Lucene search
+L

1721 matches found

Cvelist
Cvelist
added 2019/11/07 8:43 p.m.30 views

CVE-2019-18821

Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053...

5.6AI score0.00349EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/11/07 8:43 p.m.25 views

CVE-2019-18820

Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78...

5.6AI score0.00352EPSS
SaveExploits1References1
CVE
CVE
added 2019/11/07 8:43 p.m.42 views

CVE-2019-18820

EximiousSoft Logo Designer 3.82 is affected by a heap corruption vulnerability starting at ntdll!RtlpNtMakeTemporaryKey+0x1a78. Multiple sources (CNVD-2019-40494, RH/CVE-2019-18820, NVD entry CVE-2019-18820) describe this as a heap corruption issue that can lead to denial of service. The CNVD ent...

5.5CVSS5.6AI score0.00352EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2019/10/11 12:0 a.m.3 views

WordPress kiwi-logo-carousel plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers. kiwi-logo-carousel is a rotating effect plugin used in it. A cross-site request forgery vulnerability exists in WordPress kiwi-logo-carousel plugin...

6.5CVSS6.7AI score0.00867EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2019/10/07 12:0 a.m.11 views

Siemens LOGO!8 BM PLC Missing Authentication and Plaintext Storage of a Password (ICSA-19-134-04)

Binary data 720307.prm...

9.4CVSS7.3AI score0.02746EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2019/10/07 12:0 a.m.33 views

Siemens LOGO! 12/24RCE PLC Detection

Binary data 765136.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/10/07 12:0 a.m.16 views

Siemens LOGO! 24CE PLC Detection

Binary data 765135.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/10/07 12:0 a.m.19 views

Siemens LOGO! 230RCE PLC Detection

Binary data 765138.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/10/07 12:0 a.m.31 views

Siemens LOGO!8 PLC < 1.82.02 Improper Restriction within Memory Buffer or Session Fixation DoS (ICSA-19-162-03)

Binary data 720304.prm...

7.8CVSS7.3AI score0.01599EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/10/07 12:0 a.m.19 views

Siemens LOGO! 24RCE PLC Detection

Binary data 765137.prm...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2019/09/30 12:0 a.m.5 views

Unspecified Vulnerability in CloudBees Jenkins GitLab Logo Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . GitLab Logo Plugin is used in one of the...

5.5CVSS6.7AI score0.00324EPSS
SaveExploits0References1
NVD
NVD
added 2019/09/26 2:15 a.m.13 views

CVE-2015-9434

The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=kwlogos&page=kwlogossettings tab or tabflagsorder parameter...

6.5CVSS6.4AI score0.00867EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2019/09/26 1:12 a.m.19 views

CVE-2015-9434

The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=kwlogos&page=kwlogossettings tab or tabflagsorder parameter...

6.3AI score0.00867EPSS
SaveExploits1References3
CVE
CVE
added 2019/09/26 1:12 a.m.147 views

CVE-2015-9434

The CVE relates to the WordPress plugin kiwi-logo-carousel prior to version 1.7.2, where CSRF enables cross-site scripting (XSS) via the wp-admin/edit.php?post_type=kwlogos&page=kwlogos_settings tab or the tab_flags_order parameter. The underlying issue is CSRF that allows an authenticated attack...

6.5CVSS6.2AI score0.00867EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2019/09/26 12:0 a.m.32 views

Joomla! < 3.9.12 XSS Vulnerability

Joomla! is prone to a cross-site scripting vulnerability due to inadequate escaping, which makes attacks using the logo parameter of the default templates possible. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

6.1CVSS5.8AI score0.00671EPSS
SaveExploits0References1
NVD
NVD
added 2019/09/25 4:15 p.m.35 views

CVE-2019-10429

Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

5.5CVSS5.3AI score0.00324EPSS
SaveExploits0References2
CVE
CVE
added 2019/09/25 3:5 p.m.59 views

CVE-2019-10429

The CVE refers to the Jenkins GitLab Logo Plugin, where credentials are stored unencrypted in the plugin’s or Jenkins master’s global configuration file. The underlying issue is that sensitive data is kept in plaintext on the Jenkins master filesystem and could be viewed by users with access to t...

5.5CVSS5.2AI score0.00324EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2019/09/25 12:0 a.m.10 views

PT-2019-11823 · Jenkins · Jenkins Gitlab Logo Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins GitLab Logo Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file of the Jenkins master. This allows users with access to the...

5.5CVSS5AI score0.00324EPSS
SaveExploits0References6
Prion
Prion
added 2019/09/24 9:15 p.m.11 views

Cross site scripting

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

4.3CVSS5.9AI score0.00671EPSS
SaveExploits0References1Affected Software1
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2019/08/28 12:0 a.m.82 views

[20190901] - Core - XSS in logo parameter of default templates

Inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

6.1CVSS5.8AI score0.00671EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder