Lucene search
K

15 matches found

Redos
Redos
added 2026/06/08 12:0 a.m.4 views

ROS-20260608-73-0024

The vulnerability of the .NET software platform is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

7.5CVSS5.5AI score0.0111EPSS
Exploits0
Redos
Redos
added 2026/06/08 12:0 a.m.5 views

ROS-20260608-73-0020

The vulnerability of the .NET software platform is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

7.5CVSS5.5AI score0.0111EPSS
Exploits0
Redos
Redos
added 2026/05/08 12:0 a.m.16 views

ROS-20260508-73-0003

Vulnerability in rubygem-activestorage related to insufficient neutralization of special elements in a request. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...

9.1CVSS6.2AI score0.00646EPSS
Exploits0
Redos
Redos
added 2026/05/05 12:0 a.m.8 views

ROS-20260505-73-0055

Vulnerability in python3 related to insufficient neutralization of special elements in a request. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

5.9CVSS7.5AI score0.00463EPSS
Exploits0
Redos
Redos
added 2026/02/09 12:0 a.m.5 views

ROS-20260209-73-0024

Vulnerability in composer related to insufficient neutralization of special elements in a request. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...

5.3CVSS6.2AI score0.00405EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/01 12:0 a.m.4 views

The vulnerability of the GUI component of the FortiSandbox threat detection and mitigation system allows a perpetrator to execute arbitrary commands.

The vulnerability of the GUI component of the FortiSandbox threat detection and mitigation system exists because measures to neutralize its special elements have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score0.09242EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/10 12:0 a.m.5 views

The vulnerability of the WhoDB database management system lies in the insufficient neutralization of special elements in data queries, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the WhoDB database management system is related to the insufficient neutralization of special elements in data queries. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

8.6CVSS7AI score0.00525EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:0 a.m.5 views

The vulnerability of the Linux operating system’s kernel, related to insufficient neutralization of certain elements in requests, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to insufficient neutralization of certain elements in the request. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00211EPSS
Exploits0References15Affected Software8
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.6 views

WordPress plugin WP Directory Kit Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An injection...

2.7CVSS7.3AI score0.00316EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.5 views

The vulnerability of the Zoom video conferencing service, which exists due to the lack of measures to neutralize special elements, allows a violator to increase their privileges.

The vulnerability of the Zoom video conferencing service exists due to the lack of measures taken to neutralize certain elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...

10CVSS7.7AI score0.01289EPSS
Exploits0References3Affected Software2
NVD
NVD
added 2022/04/14 3:15 p.m.14 views

CVE-2021-45228

An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user...

5.4CVSS0.00576EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2021/10/29 12:0 a.m.3 views

The vulnerability of the urllib3 module in the Python programming language lies in its insufficient ability to neutralize special elements in requests. This allows attackers to gain access to sensitive data and compromise its integrity.

The vulnerability of the urllib3 method in the Python programming language lies in the insufficient neutralization of special elements in HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

6.5CVSS7.1AI score0.02269EPSS
Exploits0References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/07/17 12:0 a.m.3 views

The vulnerability of the VPort 461 Series video server arises from the lack of measures to neutralize special elements used in operating system teams, allowing a hacker to execute arbitrary code.

The vulnerability of the VPort 461 Series video server is related to the lack of measures to neutralize special elements used in operating system teams. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS5.9AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.4 views

The vulnerability of the microprogrammed programmable logic controller SCALANCE, related to insufficient neutralization of special elements, allows a intruder to execute arbitrary system commands.

The vulnerability of the microprogrammed programmable logic controller SCALANCE is related to the insufficient neutralization of certain special elements. Exploiting this vulnerability allows an attacker with administrator privileges to execute arbitrary system commands...

9CVSS7.5AI score0.04269EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.4 views

The vulnerability of the microprogrammed programmable logic controller SCALANCE, related to insufficient neutralization of special elements, allows a intruder to execute arbitrary system commands.

The vulnerability of the microprogrammed programmable logic controller SCALANCE is related to the insufficient neutralization of certain special elements. Exploiting this vulnerability could allow a intruder, who does not have access to the Aruba Instant web interface, to execute arbitrary system...

10CVSS7.8AI score0.04631EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder