Lucene search
+L

13810 matches found

CNNVD
CNNVD
added 2023/04/11 12:00 a.m.10 views

Mozilla Firefox ESR 安全漏洞

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox ESR prior to version 102.10, which originates from a line break in a filename that can bypass the file extension security...

9.8CVSS7.9AI score0.0094EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2023/04/11 12:00 a.m.15 views

The vulnerability of the command-line interface of Cisco IOS XE SD-WAN software allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface of Cisco IOS XE SD-WAN software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

7.8CVSS7.5AI score0.00222EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/04/10 12:00 a.m.14 views

The vulnerability of the Cisco Identity Services Engine (ISE) platform, related to the lack of data cleansing at the management level, allows attackers to execute arbitrary commands and elevate their privileges to the root level.

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands and elevate their privileges to root using a specially created CLI command...

6.2CVSS7AI score0.00448EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/10 12:00 a.m.16 views

The vulnerability of the command-line interface of Siemens SCALANCE industrial switches allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of Siemens SCALANCE industrial switches exists due to the lack of measures taken to protect the command-line interface. Exploitation of this vulnerability allows a malicious actor to execute arbitrary commands remotely...

9CVSS7.9AI score0.02843EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/04/10 12:00 a.m.11 views

The vulnerability of the Cisco Identity Services Engine (ISE) platform, related to the lack of data cleansing at the management level, allows attackers to execute arbitrary commands and elevate their privileges to the root level.

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands and elevate their privileges to root using a specially created CLI command...

6.2CVSS7AI score0.00448EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/04/07 12:15 p.m.25 views

CVE-2023-28993

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ignazio Scimone Albo Pretorio On Line plugin = 4.6.1 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/07 12:15 p.m.10 views

CVE-2023-28993

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ignazio Scimone Albo Pretorio On Line plugin = 4.6.1 versions...

6.1CVSS6.8AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/07 12:15 p.m.20 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ignazio Scimone Albo Pretorio On Line plugin = 4.6.1 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/04/07 11:26 a.m.65 views

CVE-2023-28993

Mode C: CVE-2023-28993 describes an unauthenticated reflected XSS in the WordPress plugin Albo Pretorio On Line (versions

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/07 12:00 a.m.17 views

PT-2023-22070 · WordPress · Ignazio Scimone Albo Pretorio On Line

Name of the Vulnerable Software and Affected Versions: Ignazio Scimone Albo Pretorio On Line plugin versions = 4.6.1 Description: The issue is related to an Unauthenticated Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts...

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/04/07 12:00 a.m.16 views

WordPress plugin Albo Pretorio On Line 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/07 12:00 a.m.11 views

MB connect line mbCONNECT24和mymbCONNECT24 安全漏洞

MB connect line mbCONNECT24 and MB connect line mymbCONNECT24 are both products of the German company MB connect line. mb connect line mbCONNECT24 is a set of remote service portals. It supports remote access, data logging and alarms. MB connect line mymbCONNECT24 is an in-house remote maintenanc...

8.8CVSS8AI score0.00794EPSS
SaveExploits0References3
OSV
OSV
added 2023/04/06 4:15 p.m.13 views

AZL-37352 CVE-2023-24537 affecting package golang for versions less than 1.21.6-1

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow...

7.5CVSS6.8AI score0.01412EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 4:15 p.m.13 views

AZL-37319 CVE-2023-24537 affecting package golang for versions less than 1.21.6-1

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow...

7.5CVSS6.8AI score0.01412EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 4:15 p.m.15 views

AZL-26026 CVE-2023-24537 affecting package golang for versions less than 1.20.7-1

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow...

7.5CVSS6.8AI score0.01412EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 4:15 p.m.11 views

AZL-26029 CVE-2023-24537 affecting package msft-golang for versions less than 1.20.11-1

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow...

7.5CVSS6.8AI score0.01412EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 4:15 p.m.10 views

AZL-79120 CVE-2023-24537 affecting package golang 1.25.7-1

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow...

7.5CVSS6.8AI score0.01412EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 4:15 p.m.8 views

DEBIAN-CVE-2023-24537

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow...

7.5CVSS6.5AI score0.01412EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/04/06 4:15 p.m.37 views

CVE-2023-24537

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow...

7.5CVSS6.9AI score0.01412EPSS
SaveExploits0References8
OSV
OSV
added 2023/04/06 4:15 p.m.10 views

UBUNTU-CVE-2023-24537

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow...

7.5CVSS6.8AI score0.01412EPSS
SaveExploits0References9
Rows per page
Query Builder