Lucene search
+L

81 matches found

OSV
OSV
added 2024/06/09 7:15 p.m.7 views

CVE-2024-32081

Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through 1.05...

8.8CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/04/11 9:09 a.m.6 views

WordPress Filter Custom Fields & Taxonomies Light plugin <= 1.05 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Filter Custom Fields & Taxonomies Light versions = 1.05...

8.8CVSS7AI score0.00351EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/01/24 6:15 p.m.3 views

DEBIAN-CVE-2023-51889

Stack Overflow vulnerability in the validate function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL...

9.8CVSS9.2AI score0.01277EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/24 6:15 p.m.12 views

UBUNTU-CVE-2023-51889

Stack Overflow vulnerability in the validate function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL...

9.8CVSS7.7AI score0.01277EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/24 5:15 p.m.8 views

DEBIAN-CVE-2023-51885

Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...

9.8CVSS9.2AI score0.01277EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/24 5:15 p.m.10 views

UBUNTU-CVE-2023-51885

Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...

9.8CVSS6.2AI score0.01277EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/24 5:15 p.m.7 views

UBUNTU-CVE-2023-51887

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...

9.8CVSS6.2AI score0.02472EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/01/24 12:00 a.m.12 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and earlier versions, which stems from the presence of a discovery infinite loop problem. A remote attacker can exploit this vulnerability to consume CPU resources via a crafted...

7.5CVSS6.7AI score0.00856EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.14 views

PT-2024-14317 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to cause a denial of service when using convertpath. It is related to a Buffer Overflow vulnerability in the main function. Recommendations: For Mathtex version...

7.5CVSS7.5AI score0.00826EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.10 views

PT-2024-14321 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: An infinite loop issue in the software allows remote attackers to consume CPU resources via a crafted string in the application URL. This can lead to potential denial-of-service conditions...

7.5CVSS7.2AI score0.00856EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2024/01/24 12:00 a.m.10 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and earlier, which stems from a stack overflow vulnerability in the validate method. A remote attacker can exploit this vulnerability to execute arbitrary code via a crafted stri...

9.8CVSS7.9AI score0.01277EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.12 views

PT-2024-14320 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted string in the application URL. This is due to a Stack Overflow vulnerability in the validate function. Recommendations:...

9.8CVSS9.4AI score0.01277EPSS
SaveExploits1References13
OSV
OSV
added 2023/11/16 7:15 a.m.8 views

CVE-2023-43752

OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute an arbitrary OS command by sending a specially crafted request...

8CVSS6AI score0.00999EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/09/14 12:00 a.m.12 views

D-Link DIR-859 Command Injection Vulnerability

The D-Link DIR-859 is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 versions, which originates from the lxmldbcsystem function in /htdocs/cgibin that contains a command injection vulnerability...

9.8CVSS7.6AI score0.0302EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/05/23 12:00 a.m.6 views

PT-2023-21690 · Unknown · Ac-Wapu-300-P +2

Name of the Vulnerable Software and Affected Versions: Wi-Fi AP UNIT AC-PD-WAPU versions 1.05 B04 and earlier Wi-Fi AP UNIT AC-PD-WAPUM versions 1.05 B04 and earlier Wi-Fi AP UNIT AC-PD-WAPU-P versions 1.05 B04P and earlier Wi-Fi AP UNIT AC-PD-WAPUM-P versions 1.05 B04P and earlier AC-WAPU-300...

7.2CVSS7.5AI score0.00887EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/02/06 12:00 a.m.12 views

WordPress plugin WP-ShowHide 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS5.4AI score0.00573EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/01/31 12:00 a.m.8 views

portfolioCMS 授权问题漏洞

portfolioCMS is Bootstrap portfolio website with admin panel. A security vulnerability exists in Westbrookadmin portfolioCMS v1.05. An attacker could exploit the vulnerability to bypass password authentication and gain access to sensitive information via session fixation...

7.5CVSS7.4AI score0.00749EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/01/19 12:00 a.m.9 views

D-Link DIR-859 操作系统命令注入漏洞

D-Link DIR-859 is a wireless router from D-Link China.A security vulnerability exists in the D-Link DIR-859A1 1.05, which was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function. No detailed vulnerability details are currently available...

9.8CVSS8AI score0.41055EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/10/19 12:00 a.m.10 views

D-Link DSL-2750B 命令注入漏洞

The D-Link DSL-2750B is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL-2750B prior to version 1.05. An attacker can exploit this vulnerability to perform remote unauthenticated command injection via the login.cgi-cli parameter...

9.8CVSS8.7AI score0.65234EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2022/08/29 12:00 a.m.7 views

Hytec Inter HWL-2511-SS 命令注入漏洞

The Hytec Inter HWL-2511-SS is an industrial LTE router and Wi-Fi access point from Hytec Inter, Japan. A security vulnerability exists in Hytec Inter HWL-2511-SS v1.05 and earlier, which stems from a CLI that allows attackers to execute arbitrary commands with root privileges...

9.8CVSS7.5AI score0.02374EPSS
SaveExploits0References4
Rows per page
Query Builder