Lucene search
+L

171 matches found

ATTACKERKB
ATTACKERKB
added 2021/07/07 11:33 a.m.5 views

CVE-2021-32517

Improper access control vulnerability in sharelink in QSAN Storage Manager allows remote attackers to download arbitrary files using particular parameter in download function. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

7.5CVSS7AI score0.01262EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/06/23 12:00 a.m.13 views

getsimplecms 跨站脚本漏洞

GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/changedata.php in GetSimple CMS 3.3.15 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the...

6.1CVSS5.2AI score0.01371EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/06/09 12:00 a.m.11 views

Intel Security Library 安全特征问题漏洞

Intel Security Library is the Intel Security Library for data center applications from Intel Corporation. A security signature issue vulnerability exists in Intel Security Library versions prior to 3.3, which stems from the use of a cryptographically weak pseudo-random number generator PRNG in th...

6.5CVSS6.5AI score0.0081EPSS
SaveExploits0References3
OSV
OSV
added 2021/05/26 12:15 p.m.9 views

CVE-2020-26677

Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API...

8.8CVSS7.3AI score0.00874EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/04/01 2:15 p.m.10 views

CVE-2021-20235

There's a flaw in the zeromq server in versions before 4.3.3 in src/decoderallocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server...

8.1CVSS8AI score0.43862EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/04/16 12:00 a.m.9 views

Intel Data Migration Software Elevation of Privilege Vulnerability

Intel Data Migration Software is a set of data migration software from Intel USA. The software supports data migration between two storage drives. A security vulnerability exists in the installer of Intel Data Migration Software 3.3 and earlier versions, which stems from incorrect default...

7.8CVSS6.8AI score0.00294EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/09/28 12:00 a.m.4 views

YCCMS v3.3 Arbitrary File Deletion Vulnerability

YCCMS is a PHP version of a lightweight CMS builder. YCCMS v3.3 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2019/05/16 12:00 a.m.12 views

GetSimple CMS Remote Code Execution Vulnerability

GetSimple CMS is a content management system CMS written in PHP. A remote code execution vulnerability exists in GetSimple CMS version 3.3.15 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary PHP code on an affected system...

9.8CVSS8.5AI score0.71598EPSS
SaveExploits5References1
OSV
OSV
added 2019/02/08 5:29 p.m.8 views

CVE-2018-18364

Symantec Ghost Solution Suite GSS versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file DLL that the attacker...

7.3CVSS5.9AI score0.00871EPSS
SaveExploits0References2
CNVD
CNVD
added 2017/11/21 12:00 a.m.24 views

Open Ticket Request System Agent Frontend Information Disclosure Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and service personn...

8.8CVSS6.3AI score0.01771EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/23 2:29 p.m.8 views

UBUNTU-CVE-2017-11610

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups...

8.8CVSS7.6AI score0.87378EPSS
SaveExploits10References3
CNVD
CNVD
added 2017/08/16 12:00 a.m.8 views

Opencv Remote Code Execution Vulnerability

OpenCV is an open source, cross-platform, lightweight computer vision library. A remote code execution vulnerability exists in the modules/imgcodecs/src/grfmtpxm.cpp file in OpenCV 3.3 and earlier versions. A remote attacker could exploit this vulnerability to execute code or cause a denial of...

8.8CVSS6.7AI score0.03066EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/07 1:29 a.m.9 views

DEBIAN-CVE-2017-12601

OpenCV Open Source Computer Vision Library through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmtbmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case...

8.8CVSS7.5AI score0.02071EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/08/07 12:00 a.m.33 views

OpenCV Denial of Service Vulnerability (CNVD-2017-24179)

OpenCV is an open source, cross-platform, lightweight computer vision library. A denial of service vulnerability exists in the 'icvCvtBGRA2BGR8uC4C3R' function in OpenCV 3.3 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service read across boundaries...

8.8CVSS5.8AI score0.0197EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/27 12:00 a.m.7 views

Kopano WebApp Cross-Site Scripting Vulnerability

Kopano WebApp is a Web-based e-mail management program from the German Kopano team. file previewer plugin is one of the document previewer plugin. A cross-site scripting vulnerability exists in the js/ViewerPanel.js file of the file previewer plugin in Kopano WebApp 3.3.0 and earlier versions. A...

6.1CVSS5.8AI score0.00754EPSS
SaveExploits0References1
OSV
OSV
added 2017/07/21 8:29 p.m.11 views

CVE-2017-1373

Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...

8.8CVSS5.9AI score0.01972EPSS
SaveExploits0References3
OSV
OSV
added 2017/06/12 6:29 a.m.4 views

DEBIAN-CVE-2017-9324

In Open Ticket Request System OTRS 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URL...

8.8CVSS8.6AI score0.02351EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2017/04/12 12:00 a.m.13 views

PT-2017-2348 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.3 Description: The issue is related to the mm subsystem in the Linux kernel, which does not properly enforce the CONFIG STRICT DEVMEM protection mechanism. This allows local users to read or write to kernel...

10CVSS7AI score0.84172EPSS
SaveExploits81References503
OSV
OSV
added 2017/03/27 10:59 p.m.7 views

CVE-2016-9737

IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1996200...

5.4CVSS5.4AI score0.00538EPSS
SaveExploits0References2
CNVD
CNVD
added 2017/03/21 12:00 a.m.9 views

Cagintranet Networks GetSimple CMS Information Disclosure Vulnerability

Cagintranet Networks GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A security vulnerability exists in Cagintranet Networks GetSimple CMS version 3.3....

5.3CVSS6.8AI score0.01178EPSS
SaveExploits1References1
Rows per page
Query Builder