 10:19 p.m.257 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 Checker The CVE-2024-3094 Checker is a powerful...

10CVSS9.8AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/04/03 7:10 p.m.279 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094-Checker The repository consists of a checker fil...

10CVSS10AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/04/03 1:9 p.m.207 views

Exploit for Embedded Malicious Code in Tukaani Xz

xz-backdoor-CVE-2024-3094-Check Verify if your installed versi...

10CVSS9.8AI score0.85974EPSS
SaveExploits41
vulnersOsv
vulnersOsv
added 2024/04/02 9:30 p.m.8 views

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4 <=0.0.5), org.apache.pulsar:pulsar-broker-auth-athenz (>=2.11.0 <=2.11.4) +3 more potentially affected by CVE-2024-29834 via org.apache.pulsar:pulsar-broker (>=2.11.0 <=2.11.4)

org.apache.pulsar:pulsar-broker MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.4 Source cves: CVE-2024-29834 Source advisory: OSV:GHSA-7MG2-6C6V-342R...

6.4CVSS6.9AI score0.01359EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2024/04/02 8:17 p.m.296 views

Exploit for Embedded Malicious Code in Tukaani Xz

apocalypxze: xz backdoor 2024 AKA CVE-2024-3094 related links...

10CVSS9.9AI score0.85974EPSS
SaveExploits41
CVE
CVE
added 2024/04/02 12:0 a.m.79 views

CVE-2024-25075

Softing uaToolkit Embedded (prior to 1.41.1) is affected. A vulnerability arises when a subscription is created with an extremely low MaxNotificationPerPublish value, causing the publish response to be mishandled and leading to memory consumption. Sustained instances can exhaust device memory and...

5.1CVSS6.7AI score0.00169EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2024/04/02 12:0 a.m.9 views

April 2, 2024, update for Office 2016 (KB5002572)

None None...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:0 a.m.9 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS, iPadOS, tvOS, macOS, watchOS, as well as the Safari browser, allows attackers to execute arbitrary code.

The vulnerability of the web page rendering modules in WebKitGTK+ and WPE for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS7.1AI score0.01069EPSS
SaveExploits0References12Affected Software11
CNNVD
CNNVD
added 2024/04/02 12:0 a.m.7 views

Softing uaToolkit Embedded 安全漏洞

Softing UaToolkit Embedded is used to support the development of embedded Opc Ua applications via client/server and publisher/subscriber communication by Softing Germany. A security vulnerability exists in Softing uaToolkit Embedded versions 1.30 through 1.41.1, which stems from a mishandling of...

5.1CVSS6.7AI score0.00169EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/02 12:0 a.m.11 views

PT-2024-20726 · Softing · Softing Uatoolkit Embedded

Name of the Vulnerable Software and Affected Versions: Softing uaToolkit Embedded versions prior to 1.41.1 Description: An issue was discovered in Softing uaToolkit Embedded. When a subscription with a very low MaxNotificationPerPublish parameter is created, a publish response is mishandled,...

5.1CVSS7.2AI score0.00169EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2024/04/01 3:15 p.m.348 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 CVE-2024-3094 checker - Golang Ps.: This versio...

10CVSS9.9AI score0.85974EPSS
SaveExploits41
RedhatCVE
RedhatCVE
added 2024/04/01 2:51 p.m.35 views

CVE-2024-25110

An integer overflow vulnerability was found in python-uamqp-azure affecting the embedded azure-uamqp-c library at the message.c file. If some uncommon conditions are met, an authenticated user may cause remote code execution...

6CVSS7.5AI score0.06645EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2024/04/01 1:56 a.m.315 views

Exploit for Embedded Malicious Code in Tukaani Xz

Vulnerability Overview XZ is a data compression format that e...

10CVSS7.5AI score0.85974EPSS
SaveExploits41
GithubExploit
GithubExploit
added 2024/03/30 7:38 a.m.374 views

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 vul check tools This vulnerability allows an at...

10CVSS10AI score0.85974EPSS
SaveExploits41
Rows per page
Query Builder