Lucene search
K

1018 matches found

NVD
NVD
added 2023/12/17 8:15 a.m.8 views

CVE-2023-6894

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been classified as problematic. This affects an unknown part of the file access/html/system.html of the component Log File Handler. The manipulation leads to information disclosure. The exploit has...

6.5CVSS0.00097EPSS
Exploits1References3
Prion
Prion
added 2023/12/17 8:15 a.m.17 views

Design/Logic Flaw

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been classified as problematic. This affects an unknown part of the file access/html/system.html of the component Log File Handler. The manipulation leads to information disclosure. The exploit has...

3.3CVSS6.7AI score0.00097EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/17 7:31 a.m.6 views

CVE-2023-6894 Hikvision Intercom Broadcasting System Log File system.html information disclosure

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been classified as problematic. This affects an unknown part of the file access/html/system.html of the component Log File Handler. The manipulation leads to information disclosure. The exploit has...

4.3CVSS6.3AI score0.00097EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/12/17 12:0 a.m.2 views

PT-2023-32804 · Hikvision · Hikvision Intercom Broadcasting System

Name of the Vulnerable Software and Affected Versions: Hikvision Intercom Broadcasting System version 3.0.3 20201113 RELEASEHIK Description: A vulnerability was found in the Log File Handler component, affecting an unknown part of the file access/html/system.html. The manipulation leads to...

6.5CVSS4.7AI score0.00097EPSS
Exploits1References7
NVD
NVD
added 2023/11/24 2:15 p.m.8 views

CVE-2023-6274

A vulnerability was found in Byzoro Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/updatelib.php of the component PHP File Handler. The manipulation of the argument fileupload leads to unrestricted...

9.8CVSS0.00035EPSS
Exploits1References4
OSV
OSV
added 2023/11/24 2:15 p.m.1 views

CVE-2023-6274

A vulnerability was found in Byzoro Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/updatelib.php of the component PHP File Handler. The manipulation of the argument fileupload leads to unrestricted...

9.8CVSS5.3AI score
Exploits0References4
Prion
Prion
added 2023/11/24 2:15 p.m.8 views

Out-of-bounds

A vulnerability was found in Beijing Baichuo Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/updatelib.php of the component PHP File Handler. The manipulation of the argument fileupload leads to...

6.5CVSS7.1AI score0.00035EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/11/24 2:0 p.m.16 views

CVE-2023-6274 Byzoro Smart S80 PHP File updatelib.php unrestricted upload

A vulnerability was found in Byzoro Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/updatelib.php of the component PHP File Handler. The manipulation of the argument fileupload leads to unrestricted...

6.5CVSS9.7AI score0.00035EPSS
Exploits1References4
CVE
CVE
added 2023/11/24 2:0 p.m.53 views

CVE-2023-6274

Byzoro Smart S80 up to 20231108 has a vulnerability in /sysmanage/updatelib.php (PHP File Handler) where the file_upload parameter can be manipulated to achieve unrestricted uploads. The vulnerability is exploitable remotely and the exploit has been publicly disclosed (VDB-246103). Connected advi...

9.8CVSS8.1AI score0.00035EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/09 12:0 a.m.1 views

PT-2023-8590 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: A memory corruption vulnerability has been identified in the PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrar...

9CVSS9.1AI score0.00191EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2023/11/07 8:54 a.m.3 views

python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations

A vulnerability was found in the python-tornado library. This flaw causes an open redirect vulnerability that allows a remote, unauthenticated attacker to redirect a user to an arbitrary website and conduct a phishing attack by having the user access a specially crafted URL...

6.1CVSS7.4AI score0.0043EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/10/24 1:0 a.m.1 views

SUSE CVE-2023-5701

A vulnerability has been found in vnotex vnote up to 3.17.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Markdown File Handler. The manipulation with the input Click here leads to cross site scripting. The attack can be launched...

6.1CVSS4.3AI score0.00079EPSS
Exploits1References3
NVD
NVD
added 2023/10/23 1:15 a.m.8 views

CVE-2023-5701

A vulnerability has been found in vnotex vnote up to 3.17.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Markdown File Handler. The manipulation with the input Click here leads to cross site scripting. The attack can be launched...

6.1CVSS4.7AI score0.00079EPSS
Exploits1References3
OSV
OSV
added 2023/10/23 1:15 a.m.6 views

CVE-2023-5701

A vulnerability has been found in vnotex vnote up to 3.17.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Markdown File Handler. The manipulation with the input Click here leads to cross site scripting. The attack can be launched...

6.1CVSS6.2AI score
Exploits0References3
Prion
Prion
added 2023/10/23 1:15 a.m.9 views

Cross site scripting

A vulnerability has been found in vnotex vnote up to 3.17.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Markdown File Handler. The manipulation with the input Click here leads to cross site scripting. The attack can be launched...

5CVSS5.9AI score0.00079EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/23 12:0 a.m.11 views

CVE-2023-5701 vnotex vnote Markdown File cross site scripting

A vulnerability has been found in vnotex vnote up to 3.17.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Markdown File Handler. The manipulation with the input Click here leads to cross site scripting. The attack can be launched...

5CVSS6AI score0.00079EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/10/23 12:0 a.m.1 views

VNote Cross-Site Scripting Vulnerability

VNote is an open source cross-platform Markdown note-taking tool. A security vulnerability exists in VNote 3.17.0 and earlier versions, which stems from a cross-site scripting XSS vulnerability in the component Markdown File Handler...

6.1CVSS5.8AI score0.00079EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/10/22 12:0 a.m.2 views

PT-2023-32274 · Vnotex · Vnotex

Name of the Vulnerable Software and Affected Versions: vnotex vnote versions up to 3.17.0 Description: A vulnerability has been found in the Markdown File Handler component, which can be exploited to lead to cross-site scripting. The manipulation with the input Click here can be used to launch a...

6.1CVSS6.7AI score0.00079EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.21 views

Amazon Linux 2 : jbigkit (ALAS-2023-2305)

The version of jbigkit installed on the remote host is prior to 2.0-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2305 advisory. A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of...

6.5CVSS6AI score0.0005EPSS
Exploits1References4
Amazon
Amazon
added 2023/10/19 12:0 a.m.17 views

Medium: jbigkit

Issue Overview: A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been...

6.5CVSS6.2AI score0.0005EPSS
Exploits1
Rows per page
Query Builder