Lucene search
+L

12457 matches found

OSV
OSV
•added 2021/07/23 2:15 p.m.•14 views

CVE-2021-25203

Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload to \CMSsite-master\admin\includes\adminaddpost.php...

9.8CVSS6AI score0.01874EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2021/07/21 12:00 a.m.•355 views

Vehicle Parking Management System 1.0 Cross Site Scripting

Exploit Title: Vehicle Parking Management System - Stored Cross-Site-Scripting XSS Date: 2021-07-09 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/vehicle-parking-management-system-using-php-and-mysql/...

7.4AI score
SaveExploits0
Citrix
Citrix
•added 2021/07/21 12:00 a.m.•13 views

StoreFront 1912 LTSR - Unable to add favorites

Cannot add app. Getting error when adding the apps/desktop to favorites...

7.1AI score
SaveExploits0
OSV
OSV
•added 2021/07/20 7:15 a.m.•8 views

ALPINE-CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.5AI score0.00549EPSS
SaveExploits0References1
OSV
OSV
•added 2021/07/20 7:15 a.m.•8 views

UBUNTU-CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

7.8CVSS7.4AI score0.00549EPSS
SaveExploits0References6
NVD
NVD
•added 2021/07/19 3:15 p.m.•40 views

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

7.8CVSS0.01357EPSS
SaveExploits3References3
OSV
OSV
•added 2021/07/19 3:15 p.m.•13 views

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

7.8CVSS7.4AI score0.01357EPSS
SaveExploits3References3
Cvelist
Cvelist
•added 2021/07/19 2:16 p.m.•51 views

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

8.7AI score0.01357EPSS
SaveExploits3References3
CVE
CVE
•added 2021/07/19 2:16 p.m.•316 views

CVE-2021-35449

CVE-2021-35449 affects Lexmark Universal Print Driver (versions 2.15.1.0 and earlier) and associated G2/G3/G4 drivers. The vulnerability enables local privilege escalation: a low-privilege user can cause the driver to load a DLL of their choosing during the add printer process, escalating to SYST...

7.8CVSS8.4AI score0.01357EPSS
SaveExploits3References3Affected Software4
CNNVD
CNNVD
•added 2021/07/19 12:00 a.m.•9 views

Lexmark Universal Print Driver 安全漏洞

Lexmark Universal Print Driver is a printer driver from Lexmark USA. A security vulnerability exists in Lexmark Universal Print Driver that originates from a standard low-privilege user being able to use the driver to execute a DLL of their choice during the add printer process, resulting in...

7.8CVSS8.2AI score0.01357EPSS
SaveExploits3References3
NVD
NVD
•added 2021/07/15 8:15 p.m.•23 views

CVE-2021-0282

On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this UPDATE message will create a sustained Denial of...

7.5CVSS0.0095EPSS
SaveExploits0References1
Prion
Prion
•added 2021/07/15 8:15 p.m.•26 views

Path traversal

On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this UPDATE message will create a sustained Denial of...

7.1CVSS7.5AI score0.0095EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/07/15 8:00 p.m.•33 views

CVE-2021-0282 Junos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled

On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this UPDATE message will create a sustained Denial of...

7.5CVSS7.7AI score0.0095EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/15 8:00 p.m.•84 views

CVE-2021-0282

CVE-2021-0282 – Junos OS DoS via BGP UPDATE with Multipath/add-path enabled . Affects Juniper’s Junos OS where Multipath/add-path is enabled; processing a specific BGP UPDATE can crash and restart the routing process daemon (RPD), causing a DoS. Sustained receipt of the UPDATE can propagate the D...

7.5CVSS7.5AI score0.0095EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/07/14 4:00 p.m.•7 views

CVE-2021-0282

On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this UPDATE message will create a sustained Denial of...

7.5CVSS7.2AI score0.0095EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/07/14 12:00 a.m.•16 views

Juniper Networks Junos OS 代码问题漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Junos OS that stems from the fact that on devices with multipathing or add-a-path...

7.5CVSS5.7AI score0.0095EPSS
SaveExploits0References5
OSV
OSV
•added 2021/07/12 1:15 p.m.•13 views

CVE-2020-21131

SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=languageweb&a=doAddLanguage...

7.2CVSS5.8AI score0.01188EPSS
SaveExploits1References2
NVD
NVD
•added 2021/07/09 10:15 p.m.•25 views

CVE-2020-25877

A stored cross site scripting XSS vulnerability in the 'Add Page' feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' parameter...

5.4CVSS0.00507EPSS
SaveExploits1References2
OSV
OSV
•added 2021/07/09 10:15 p.m.•15 views

CVE-2020-25877

A stored cross site scripting XSS vulnerability in the 'Add Page' feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' parameter...

5.4CVSS5.4AI score
SaveExploits0References2
Prion
Prion
•added 2021/07/09 10:15 p.m.•22 views

Cross site scripting

A stored cross site scripting XSS vulnerability in the 'Add Page' feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' parameter...

3.5CVSS5.2AI score0.00507EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder