Lucene search
+L

10328 matches found

CNNVD
CNNVD
added 2024/04/09 12:00 a.m.13 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS9AI score0.02399EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/09 12:00 a.m.22 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS8.9AI score0.0233EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/09 12:00 a.m.18 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS8.9AI score0.0233EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2024/04/09 12:00 a.m.95 views

KLA65508 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft ODBC Driver for SQL Server can be exploited remotely to...

8.8CVSS8.7AI score0.02513EPSS
SaveExploits0References32
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.17 views

PT-2024-3008 · Microsoft +1 · Visual Studio +3

Name of the Vulnerable Software and Affected Versions: .NET Framework versions affected versions not specified .NET versions affected versions not specified Visual Studio versions affected versions not specified Description: The issue is related to the use of memory after it has been freed, which...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits21References183
NVD
NVD
added 2024/04/07 6:15 p.m.24 views

CVE-2024-31344

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Phpbits Creative Studio Easy Login Styler – White Label Admin Login Page for WordPress allows Stored XSS.This issue affects Easy Login Styler – White Label Admin Login Page for WordPress: from n/a...

5.9CVSS5.8AI score0.00339EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/07 5:40 p.m.59 views

CVE-2024-31344

CVE-2024-31344 affects the Easy Login Styler – White Label Admin Login Page for WordPress plugin. The vulnerability is a Stored XSS due to improper input handling, affecting version range n/a–1.0.6. Exploit details are not publicly provided in the materials. Red Hat and Wordfence entries corrobor...

5.9CVSS8.6AI score0.00339EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/07 5:40 p.m.15 views

CVE-2024-31344 WordPress Easy Login Styler plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Phpbits Creative Studio Easy Login Styler – White Label Admin Login Page for WordPress allows Stored XSS.This issue affects Easy Login Styler – White Label Admin Login Page for WordPress: from n/a...

5.9CVSS8.6AI score0.00339EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2024/04/06 11:30 a.m.49 views

ADOKit - Azure DevOps Services Attack Toolkit

Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to specify an attack module, along with specifying valid credentials API key or stolen authentication cookie for the...

7.8AI score
SaveExploits0References7
HackRead
HackRead
added 2024/04/05 8:03 p.m.21 views

Beware the Blur: Phishing Scam Drops Byakugan Malware via Fake PDF

By Deeba Ahmed New Byakugan Malware Steals Data, Grants Remote Access & Uses OBS Studio to Spy! Fortinet reveals a phishing campaign distributing Byakugan malware disguised as a PDF. Don't click! Learn how to stay safe. This is a post from HackRead.com Read the original post: Beware the Blur:...

7.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2024/04/05 2:53 p.m.6 views

rent-studio.ru Cross Site Scripting vulnerability OBB-3906112

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/04/05 9:40 a.m.34 views

From PDFs to Payload: Bogus Adobe Acrobat Reader Installers Distribute Byakugan Malware

Bogus installers for Adobe Acrobat Reader are being used to distribute a new multi-functional malware dubbed Byakugan. The starting point of the attack is a PDF file written in Portuguese that, when opened, shows a blurred image and asks the victim to click on a link to download the Reader...

6.6AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/04/02 5:31 p.m.13 views

CVE-2024-31109 WordPress Woocommerce Social Media Share Buttons plugin <= 1.3.0 - CSRF to Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Toastie Studio Woocommerce Social Media Share Buttons allows Stored XSS.This issue affects Woocommerce Social Media Share Buttons: from n/a through 1.3.0...

7.1CVSS6.8AI score0.00184EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2024/04/02 4:07 a.m.8 views

studio-kraak.nl Cross Site Scripting vulnerability OBB-3894949

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/04/02 12:00 a.m.8 views

PT-2024-3033 · Vt Studio · Vt Studio

Name of the Vulnerable Software and Affected Versions: VT STUDIO versions 8.32 and earlier Description: The issue is related to an uncontrolled element of the path search, which may lead to insecurely loading Dynamic Link Libraries. This could allow a remote attacker to execute arbitrary code wit...

10CVSS7.3AI score0.00188EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/04/02 12:00 a.m.11 views

PT-2024-23778 · Toastie Studio · Woocommerce Social Media Share Buttons

Name of the Vulnerable Software and Affected Versions: Woocommerce Social Media Share Buttons versions 1.3.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Toastie Studio Woocommerce Social Media Share Buttons. Recommendations: For...

7.1CVSS9AI score0.00184EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/04/01 5:44 a.m.13 views

KEYENCE VT STUDIO may insecurely load Dynamic Link Libraries

Overview VT STUDIO provided by KEYENCE CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427, CVE-2024-28099. KEYENCE CORPORATION reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact...

7.8CVSS6.8AI score0.00188EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/04/01 3:31 a.m.12 views

Multiple vulnerabilities in KEYENCE KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12

Overview KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12 provided by KEYENCE CORPORATION contain multiple vulnerabilities listed below. Out-of-bounds write CWE-787 - CVE-2024-29218 Out-of-bounds read CWE-125 - CVE-2024-29219 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC...

8.8CVSS7.3AI score0.00848EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/03/29 12:00 a.m.10 views

Keyence KV STUDIO和Keyence KV REPLAY VIEWER 安全漏洞

Keyence KV STUDIO and Keyence KV REPLAY VIEWER are both products of Keyence Corporation of China.Keyence KV STUDIO is a PLC programming software.Keyence KV REPLAY VIEWER is a computer program. A security vulnerability exists in Keyence KV STUDIO version 11.64 and earlier, and Keyence KV REPLAY...

8.8CVSS7.6AI score0.00848EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/29 12:00 a.m.9 views

Keyence VT STUDIO 安全漏洞

Keyence VT STUDIO is a software used by Keyence China to configure and monitor its vision inspection systems. A security vulnerability exists in Keyence VT STUDIO version 8.32 and prior versions, which stems from a DLL loading error. The vulnerability can be exploited by an attacker to execute...

7.8CVSS7.9AI score0.00188EPSS
SaveExploits0References4
Rows per page
Query Builder