6928 matches found
Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2022-71765)
Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions, which can be exploited by an...
CSZ CMS SQL Injection Vulnerability (CNVD-2022-30780)
CSZ CMS is a PHP-based open source content management system CMS. cszcmsadminMembersviewUsers version 1.2.2 contains a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements and can be exploited by attackers to execute illegal SQL commands t...
Movie Seat Reservation System SQL Injection Vulnerability
Movie Seat Reservation System is a seat reservation system from an individual developer.Movie Seat Reservation System is vulnerable to SQL injection, which can be exploited by attackers to execute malicious SQL commands...
CSZ CMS SQL Injection Vulnerability (CNVD-2022-30779)
CSZ CMS is a PHP-based open source content management system CMS. CSZ CMS version 1.2.2 contains a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in cszcmsadminPluginmanagersetstatus, and can be exploited by attackers to execute illegal...
CVE-2021-43287
creationtimestamp| type| source ---|---|--- 2022-04-14 16:19:03+00:00| seen| https://t.me/cibsecurity/40760 2024-11-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-18 2025-01-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-15...
CVE-2014-9118
creationtimestamp| type| source ---|---|--- 2022-04-14 15:17:01+00:00| exploited| https://t.me/NeKaspersky/2117 2022-07-13 13:02:16+00:00| seen| MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a 2024-11-30 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-30 2024-12-19...
CVE-2022-24816
creationtimestamp| type| source ---|---|--- 2022-04-14 00:18:15+00:00| seen| https://t.me/cibsecurity/40743 2024-06-26 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-11-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-08 2024-11-13...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...
Siemens TIA Administrator Denial of Service Vulnerability
SIMATIC PCS neo is a distributed control system DCS.TIA Administrator is a web-based framework.Siemens Network Planner SINETPLAN supports you as a planner of PROFINET-based automation systems.TIA Portal is a PC A denial of service vulnerability exists in Siemens TIA Administrator, which can be...
Siemens SIMATIC S7-400 CPU Denial of Service Vulnerability
The SIMATIC S7-400 CPU family is designed for process control in industrial environments. A denial of service vulnerability exists in the Siemens SIMATIC S7-400 CPUs that can be exploited by an attacker to create a denial of service condition...
Microsoft Windows Multiple Vulnerabilities (KB5012599)
This host is missing an important security update according to Microsoft KB5012599 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Samsung SMR Input Validation Error Vulnerability (CNVD-2022-63647)
Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR is vulnerable to an input validation error, which could be exploited by attackers to launch certain activities...
Siemens Mendix Access Control Error Vulnerability
Mendix is a high-productivity application platform that enables you to build and continuously improve mobile and large-scale Web applications. Siemens Mendix is vulnerable to an access control error that could be exploited by an attacker to extract information about the content of protected field...
Samsung Smart Switch PC DLL hijacking vulnerability
Samsung Smart Switch PC is a Windows software from Samsung, a South Korean company, used for data transfer. A security vulnerability exists in previous versions of Samsung Smart Switch PC 4.2.220224, which can be exploited by attackers to execute arbitrary code...
CISA Adds 10 Known Exploited Vulnerabilities to Catalog
CISA has added 10 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...
Siemens SCALANCE X-300 Switch Family Devices Cross-Site Scripting Vulnerability
SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs.SIPLUS extreme is designed for reliable operation under extreme conditions. A cross-site scripting vulnerability exists in Siemens SCALANCE X-300 Switch Famil...
Microsoft Windows Multiple Vulnerabilities (KB5012596)
This host is missing an important security update according to Microsoft KB5012596 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5012647)
This host is missing an important security update according to Microsoft KB5012647 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
