Lucene search
+L

8747 matches found

CVE
CVE
•added 2020/01/05 10:26 p.m.•100 views

CVE-2020-5305

CVE-2020-5305 affects Codoforum 4.8.3, exposing a cross‑site scripting (XSS) vulnerability in the admin dashboard via the name field when creating a new user on the Manage Users screen. Public sources consistently describe the issue as a lack of proper validation of client‑side data, enabling inj...

4.8CVSS4.8AI score0.00572EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2020/01/02 8:15 p.m.•27 views

Heap overflow

Multiple heap-based buffer overflows in the ZRLEDECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service vncviewer crash and possibly execute arbitrary code via vectors related to screen image rendering...

7.5CVSS8.3AI score0.02494EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2020/01/02 7:34 p.m.•51 views

CVE-2014-0011

Multiple heap-based buffer overflows in the ZRLEDECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service vncviewer crash and possibly execute arbitrary code via vectors related to screen image rendering...

9.8CVSS9AI score0.02494EPSS
SaveExploits1
exploitpack
exploitpack
•added 2019/12/30 12:00 a.m.•52 views

AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot

AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot Exploit: AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot Date: 2019-12-30 Author: LiquidWorm Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/12/30 12:00 a.m.•171 views

AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot

Exploit: AVE DOMINAplus 1.10.x - Unauthenticated Remote Reboot Date: 2019-12-30 Author: LiquidWorm Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Advisory ID: ZSL-2019-5548 Advisory URL:...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2019/12/27 12:00 a.m.•163 views

AVE DOMINAplus 1.10.x Cross Site Request Forgery / Cross Site Scripting

AVE DOMINAplus =1.10.x CSRF/XSS Vulnerabilities Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Touch Screen Code TS01 - 1.0.65 Touch Screen Code TS03x-V | TS04X-V - 1.10.45a Touch Screen Code TS05 - 1.10.3...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2019/12/27 12:00 a.m.•18 views

Apple iOS Lock Screen Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.Lock Screen is one of the components of the lock screen. An information disclosure vulnerability exists in the Lock Screen component of Apple iOS versions prior to 12.3. The vulnerability arises from a configuration or other...

2.4CVSS5.7AI score0.00302EPSS
SaveExploits0References1
zdt
zdt
•added 2019/12/27 12:00 a.m.•125 views

AVE DOMINAplus 1.10.x Unauthenticated Remote Reboot Vulnerability

AVE DOMINAplus =1.10.x Unauthenticated Remote Reboot Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Touch Screen Code TS01 - 1.0.65 Touch Screen Code TS03x-V | TS04X-V - 1.10.45a Touch Screen Code TS05 -...

0.4AI score
SaveExploits0
zdt
zdt
•added 2019/12/27 12:00 a.m.•219 views

AVE DOMINAplus 1.10.x Authentication Bypass Vulnerability

AVE DOMINAplus =1.10.x Authentication Bypass Exploit Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Touch Screen Code TS01 - 1.0.65 Touch Screen Code TS03x-V | TS04X-V - 1.10.45a Touch Screen Code TS05 -...

0.5AI score
SaveExploits0
zdt
zdt
•added 2019/12/27 12:00 a.m.•140 views

AVE DOMINAplus 1.10.x Credential Disclosure Exploit

!/usr/bin/env python AVE DOMINAplus =1.10.x Credentials Disclosure Exploit Vendor: AVE S.p.A. Product web page: https://www.ave.it | https://www.domoticaplus.it Affected version: Web Server Code 53AB-WBS - 1.10.62 Touch Screen Code TS01 - 1.0.65 Touch Screen Code TS03x-V | TS04X-V - 1.10.45a Touc...

7.1AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2019/12/27 12:00 a.m.•61 views

AVE DOMINAplus <=1.10.x CSRF/XSS Vulnerabilities

Summary DOMINAplus - Sistema Domotica Avanzato. Advanced Home Automation System. Designed to revolutionize your concept of living. DOMINA plus is the AVE home automation proposal that makes houses safer, more welcoming and optimized. In fact, our home automation system introduces cutting-edge...

5.3CVSS6.1AI score0.00207EPSS
SaveExploits1
CNVD
CNVD
•added 2019/12/25 12:00 a.m.•13 views

DLL Hijacking Vulnerability in Weinview EasyBuilder Pro

EasyBuilder Pro is a screen editing software from Valiant Technology. A DLL hijacking vulnerability exists in Weinview EasyBuilder Pro, which can be exploited by attackers to execute malicious code...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2019/12/20 12:00 a.m.•18 views

Unspecified Vulnerability in Apple iOS and iPadOS Screen Recording Component

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Screen Recording in Apple iOS before 13.2 and Apple iPadOS before 13.2. An...

5.5CVSS4.5AI score0.00296EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/18 6:15 p.m.•13 views

CVE-2019-8793

A consistency issue existed in deciding when to show the screen recording indicator. The issue was resolved with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2. A local user may be able to record the screen without a visible screen recording indicator...

5.5CVSS5.8AI score0.00296EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/18 6:15 p.m.•36 views

CVE-2019-8793

A consistency issue existed in deciding when to show the screen recording indicator. The issue was resolved with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2. A local user may be able to record the screen without a visible screen recording indicator...

5.5CVSS4.5AI score0.00296EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/18 6:15 p.m.•8 views

CVE-2019-8775

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

2.4CVSS5.8AI score0.00305EPSS
SaveExploits0References2
NVD
NVD
•added 2019/12/18 6:15 p.m.•37 views

CVE-2019-8775

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen...

2.4CVSS2.3AI score0.00305EPSS
SaveExploits0References2
OSV
OSV
•added 2019/12/18 6:15 p.m.•14 views

CVE-2019-8742

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen...

2.4CVSS5.8AI score0.00288EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/18 6:15 p.m.•24 views

CVE-2019-8742

The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen...

2.4CVSS2.3AI score0.00288EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/18 6:15 p.m.•18 views

CVE-2019-8682

The issue was addressed with improved UI handling. This issue is fixed in iOS 12.4, watchOS 5.3. A user may inadvertently complete an in-app purchase while on the lock screen...

2.4CVSS5.8AI score0.00289EPSS
SaveExploits0References2
Rows per page
Query Builder