Lucene search
+L

147 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/26 12:00 a.m.•5 views

CVE-2025-40664: Missing Authentication for Critical Function

Missing authentication vulnerability in TCMAN GIM v11. This allows an unauthenticated attacker to access the resources /frmGestionUser.aspx/GetData, /frmGestionUser.aspx/updateUser and /frmGestionUser.aspx/DeleteUser...

9.3CVSS5.9AI score0.0055EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/05/22 12:00 a.m.•18 views

Employee Record System getData.php File SQL Injection Vulnerability

Employee Record System is an employee record system. Employee Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter keywords in the file /dashboard/getData.php. An attacker can exploit this...

8.8CVSS8.3AI score0.00487EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•15 views

Code-Projects Employee Record System 注入漏洞

Code-Projects Employee Record System is a Code-Projects open source employee record system. Code-Projects Employee Record System version 1.0 has an injection vulnerability, the vulnerability stems from improper handling of the parameter keywords in the file /dashboard/getData.php, which may lead ...

8.8CVSS7AI score0.00487EPSS
SaveExploits1References6
Mend
Mend
•added 2025/01/30 1:00 p.m.•2 views

CVE-2025-0870

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of ...

6.3CVSS0.00542EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
•added 2025/01/30 1:00 p.m.•25 views

CVE-2025-0870

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of ...

6.3CVSS7.3AI score0.00542EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/01/30 12:00 a.m.•18 views

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files from Axiomatic Systems. A security vulnerability exists in Bento4 1.6.0-641 and earlier versions, which stems from a heap buffer overflow in the AP4DataBuffer::GetData function...

6.3CVSS5.9AI score0.00542EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/01/30 12:00 a.m.•19 views

PT-2025-4079

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 versions up to 1.6.0-641 Description The issue affects the function AP4 DataBuffer::GetData in the library Ap4DataBuffer.h, leading to a heap-based buffer overflow. This can be exploited remotely, with a rather high complexity...

6.3CVSS5.5AI score0.00542EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/30 12:00 a.m.•4 views

CVE-2025-0870: Heap-based Buffer Overflow

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of ...

6.3CVSS5.3AI score0.00542EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/18 4:15 a.m.•48 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

7.5CVSS0.00633EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/18 12:00 a.m.•85 views

CVE-2024-52920

Bitcoin Core versions prior to 0.20.0 are vulnerable to a denial of service (DoS) condition. A remote attacker can trigger an infinite loop by sending a malformed GETDATA message, which may lead to a node crash. To resolve this issue, users should upgrade to version 0.20.0 or later. As a temporar...

7.5CVSS6.7AI score0.00633EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/18 12:00 a.m.•9 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

6.9AI score0.00633EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/18 12:00 a.m.•34 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

0.00633EPSS
SaveExploits0References2
Mend
Mend
•added 2024/11/18 12:00 a.m.•2 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

8.7CVSS0.00633EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•3 views

CVE-2024-52920: Allocation of Resources Without Limits or Throttling

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

7.5CVSS5.8AI score0.00633EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•16 views

Bitcoin Core 安全漏洞

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in Bitcoin Core versions prior to 0.20.0. A remote attacker exploiting this vulnerability could cause a denial of service infinite loop via a malformed GETDATA messa...

7.5CVSS6.5AI score0.00633EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/25 12:00 a.m.•18 views

PT-2024-32342 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned. Description: The issue is related to a possible out-of-bounds read in the ProtocolMiscHwConfigChangeAdapter::GetData function, located in protocolmiscadapter.cpp. This could lead to local...

5.5CVSS5.3AI score0.00076EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/25 12:00 a.m.•6 views

CVE-2024-47015: Out-of-bounds Read

In ProtocolMiscHwConfigChangeAdapter::GetData of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation...

5.5CVSS5.8AI score0.00076EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/01 12:00 a.m.•21 views

PUB-A-331672131

In ProtocolMiscHwConfigChangeAdapter::GetData of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation...

5.5CVSS5.8AI score0.00076EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/07 11:15 p.m.•15 views

CVE-2021-35001

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS5.7AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2024/05/07 11:15 p.m.•10 views

CVE-2021-35001

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS6.3AI score0.00757EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder