Lucene search
+L

7914 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.21 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.27 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.23 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.18 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.17 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.24 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.21 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.22 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.29 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
OSV
OSV
added 2020/09/01 4:10 p.m.68 views

GHSA-H2JV-5V3F-7M7J Downloads Resources over HTTP in adamvr-geoip-lite

Affected versions of adamvr-geoip-lite insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. This could impact the integrity and availability of the data being used to make geolocation decisions b...

8.1CVSS7.8AI score0.00717EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2020/09/01 4:10 p.m.43 views

Downloads Resources over HTTP in adamvr-geoip-lite

Affected versions of adamvr-geoip-lite insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. This could impact the integrity and availability of the data being used to make geolocation decisions b...

8.1CVSS4AI score0.00717EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2020/08/31 10:43 p.m.50 views

Unauthenticated Remote Command Injection in ep_imageconvert

epimageconvert is a plugin for Etherpad Lite. epimageconvert = 0.0.2 is vulnerable to remote command injection. Authentication is not required for remote exploitation. Recommendation Update to version 0.0.3 or greater...

4.3AI score0.04627EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2020/08/31 10:43 p.m.22 views

GHSA-28GR-86HG-R48W Unauthenticated Remote Command Injection in ep_imageconvert

epimageconvert is a plugin for Etherpad Lite. epimageconvert = 0.0.2 is vulnerable to remote command injection. Authentication is not required for remote exploitation. Recommendation Update to version 0.0.3 or greater...

8.2CVSS9.6AI score0.04627EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2020/08/13 12:00 a.m.21 views

WordPress Nova Lite theme <= 1.3.8 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by Talip Karabas in WordPress Nova Lite theme versions = 1.3.8. Solution Update the WordPress Nova Lite theme to the latest available version at least 1.3.9...

6.1CVSS2.1AI score0.02873EPSS
SaveExploits1References2Affected Software1
WPVulnDB
WPVulnDB
added 2020/08/13 12:00 a.m.19 views

Nova Lite < 1.3.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The theme did not properly sanitise the search query, leading to an unauthenticated reflected Cross-Site Scripting issue PoC /?s=%3Cimg%20src%20onerror=alert/XSS/%3E...

4.3CVSS1.7AI score0.02873EPSS
SaveExploits1Affected Software1
wpexploit
wpexploit
added 2020/08/13 12:00 a.m.32 views

Nova Lite < 1.3.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The theme did not properly sanitise the search query, leading to an unauthenticated reflected Cross-Site Scripting issue /?s=%3Cimg%20src%20onerror=alert/XSS/%3E...

4.3CVSS1.9AI score0.02873EPSS
SaveExploits1
OSV
OSV
added 2020/08/12 10:15 p.m.10 views

CVE-2020-17362

search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS...

6.1CVSS6.4AI score0.02873EPSS
SaveExploits1References1
NVD
NVD
added 2020/08/12 10:15 p.m.25 views

CVE-2020-17362

search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS...

6.1CVSS6.3AI score0.02873EPSS
SaveExploits1References1
Prion
Prion
added 2020/08/12 10:15 p.m.19 views

Cross site scripting

search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS...

4.3CVSS6.3AI score0.02873EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/08/12 9:16 p.m.39 views

CVE-2020-17362

search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS...

6.3AI score0.02873EPSS
SaveExploits1References1
Rows per page
Query Builder