Lucene search
+L

342 matches found

redhatcve
redhatcve
added 2025/05/22 5:50 a.m.10 views

CVE-2011-4705

The Ming Blacklist Free vc.software.blacklist application 1.8.1 and 1.9.2.1 for Android does not properly protect data, which allows remote attackers to read or modify blacklists and a contact list via a crafted application that launches a "data-flow attack."...

5.8CVSS7AI score0.01045EPSS
Exploits0References1
github
github
added 2023/04/04 3:30 p.m.29 views

Ming-Soft MCMS vulnerable to SQL injection

SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basictitle parameter. This issue is resolved in v5.1...

9.8CVSS9.8AI score0.01423EPSS
Exploits1References3Affected Software1
osv
osv
added 2023/04/04 3:30 p.m.40 views

GHSA-HX8P-9M48-G76R Ming-Soft MCMS vulnerable to SQL injection

SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basictitle parameter. This issue is resolved in v5.1...

9.8CVSS9.7AI score0.01423EPSS
Exploits1References3
osv
osv
added 2023/04/04 3:15 p.m.6 views

CVE-2020-20913

SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basictitle parameter...

9.8CVSS6.1AI score0.01423EPSS
Exploits1References1
nvd
nvd
added 2023/04/04 3:15 p.m.29 views

CVE-2020-20913

SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basictitle parameter...

9.8CVSS9.8AI score0.01423EPSS
Exploits1References1
prion
prion
added 2023/04/04 3:15 p.m.18 views

Sql injection

SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basictitle parameter...

7.5CVSS9.9AI score0.01423EPSS
Exploits1References1Affected Software1
vulnrichment
vulnrichment
added 2023/04/04 12:0 a.m.6 views

CVE-2020-20913

SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basictitle parameter...

9.8AI score0.01423EPSS
Exploits1References1
cvelist
cvelist
added 2023/04/04 12:0 a.m.31 views

CVE-2020-20913

SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basictitle parameter...

9.9AI score0.01423EPSS
Exploits1References1
cve
cve
added 2023/04/04 12:0 a.m.58 views

CVE-2020-20913

CVE-2020-20913 describes a SQL Injection in Ming-Soft MCMS v4.7.2 where the basic_title parameter can be manipulated to run arbitrary SQL, potentially enabling remote code execution. The underlying issue is insufficient input validation of the basic_title parameter, allowing attacker-controlled S...

9.8CVSS9.8AI score0.01423EPSS
Exploits1References1Affected Software1
openvas
openvas
added 2023/03/08 12:0 a.m.20 views

Debian: Security Advisory (DLA-799-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.2AI score0.02131EPSS
Exploits4References3
openvas
openvas
added 2023/03/08 12:0 a.m.23 views

Debian: Security Advisory (DLA-1176-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.3AI score0.02039EPSS
Exploits2References3
patchstack
patchstack
added 2022/08/29 12:0 a.m.21 views

WordPress Gettext override translations plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Su Xue Ming in WordPress Gettext override translations plugin versions = 1.0.1. Solution Update the WordPress Gettext override translations plugin to the latest available version at least 2.0.0...

4.8CVSS2.5AI score0.0056EPSS
Exploits2References1Affected Software1
redhatcve
redhatcve
added 2022/05/21 12:13 a.m.27 views

CVE-2019-9113

Ming aka libming 0.4.8 has a NULL pointer dereference in the function getString in the decompile.c file in libutil.a...

8.8CVSS2.6AI score0.01404EPSS
Exploits1References1
redhatcve
redhatcve
added 2022/05/21 12:3 a.m.26 views

CVE-2019-9114

Ming aka libming 0.4.8 has an out of bounds write vulnerability in the function strcpyext in the decompile.c file in libutil.a...

8.8CVSS2.5AI score0.01344EPSS
Exploits1References1
redhatcve
redhatcve
added 2022/05/20 11:56 p.m.54 views

CVE-2021-34340

Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCRDECR in decompiler.c file that causes a direct segmentation fault and leads to denial of service...

6.5CVSS3.6AI score0.00883EPSS
Exploits1References2
cnvd
cnvd
added 2022/03/14 12:0 a.m.24 views

Ming buffer overflow vulnerability (CNVD-2022-20529)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming that can be exploited by an attacker to cause a direct segmentation error and result in a denial of service...

6.5CVSS6.4AI score0.00942EPSS
Exploits1References1
cnvd
cnvd
added 2022/03/14 12:0 a.m.19 views

Ming Out-of-Bounds Read Vulnerability (CNVD-2022-20530)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming that can be exploited by an attacker to cause a direct segmentation error and result in a denial of service...

6.5CVSS6.4AI score0.00883EPSS
Exploits1References1
cnvd
cnvd
added 2022/03/14 12:0 a.m.24 views

Ming buffer overflow vulnerability (CNVD-2022-20528)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming 0.4.8, which can be exploited by an attacker to cause a direct segmentation error and lead to a denial of service...

6.5CVSS6.4AI score0.00942EPSS
Exploits1References1
cnvd
cnvd
added 2022/03/14 12:0 a.m.33 views

Ming Out-of-Bounds Read Vulnerability

Ming is a Flash SWF output library written in C language. Ming has a security vulnerability that can be exploited by attackers to obtain sensitive information...

6.5CVSS6.3AI score0.01132EPSS
Exploits1References1
cnvd
cnvd
added 2022/03/14 12:0 a.m.21 views

Ming buffer overflow vulnerability (CNVD-2022-20527)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in the decompiler.c file in Ming version 0.4.8, which can be exploited by attackers to cause a direct segmentation error and a denial of service...

6.5CVSS6.3AI score0.00883EPSS
Exploits1References1
Rows per page
Query Builder