Lucene search
+L

3046 matches found

ATTACKERKB
ATTACKERKB
added 2022/08/01 2:15 p.m.3 views

CVE-2022-34567

An issue in \Roaming\Mango\Plugins of University of Texas Multi-image Analysis GUI Mango 4.1 allows attackers to escalate privileges via crafted plugins...

8.8CVSS5.9AI score0.01533EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/08/01 12:00 a.m.9 views

PT-2022-22207 · University Of Texas · Mango

Name of the Vulnerable Software and Affected Versions: University of Texas Multi-image Analysis GUI Mango version 4.1 Description: An issue in the RoamingMangoPlugins directory allows attackers to escalate privileges via crafted plugins. Recommendations: For University of Texas Multi-image Analys...

8.8CVSS8.6AI score0.01533EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/07/28 12:00 a.m.22 views

Veritas NetBackup 安全漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection of environmental data such as metadata and virtual environments. A security vulnerabilit...

9.6CVSS6.7AI score0.00646EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/27 3:15 p.m.4 views

DEBIAN-CVE-2022-2549

NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV...

5.5CVSS6.5AI score0.00541EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/19 2:15 p.m.3 views

DEBIAN-CVE-2022-2454

Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV...

7.8CVSS8.2AI score0.00391EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/19 2:15 p.m.13 views

CVE-2022-2453

Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...

7.8CVSS5.9AI score0.00367EPSS
SaveExploits1References3
OSV
OSV
added 2022/07/19 2:15 p.m.6 views

UBUNTU-CVE-2022-2453

Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...

7.8CVSS7.1AI score0.00367EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/07/18 5:15 p.m.17 views

CVE-2022-22304

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests...

6.1CVSS6.4AI score0.00553EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/07/17 11:15 p.m.6 views

CVE-2022-31201

SoftGuard Web SGW before 5.1.5 allows HTML injection...

5.4CVSS6.1AI score0.00584EPSS
SaveExploits3References2
ATTACKERKB
ATTACKERKB
added 2022/07/14 10:15 p.m.3 views

CVE-2022-32417

PbootCMS v3.1.2 was discovered to contain a remote code execution RCE vulnerability via the function parserIfLabel at function.php...

9.8CVSS8AI score0.35609EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/12 10:15 a.m.6 views

CVE-2022-33736

A vulnerability has been identified in Opcenter Quality V13.1 All versions V13.1.20220624, Opcenter Quality V13.2 All versions V13.2.20220624. The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing...

7.5CVSS5.8AI score0.01285EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/11 8:15 p.m.9 views

CVE-2020-35168

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability...

9.8CVSS6.8AI score0.00492EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/11 12:00 a.m.11 views

DSAB 路径遍历漏洞

DSAB is a data streaming algorithm benchmark. A benchmark designed to test the performance of various data streaming algorithms on multiple datasets in a simple manner. A security vulnerability exists in DSAB version 2.1 and earlier versions, which stems from insecure use of Flask's sendfile...

9.3CVSS8.3AI score0.01299EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/08 5:15 p.m.8 views

CVE-2022-34167

IBM CICS TX Standard and Advanced 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS5.5AI score0.00742EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/06/30 6:15 p.m.4 views

CVE-2022-34815

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

4.3CVSS5.8AI score0.00464EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/28 1:15 p.m.9 views

UBUNTU-CVE-2021-40607

The schmboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

5.5CVSS6.8AI score0.00611EPSS
SaveExploits1References4
OSV
OSV
added 2022/06/27 9:15 a.m.8 views

CVE-2022-1960

The MyCSS WordPress plugin through 1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS5.8AI score0.00421EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/06/25 12:00 a.m.11 views

PT-2022-20528

Name of the Vulnerable Software and Affected Versions prestashop/blockwishlist versions prior to 2.1.1 Description The issue allows an authenticated customer to perform SQL injection. This can be exploited by an attacker to extract or modify sensitive data. The problem is related to the...

8.8CVSS8.8AI score0.2317EPSS
SaveExploits6References15
ATTACKERKB
ATTACKERKB
added 2022/06/20 12:00 a.m.17 views

CVE-2022-31248

A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java...

5.3CVSS6.8AI score0.00989EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/16 12:15 p.m.4 views

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

9.8CVSS7.6AI score0.01064EPSS
SaveExploits1References2
Rows per page
Query Builder