Lucene search
+L

10815 matches found

Positive Technologies
Positive Technologies
•added 2024/11/09 12:00 a.m.•42 views

PT-2024-34854 · WordPress · Wp Visual Adverts

Name of the Vulnerable Software and Affected Versions: WP Visual Adverts versions through 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. Recommendations: For versions throu...

7.1CVSS6.8AI score0.0027EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
•added 2024/11/06 7:21 a.m.•18 views

Security Bulletin: IBM Maximo Application Suite - MVI Component uses jose4j-0.9.3.jar which is vulnerable to this CVE-2023-51775

Summary Security Bulletin: IBM Maximo Application Suite - MVI Component uses jose4j-0.9.3.jar which is vulnerable to this CVE-2023-51775 Vulnerability Details CVEID:CVE-2023-51775 DESCRIPTION: jose4j is vulnerable to a denial of service, caused by improper input validation. By sending a specially...

6.5CVSS6.9AI score0.00871EPSS
SaveExploits1Affected Software1
NVD
NVD
•added 2024/11/05 11:15 p.m.•27 views

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

9.8CVSS0.00769EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/05 12:00 a.m.•20 views

Lens Visual integration with Power BI 安全漏洞

Lens Visual integration with Power BI is a program from Lens Visual, Inc. Enhances Power BI dashboards with OpenAI and ChatGPT. A security vulnerability exists in Lens Visual integration with Power BI version v.4.0.0.3, which originates from a vulnerability that could allow a remote attacker to...

9.8CVSS7.7AI score0.00769EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/05 12:00 a.m.•18 views

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

7.9AI score0.00769EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/05 12:00 a.m.•39 views

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

0.00769EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/05 12:00 a.m.•7 views

CVE-2024-48746: Improper Neutralization of Special Elements used in a Command

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

9.8CVSS6.5AI score0.00769EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/05 12:00 a.m.•24 views

PT-2024-33199 · Microsoft · Power Bi

Name of the Vulnerable Software and Affected Versions: Power BI version 4.0.0.3 Description: An issue in Lens Visual integration with Power BI allows a remote attacker to execute arbitrary code via the Natural language processing component. Recommendations: For Power BI version 4.0.0.3, consider...

9.8CVSS8.1AI score0.00769EPSS
SaveExploits0References5
CVE
CVE
•added 2024/11/05 12:00 a.m.•105 views

CVE-2024-48746

A vulnerability exists in the Lens Visual integration with Power BI v.4.0.0.3 , developed by Lens Visual, Inc. This integration, which enhances dashboards with OpenAI and ChatGPT capabilities, contains a command injection flaw (CWE-77) within the Natural language processing component . A remote a...

9.8CVSS7.9AI score0.00769EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/11/05 12:00 a.m.•14 views

The vulnerability of the Collector Service in the Microsoft Visual Studio software development environment allows a hacker to induce a service failure.

The vulnerability of the Collector Service in the Microsoft Visual Studio software development environment is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.4AI score0.00767EPSS
SaveExploits0References3Affected Software3
Patchstack
Patchstack
•added 2024/11/04 9:02 a.m.•16 views

WordPress WP Visual Adverts plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin WP Visual Adverts versions = 2.3.0...

7.1CVSS6.1AI score0.0027EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/11/04 12:00 a.m.•25 views

WordPress WP Visual Adverts Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Visual Adverts Type Plugin Vulnerable versions = 2.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51707 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6941a74fa9c3 Credits João Pedro S Alcântara Kinorth...

7.1CVSS6.8AI score0.0027EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•5 views

CVE-2024-43290: Missing Authorization

Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through = 4.0.1...

5.3CVSS5.8AI score0.00381EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•7 views

CVE-2024-38771: Missing Authorization

Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through = 4.0...

6.5CVSS5.8AI score0.00437EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/11/01 12:00 a.m.•35 views

The vulnerability of the .NET software platform and Microsoft Visual Studio, a development environment for software, stems from insufficient testing of input data. This allows attackers to exploit their privileges.

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.5CVSS6.8AI score0.006EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
•added 2024/10/30 12:00 a.m.•21 views

The vulnerability of the Microsoft .NET software platform and the Visual Studio source code editor lies in the ability to exploit memory after it is released, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft .NET software platform and the Visual Studio source code editor is related to the possibility of using memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.3CVSS8.1AI score0.00999EPSS
SaveExploits0References5Affected Software5
BDU FSTEC
BDU FSTEC
•added 2024/10/30 12:00 a.m.•19 views

The vulnerability of the Microsoft .NET software platform and the Visual Studio source code editor, related to uncontrolled resource consumption, allows attackers to trigger service interruptions.

The vulnerability of the Microsoft .NET software platform and the Visual Studio source code editor is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.3AI score0.0259EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/10/29 12:00 a.m.•17 views

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools lies in their ability to exploit memory after it is released, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development environment is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.1CVSS8.3AI score0.02078EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/10/29 12:00 a.m.•14 views

The vulnerability of the Microsoft .NET software platform and the Visual Studio source code editor, related to algorithmic complexity, allows attackers to trigger service interruptions.

The vulnerability of the Microsoft .NET software platform and the Visual Studio source code editor is related to the computational complexity of the algorithms involved. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.5AI score0.03078EPSS
SaveExploits0References5Affected Software4
GithubExploit
GithubExploit
•added 2024/10/27 3:29 p.m.•407 views

Exploit for CVE-2024-52940

AnyDesk IP Leak Vulnerability CVE-2024-52940 🎤 README Tra...

7.5CVSS9AI score0.01256EPSS
SaveExploits1
Rows per page
Query Builder