Lucene search
+L

156 matches found

Mend
Mend
•added 2024/11/18 12:00 a.m.•7 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

8.7CVSS5.8AI score0.00633EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•19 views

Bitcoin Core security vulnerabilities

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in Bitcoin Core versions prior to 0.20.0. A remote attacker exploiting this vulnerability could cause a denial of service infinite loop via a malformed GETDATA messa...

7.5CVSS5.8AI score0.00633EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/11/18 12:00 a.m.•9 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

5.8AI score0.00633EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/18 12:00 a.m.•34 views

CVE-2024-52920

Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service infinite loop via a malformed GETDATA message...

0.00633EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/25 12:00 a.m.•19 views

PT-2024-32342 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned. Description: The issue is related to a possible out-of-bounds read in the ProtocolMiscHwConfigChangeAdapter::GetData function, located in protocolmiscadapter.cpp. This could lead to local...

5.5CVSS5.9AI score0.00076EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/25 12:00 a.m.•9 views

CVE-2024-47015: Out-of-bounds Read

In ProtocolMiscHwConfigChangeAdapter::GetData of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation...

5.5CVSS5.8AI score0.00076EPSS
SaveExploits0References1
osv_pub
osv_pub
•added 2024/10/01 12:00 a.m.•32 views

PUB-A-331672131

In ProtocolMiscHwConfigChangeAdapter::GetData of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation...

5.5CVSS5.8AI score0.00076EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/07 11:15 p.m.•38 views

CVE-2021-35001

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS3.2AI score0.00757EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2024/05/07 11:15 p.m.•11 views

CVE-2021-35001

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS6.3AI score0.00757EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2024/05/07 11:15 p.m.•21 views

CVE-2021-35001

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS5.7AI score
SaveExploits0References2
CVE
CVE
•added 2024/05/07 10:54 p.m.•114 views

CVE-2021-35001

CVE-2021-35001 affects BMC Track-It! GetData endpoint. The root cause is missing authorization prior to accessing functionality, allowing remote disclosure of sensitive information (stored credentials) on affected installations. Exploitation requires authentication per descriptions, and no explic...

6.5CVSS6AI score0.00757EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/05/07 10:54 p.m.•52 views

CVE-2021-35001 BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

3.1CVSS3.6AI score0.00757EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/07 12:00 a.m.•10 views

CVE-2021-35001: Missing Authorization

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

6.5CVSS6AI score0.00757EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/01/08 7:15 a.m.•17 views

CVE-2024-0301

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.6AI score0.00706EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/08 7:15 a.m.•28 views

Sql injection

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS7.7AI score0.00706EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/08 6:31 a.m.•9 views

CVE-2024-0301 fhs-opensource iparking PayTempOrderAction.java getData sql injection

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS7.6AI score0.00706EPSS
SaveExploits1References3
Mend
Mend
•added 2024/01/08 6:31 a.m.•7 views

CVE-2024-0301

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00706EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•4 views

CVE-2024-0301: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS6.5AI score0.00706EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/07 12:00 a.m.•10 views

PT-2024-15452

Name of the Vulnerable Software and Affected Versions fhs-opensource iparking version 1.5.22.RELEASE Description A critical vulnerability was found in the getData function of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. This issue leads to SQL injection and can be initiated...

9.8CVSS5.5AI score0.00706EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
•added 2023/02/15 5:50 a.m.•10 views

SUSE CVE-2011-3660

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors that...

10CVSS9.6AI score0.04372EPSS
SaveExploits0References8
Rows per page
Query Builder