Lucene search
+L

3438 matches found

vulnersOsv
vulnersOsv
•added 2024/04/05 3:06 p.m.•29 views

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +683 more potentially affected by unknown CVE via hpack (0.2.0)

hpack CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on hpack and may be impacted: - acme-client =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.5.0, =0.1.3, =0.1.13 and more Source cves: unknown CVE Source advisory...

5.4AI score
SaveExploits0
OSV
OSV
•added 2024/04/02 7:15 a.m.•16 views

CVE-2024-28226

in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input...

7.5CVSS5.8AI score0.0061EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/02 7:15 a.m.•19 views

CVE-2024-24581

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution through out-of-bounds write...

7.8CVSS6.2AI score0.00182EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/01 4:15 p.m.•14 views

CVE-2024-25574

SQL injection vulnerability exists in GetDIAEusListParameters...

9.8CVSS5.8AI score0.0879EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/03/30 8:05 p.m.•277 views

Exploit for Embedded Malicious Code in Tukaani Xz

Good evening, I would like to inform you about a critical secur...

10CVSS7.7AI score0.85974EPSS
SaveExploits42
OSV
OSV
•added 2024/03/29 2:15 p.m.•15 views

CVE-2024-30488

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Katie Seaborn Zotpress.This issue affects Zotpress: from n/a through 7.3.7...

8.8CVSS5.8AI score0.00594EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/27 8:38 p.m.•16 views

USN-6715-1 unixodbc vulnerability

It was discovered that unixODBC incorrectly handled certain bytes. An attacker could use this issue to execute arbitrary code or cause a crash...

7.8CVSS7.4AI score0.00284EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/25 3:15 p.m.•20 views

CVE-2024-25175

An issue in Kickdler before v1.107.0 allows attackers to provide an XSS payload via a HTTP response splitting attack...

6.1CVSS5.8AI score0.0045EPSS
SaveExploits2References2
OSV
OSV
•added 2024/03/23 12:15 a.m.•12 views

CVE-2024-29059

.NET Framework Information Disclosure Vulnerability...

7.5CVSS5.8AI score0.98624EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/21 11:15 p.m.•13 views

CVE-2024-28040

SQL injection vulnerability exists in GetDIAEastListParameters...

8.8CVSS5.8AI score0.08484EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/21 11:15 p.m.•16 views

CVE-2024-23975

SQL injection vulnerability exists in GetDIAEslogListParameters...

8.8CVSS5.8AI score0.08484EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/18 2:15 p.m.•16 views

CVE-2024-27767

CWE-287: Improper Authentication may allow Authentication Bypass...

9.8CVSS5.8AI score0.0069EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/03/18 12:00 a.m.•12 views

The vulnerability of the gguf_fread_str function in the GGUF library, which allows a hacker to execute arbitrary code.

The vulnerability of the gguffreadstr function in the GGUF library is related to integer overflow. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

10CVSS8.2AI score0.01338EPSS
SaveExploits1References5
RubySec
RubySec
•added 2024/03/15 12:00 a.m.•26 views

TurboBoost Commands vulnerable to arbitrary method invocation

Impact TurboBoost Commands has existing protections in place to guarantee that only public methods on Command classes can be invoked; however, the existing checks aren't as robust as they should be. It's possible for a sophisticated attacker to invoke more methods than should be permitted dependi...

8.1CVSS7.5AI score0.00796EPSS
SaveExploits0References1Affected Software1
Redos
Redos
•added 2024/03/13 12:00 a.m.•31 views

ROS-2-1278

2.1278 Nettle library vulnerabilityCVE-2021-20305 1. Vulnerability Description: A Nettle library vulnerability involving the use of a failed cryptographic algorithm and allowing an unauthenticated remote attacker to execute arbitrary code.FSTEC Russia Information Security Threats Data Bank...

8.1CVSS6.9AI score0.01687EPSS
SaveExploits0
Redos
Redos
•added 2024/03/13 12:00 a.m.•19 views

ROS-2-1694

2.1694 Nettle library vulnerabilityCVE-2021-20305 1. Vulnerability Description: A vulnerability in the Nettle library that involves the use of a failed cryptographic algorithm and allows a remote unauthenticated attacker to execute arbitrary code.Identifier of the Information Security Threats Dat...

8.1CVSS7AI score0.01687EPSS
SaveExploits0
Redos
Redos
•added 2024/03/13 12:00 a.m.•25 views

ROS-2-1440

2.1440 Nettle library vulnerabilityCVE-2021-20305 1. Vulnerability Description: A vulnerability in the Nettle library that involves the use of a failed cryptographic algorithm and allows a remote unauthenticated attacker to execute arbitrary code.Identifier of the Information Security Threats Dat...

8.1CVSS7AI score0.01687EPSS
SaveExploits0
OSV
OSV
•added 2024/03/12 5:15 p.m.•3 views

CVE-2024-26173

Windows Kernel Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00894EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/12 5:15 p.m.•8 views

CVE-2024-21443

Windows Kernel Elevation of Privilege Vulnerability...

7.3CVSS7.3AI score0.01286EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/12 5:15 p.m.•4 views

CVE-2024-21436

Windows Installer Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.00721EPSS
SaveExploits0References1
Rows per page
Query Builder