Lucene search
+L

3700 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2016-8576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xhciringfetch function in hw/usb/hcd-xhci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and...

6CVSS6.8AI score0.00402EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2016-9911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quick Emulator Qemu built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in...

6.5CVSS6.8AI score0.00382EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2015-8818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cpuphysicalmemorywriterominternal function in exec.c in QEMU aka Quick Emulator does not properly skip MMIO regions, which allows local privileged guest use...

5.5CVSS6.8AI score0.00407EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2016-9907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector i...

6.5CVSS6.8AI score0.0043EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/27 12:00 a.m.•21 views

PT-2025-8988

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description General information about the issue is not explicitly mentioned, but it is related to a security advisory from Lenovo. The estimated number of potentially affected devices worldwide is not...

6.7CVSS6.7AI score0.0015EPSS
SaveExploits0References17
Mend
Mend
•added 2025/02/25 8:03 p.m.•4 views

CVE-2025-27142

LocalSend is a free, open-source app that allows users to securely share files and messages with nearby devices over their local network without needing an internet connection. Prior to version 1.17.0, due to the missing sanitization of the path in the "POST /api/localsend/v2/prepare-upload" and...

8.8CVSS0.00544EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/02/25 8:03 p.m.•7 views

CVE-2025-27142 LocalSend path traversal vulnerability in the file upload endpoint allows nearby devices to execute arbitrary commands

LocalSend is a free, open-source app that allows users to securely share files and messages with nearby devices over their local network without needing an internet connection. Prior to version 1.17.0, due to the missing sanitization of the path in the POST /api/localsend/v2/prepare-upload and th...

8.7CVSS8.8AI score0.00544EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/25 12:00 a.m.•24 views

PT-2025-7912 · Localsend · Localsend

Name of the Vulnerable Software and Affected Versions: LocalSend versions prior to 1.17.0 Description: The issue arises from the missing sanitization of the path in the "POST /api/localsend/v2/prepare-upload" and "POST /api/localsend/v2/upload" endpoints, allowing a malicious file transfer reques...

8.8CVSS7.2AI score0.00544EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/25 12:00 a.m.•9 views

CVE-2025-27142: Improper Limitation of a Pathname to a Restricted Directory

LocalSend is a free, open-source app that allows users to securely share files and messages with nearby devices over their local network without needing an internet connection. Prior to version 1.17.0, due to the missing sanitization of the path in the POST /api/localsend/v2/prepare-upload and th...

8.8CVSS6.1AI score0.00544EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/02/19 12:00 a.m.•22 views

D-Link DIR-853 Password Parameter Buffer Overflow Vulnerability

The D-Link DIR-853 is a dual-band wireless router that supports the 802.11ac protocol and provides dual-band 2.4GHz up to 400Mbps and 5GHz up to 867Mbps network connectivity for HD video streaming and online gaming. The D-Link DIR-853 suffers from a buffer overflow vulnerability that originates...

8.8CVSS8.2AI score0.00754EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/02/18 12:00 a.m.•33 views

The vulnerability in the `prog.cgi` script of the SetQuickVPNSettings module of the D-Link DIR-853 A1 router’s software allows a hacker to cause a service failure.

The vulnerability in the prog.cgi script of the SetQuickVPNSettings module of the D-Link DIR-853 A1 router operating system is related to buffer overflow during the processing of the Password parameter. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

10CVSS6.9AI score0.00754EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2025/02/14 4:15 p.m.•19 views

CVE-2025-25745

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module...

8.8CVSS6.1AI score0.00754EPSS
SaveExploits1References1
OSV
OSV
•added 2025/02/14 3:15 p.m.•19 views

CVE-2025-25740

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the PSK parameter in the SetQuickVPNSettings module...

5.5CVSS6.2AI score0.00331EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/06 4:25 a.m.•16 views

CVE-2021-4383

The WP Quick FrontEnd Editor plugin for WordPress is vulnerable to page content injection in versions up to, and including, 5.5. This is due to missing capability checks in the plugin's page-editing functionality. This makes it possible for low-authenticated attackers, such as subscribers, to...

8.1CVSS6.9AI score0.00791EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:14 p.m.•19 views

CVE-2024-52429

Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through = 2.0...

9.9CVSS7.2AI score0.00919EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:06 p.m.•15 views

CVE-2024-52441

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Rajesh Thanoch Quick Learn quick-learn allows Object Injection.This issue affects Quick Learn: from n/a through = 1.0.1...

9.8CVSS7.2AI score0.00556EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 4:01 a.m.•11 views

CVE-2024-54344

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Quick Shop wp-quick-shop allows Reflected XSS.This issue affects WP Quick Shop: from n/a through = 1.3.1...

7.1CVSS7.2AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/24 6:15 p.m.•26 views

CVE-2025-24705

Missing Authorization vulnerability in Arshid WooCommerce Quick View woo-quick-view allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Quick View: from n/a through = 1.1.1...

5.3CVSS0.00484EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/24 5:24 p.m.•65 views

CVE-2025-24705

CVE-2025-24705 concerns the WordPress plugin WooCommerce Quick View (versions

5.3CVSS7.2AI score0.00484EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/24 5:24 p.m.•43 views

CVE-2025-24705 WordPress WooCommerce Quick View plugin <= 1.1.1 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Arshid WooCommerce Quick View woo-quick-view allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Quick View: from n/a through = 1.1.1...

5.3CVSS0.00484EPSS
SaveExploits0References1
Rows per page
Query Builder