Lucene search
+L

1280 matches found

Positive Technologies
Positive Technologies
added 2024/07/09 12:00 a.m.31 views

PT-2024-4862 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: The issue is related to an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS part file. This could allow an attacker to execute code in the conte...

7.8CVSS8.2AI score0.00173EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/07/09 12:00 a.m.11 views

PT-2024-37537 · WordPress · Generate Pdf Using Contact Form 7

Name of the Vulnerable Software and Affected Versions: Generate PDF using Contact Form 7 plugin for WordPress versions up to, and including, 4.0.6 Description: The issue is due to missing nonce validation and missing file type validation in the wp cf7 pdf dashboard html page function, making it...

8.8CVSS8AI score0.00523EPSS
SaveExploits0References8
Circl
Circl
added 2024/07/07 2:57 a.m.10 views

CVE-2024-40603

creationtimestamp| type| source ---|---|--- 2024-07-07 02:57:28+00:00| seen| https://t.me/cvedetector/156 2025-03-17 21:47:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7860...

4.3CVSS4.8AI score0.002EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/06 3:15 p.m.8 views

CVE-2024-37547

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Livemesh Livemesh Addons for Elementor.This issue affects Livemesh Addons for Elementor: from n/a through 8.4.0...

6.5CVSS5.8AI score0.00519EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/02 9:15 a.m.9 views

CVE-2024-37030

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free...

9.8CVSS6.3AI score0.00569EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/07/02 12:00 a.m.12 views

OpenHarmony Security Vulnerabilities

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v4.0.0. A local attacker exploiting the vulnerability could cause an application to crash via type...

3.3CVSS6.4AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/02 12:00 a.m.19 views

PT-2024-26926 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 OpenHarmony version 4.0.0 Description: The issue allows a remote attacker to execute arbitrary code in pre-installed apps through out-of-bounds read and write. Recommendations: For OpenHarmony versions prio...

9.8CVSS8.1AI score0.00569EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/07/02 12:00 a.m.12 views

OpenHarmony Security Vulnerabilities

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v4.0.0. A remote attacker could exploit the vulnerability to execute arbitrary code in a pre-installe...

9.8CVSS7.6AI score0.0062EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/07/02 12:00 a.m.9 views

OpenHarmony Security Vulnerabilities

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v4.0.0. A remote attacker could exploit the vulnerability to execute arbitrary code in a pre-installe...

9.8CVSS7.6AI score0.00569EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.9 views

Tenable Security Center Security Breach

Tenable Security Center is a security center from Tenable USA. A security vulnerability exists in Tenable Security Center versions prior to 6.4.0 that originates from a vulnerability that allows an authenticated, remote attacker to view unauthorized objects and initiate scans without the required...

6.3CVSS6.7AI score0.00305EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/06/05 3:09 a.m.14 views

WordPress EmbedPress plugin <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via EmbedPress PDF Widget vulnerability discovered by wesley wcraft in WordPress Plugin EmbedPress versions = 4.0.1...

6.4CVSS5.8AI score0.00314EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/05/24 11:21 a.m.10 views

WordPress The Events Calendar < 6.4.0.1 - Authenticated (Contributor+) Arbitrary Events Access vulnerability

Authenticated Contributor+ Arbitrary Events Access vulnerability discovered by Scott Kingsley Clark in WordPress Plugin The Events Calendar versions 6.4.0.1...

6.5CVSS7AI score0.00464EPSS
SaveExploits2References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2024/05/24 12:00 a.m.6 views

VulnCheck KEV: CVE-2024-4455

The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the item parameter in versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

7.2CVSS5.8AI score0.0101EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/14 4:17 p.m.6 views

CVE-2024-33577

A vulnerability has been identified in Simcenter Femap All versions V2406. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current...

7.3CVSS5.9AI score0.00231EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/14 12:00 a.m.8 views

PT-2024-3561 · Fortinet · Fortisandbox

Name of the Vulnerable Software and Affected Versions: FortiSandbox versions 4.2.0 through 4.2.6 FortiSandbox versions 4.4.0 through 4.4.4 Description: The issue is related to the client-side enforcement of server-side security in FortiSandbox. It allows an attacker to execute unauthorized code o...

9CVSS7.8AI score0.00834EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/05/14 12:00 a.m.10 views

PT-2024-3682 · Siemens · Simcenter Femap

Name of the Vulnerable Software and Affected Versions: Simcenter Femap versions prior to V2406 Description: A vulnerability has been identified that allows an attacker to execute code in the context of the current process by exploiting an out of bounds read past the end of an allocated structure...

7.8CVSS8AI score0.0039EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/05/07 12:00 a.m.6 views

Logpoint 安全漏洞

Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.4.0 that originates from a vulnerability that allows an attacker to enumerate a list of valid usernames by observing the response time of the Forgot Passwor...

5.3CVSS6.6AI score0.0038EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/07 12:00 a.m.11 views

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v4.0.0 and earlier. A local attacker could exploit this vulnerability to execute arbitrary code in TCB via...

7.8CVSS7.3AI score0.00199EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/07 12:00 a.m.12 views

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v4.0.0 and earlier versions. A local attacker exploited the vulnerability to cause a service crash via null...

5.5CVSS6.4AI score0.00163EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/01 6:15 p.m.7 views

CVE-2024-30176

In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets...

5.3CVSS5.8AI score0.0038EPSS
SaveExploits0References2
Rows per page
Query Builder