Lucene search
K

195 matches found

Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.3 views

PT-2025-54266

Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description On Windows operating systems, a buffer overflow can occur when libpcap converts a Windows error message to UTF-8 if the message contains characters requiring 4 bytes in UTF-8 representation...

1.9CVSS6.8AI score0.00102EPSS
Exploits0References5
OSV
OSV
added 2025/12/30 1:49 a.m.4 views

GO-2025-4255 Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls

Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls...

6.5CVSS6.5AI score0.0024EPSS
Exploits0References4
OSV
OSV
added 2025/12/23 8:15 p.m.3 views

CVE-2021-47733

CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like '-alert1// and execute arbitrary JavaScript when victims interact with delete buttons...

5.1CVSS5.9AI score0.00216EPSS
Exploits1References3
NVD
NVD
added 2025/12/23 8:15 p.m.3 views

CVE-2021-47733

CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like '-alert1// and execute arbitrary JavaScript when victims interact with delete buttons...

6.1CVSS0.00216EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/12/23 7:35 p.m.22 views

CVE-2021-47733 CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding

CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like '-alert1// and execute arbitrary JavaScript when victims interact with delete buttons...

6.1CVSS0.00216EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/12/23 7:35 p.m.3 views

CVE-2021-47733 CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding

CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like '-alert1// and execute arbitrary JavaScript when victims interact with delete buttons...

6.1CVSS6AI score0.00216EPSS
Exploits1References3
CVE
CVE
added 2025/12/23 7:35 p.m.10 views

CVE-2021-47733

CMSimple 5.4 is affected by a cross-site scripting vulnerability that bypasses input filtering by HTML Unicode encoding. The vulnerability arises because the application does not effectively neutralize HTML Unicode encoding when processing user input, enabling an attacker to inject arbitrary Java...

6.1CVSS6AI score0.00216EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/23 12:0 a.m.4 views

PT-2025-52833

Name of the Vulnerable Software and Affected Versions CMSimple version 5.4 Description The software contains a cross-site scripting issue that allows attackers to bypass input filtering. This is achieved by using HTML to Unicode encoding, enabling the injection of malicious scripts. Attackers can...

6.1CVSS6.4AI score0.00216EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.5 views

CMSimple 跨站脚本漏洞

CMSimple is a free content management system. CMSimple suffers from a cross-site scripting vulnerability that stems from the application not effectively filtering or neutralizing HTML Unicode encoding when processing user input. An attacker could use this vulnerability to execute arbitrary...

6.1CVSS6.2AI score0.00216EPSS
Exploits1References4
GithubExploit
GithubExploit
added 2025/12/05 5:9 a.m.150 views

Exploit for CVE-2025-55182

Verification shell nuclei -l urls...

10CVSS7.1AI score0.99562EPSS
Exploits381
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.9 views

Siemens SIMATIC S7-1500 Improper Encoding or Escaping of Output (CVE-2022-25235)

xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

9.8CVSS6.8AI score0.04915EPSS
Exploits0References5
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.3 views

Astra Linux – Vulnerability in Python 3.11

When an address list is folded, and the separating comma ends up on a folded line that needs to be encoded using Unicode, then the separator itself must also be encoded using Unicode. The expected behavior is that the separating comma remains a plain comma. However, this can lead to the address...

2.3CVSS6.4AI score0.00566EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/27 6:24 p.m.6 views

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities in Python.

Summary IBM Virtualization Engine TS7700 is susceptible to two Tampering conditions and one potential Elevation of Privilege issue due to the use of Python CVE-2025-0938, CVE-2025-47273, CVE-2025-1795. TS7700 uses Python to perform operations with the Cloud and internal system configuration tasks...

8.8CVSS8.1AI score0.01437EPSS
Exploits4Affected Software3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2002-2165

Malware in sbrugna...

5CVSS6.4AI score0.01373EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-1424

Malware in sbrugna...

5CVSS9.2AI score0.01881EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-2726

Malware in sbrugna...

7.5CVSS6.4AI score0.02119EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2001-0514

Malware in sbrugna...

7.5CVSS6.4AI score0.02381EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-5763

Malware in sbrugna...

7.1CVSS6.4AI score0.01599EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2007-0189

Malware in sbrugna...

7.5CVSS6.4AI score0.03618EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-19005

Malware in sbrugna...

9.8CVSS7.5AI score0.08811EPSS
Exploits0References59
Rows per page
Query Builder