Lucene search
+L

652 matches found

Cvelist
Cvelist
•added 2022/11/08 12:00 a.m.•39 views

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

5.9AI score0.00476EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/11/08 12:00 a.m.•22 views

PT-2022-24710 · Zte · Zaip-Aie

Name of the Vulnerable Software and Affected Versions: ZTE ZAIP-AIE affected versions not specified Description: The issue is related to a SQL injection vulnerability. Due to the lack of input verification by the server, an attacker could trigger an attack by building malicious requests. This cou...

5.3CVSS5.4AI score0.00476EPSS
SaveExploits0References4
CVE
CVE
•added 2022/11/08 12:00 a.m.•90 views

CVE-2022-39069

ZTE ZAIP-AIE is affected by CVE-2022-39069, a SQL injection vulnerability caused by insufficient input verification on the server. The issue can allow an attacker to construct malicious requests, potentially leaking content from the current table. The CVE has a medium severity (CVSS v3.1 base sco...

5.3CVSS5.6AI score0.00476EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/11/02 12:00 a.m.•24 views

The vulnerability of the Cisco Discovery Protocol implementation in the microsoftware of Cisco Analog Telephone Adapter (ATA) series 190 devices allows a perpetrator to cause a service failure.

The vulnerability of the Cisco Discovery Protocol implementation in microprogrammable devices of the Cisco Analog Telephone Adapter ATA series 190 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS6.5AI score0.00668EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/10/21 12:00 a.m.•18 views

The vulnerability of the virtual learning environment Moodle, related to the restoration of unreliable data in memory, allows a perpetrator to execute arbitrary code.

The vulnerability in the virtual training environment Moodle is related to the insecure input verification during the restoration of backup files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading the restored file...

10CVSS6.7AI score0.02009EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/10/13 12:00 a.m.•15 views

The vulnerability of the ICCP component of the Hitachi Energy MicroSCADA X SYS600 software system allows a intruder to perform maintenance-related malfunctions.

The vulnerability of the ICCP component of the Hitachi Energy MicroSCADA X SYS600 system management software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to perform maintenance operations remotely...

7.8CVSS7.1AI score0.00768EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/13 12:00 a.m.•15 views

The vulnerability of the IEC 61850 protocol processor in the Hitachi Energy MicroSCADA X SYS600 system control and management software allows a intruder to perform maintenance-related malfunctions.

The vulnerability of the IEC 61850 protocol processor in the Hitachi Energy MicroSCADA X SYS600 equipment management system exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to perform maintenance operations remotely...

7.8CVSS7.1AI score0.00791EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/09/26 12:00 a.m.•27 views

The vulnerability of the update mechanism implemented by the antivirus software Apex One allows a hacker to gain unauthorized access to protected information.

The vulnerability of the update mechanism of the antivirus software Apex One is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by downloading a specially created...

9CVSS7.2AI score0.03291EPSS
SaveExploits0References7
OSV
OSV
•added 2022/09/20 8:15 p.m.•17 views

CVE-2022-37395

A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS attacks.Affected product versions include:CV81-WDM FW versions 01.70.49.29.46...

7.5CVSS5.8AI score0.00564EPSS
SaveExploits0References1
NVD
NVD
•added 2022/09/20 8:15 p.m.•32 views

CVE-2022-37395

A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS attacks.Affected product versions include:CV81-WDM FW versions 01.70.49.29.46...

7.5CVSS0.00564EPSS
SaveExploits0References1
Prion
Prion
•added 2022/09/20 8:15 p.m.•23 views

Design/Logic Flaw

A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS attacks.Affected product versions include:CV81-WDM FW versions 01.70.49.29.46...

5CVSS7.5AI score0.00564EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/09/20 7:46 p.m.•8 views

CVE-2022-37395

A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS attacks.Affected product versions include:CV81-WDM FW versions 01.70.49.29.46...

7.5AI score0.00564EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/20 7:46 p.m.•82 views

CVE-2022-37395

CVE-2022-37395 affects Huawei CV81-WDM FW version 01.70.49.29.46 and describes an input verification vulnerability that can be exploited remotely to cause a Denial of Service. Multiple connected sources corroborate the issue and the affected product, including Huawei’s PSIRT advisory and vendor/R...

7.5CVSS7.4AI score0.00564EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/09/07 12:00 a.m.•23 views

The vulnerability of the Diagnostics component of the Oracle Applications Framework software, a part of the Oracle E-Business Suite, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Diagnostics component of the Oracle Applications Framework software in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

7.8CVSS7.3AI score0.01104EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/08/22 12:00 a.m.•17 views

The vulnerability of the RemoteCapture function in the microprogrammed software of industrial switches SCALANCE W1788-1 M12, SCALANCE W1788-2 EEC M12, SCALANCE W1788-2 M12, and SCALANCE W1788-2IA M12 allows a intruder to trigger a service failure.

The vulnerability of the RemoteCapture function in the microprogrammed software of industrial switches SCALANCE W1788-1 M12, SCALANCE W1788-2 EEC M12, SCALANCE W1788-2 M12, and SCALANCE W1788-2IA M12 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a...

6.5CVSS6.5AI score0.00369EPSS
SaveExploits0References3Affected Software4
Positive Technologies
Positive Technologies
•added 2022/08/04 12:00 a.m.•10 views

PT-2022-4946 · Huawei · Cv81-Wdm

Name of the Vulnerable Software and Affected Versions: CV81-WDM FW versions 01.70.49.29.46 Description: The issue is related to insufficient input verification in the software of Huawei multifunctional devices, which can be exploited by a remote attacker to cause a denial of service DoS using a...

7.8CVSS7.3AI score0.00564EPSS
SaveExploits0References6
Huawei
Huawei
•added 2022/08/04 12:00 a.m.•46 views

Security Advisory - The input verification vulnerability of a Huawei Device product is involved.

A Huawei device has an input verification vulnerability. Successful exploitation of this vulnerability may lead to DoS attacks. Vulnerability ID: HWPSIRT-2022-49379 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-37395. For products that have released...

7.5CVSS7.5AI score0.00564EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/07/29 12:00 a.m.•14 views

The vulnerability of the microprogrammed software in the MELSEC-Q Series QJ71E71-100, MELSEC-L Series LJ71E71-100, and MELSEC iQ-R Series RD81MES96N programmable logic controllers arises due to insufficient verification of input data. This allows a perpetrator to trigger malfunctions or execute malicious code.

The vulnerability of the microprogrammed software in the MELSEC-Q Series QJ71E71-100, MELSEC-L Series LJ71E71-100, and MELSEC iQ-R Series RD81MES96N controllers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause malfunctions o...

10CVSS7.9AI score0.02277EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/07/28 4:35 p.m.•37 views

CVE-2016-0796

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, including open proxy and security bypass vulnerabilities because it fails to properly verify user-supplied input. An attacker may leverage these issues to hide attacks directed at a...

7.7AI score0.01307EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/07/26 12:00 a.m.•21 views

The vulnerability of Huawei CV81-WDM FW printer’s microprogramming software, which arises due to insufficient verification of input data, allows a perpetrator to trigger a service failure.

The vulnerability of Huawei CV81-WDM FW printer’s microprogramming software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted package...

7.8CVSS5.4AI score0.00174EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder