Lucene search
K

358 matches found

CNNVD
CNNVD
added 2023/01/13 12:0 a.m.3 views

Th3-822 Rapidleech 跨站脚本漏洞

Rapidleech is a free server transfer script from the individual developer Hedel Nasser. It can be used on a variety of popular upload/download sites. Th3-822 A cross-site scripting vulnerability exists in Rapidleech. An attacker could exploit this vulnerability to perform cross-site scripting...

6.1CVSS4.8AI score0.00519EPSS
Exploits0References4
CNVD
CNVD
added 2023/01/13 12:0 a.m.25 views

Weak password vulnerability in TOTOLINK N300RH V4

The TOTOLINK N300RH V4 is a wireless router. The TOTOLINK N300RH V4 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

7AI score
Exploits0
CNNVD
CNNVD
added 2023/01/11 12:0 a.m.3 views

ACI_Escola SQL注入漏洞

ACIEscola is an application by Marina Guimarães Personal Developer. ACIEscola suffers from a SQL injection vulnerability. An attacker could exploit this vulnerability to perform a sql injection attack...

9.8CVSS6.8AI score0.00643EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/01/06 12:0 a.m.2 views

sheilazpy eShop SQL注入漏洞

sheilazpy eShop is an e-commerce store. A SQL injection vulnerability exists in sheilazpy eShop. An attacker could exploit this vulnerability to perform a sql injection attack...

9.8CVSS6.8AI score0.00643EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/01/06 12:0 a.m.2 views

school-store SQL注入漏洞

school-store is a project of Terence Bezman personal developer. It aims to produce an automated system for students working in school-stores. school-store suffers from a SQL injection vulnerability. An attacker exploits this vulnerability to perform a sql injection attack...

9.8CVSS6.8AI score0.00643EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.3 views

Indeed Engineering util 跨站脚本漏洞

util is a set of useful Java utilities open-sourced by Indeed Engineering. A cross-site scripting vulnerability exists in Indeed Engineering util versions prior to 1.0.33. Attackers use this vulnerability to execute cross-site scripting attacks...

5.4CVSS4.8AI score0.00503EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.1 views

Markdown-It 安全漏洞

Markdown-It is a Markdown parser. A security vulnerability exists in versions of Markdown-It before 2.x. An attacker exploited the vulnerability to cause an increase in the complexity of regular expressions...

7.5CVSS5.6AI score0.00946EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/12/08 12:0 a.m.3 views

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda, a Chinese company. Tenda W30E is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...

7.5CVSS7.2AI score0.00859EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/12/06 12:0 a.m.3 views

Zkteco BioTime 安全漏洞

Zkteco BioTime is a powerful web-based time and attendance management software from the Chinese company Zkteco. A security vulnerability exists in Zkteco BioTime, which can be exploited by attackers to obtain sensitive information...

7.5CVSS7.4AI score0.0053EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/11/30 12:0 a.m.3 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

4.3CVSS8.3AI score0.00549EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.2 views

The vulnerability of the server software HAProxy arises from executing a loop with an unavailable exit condition, allowing a attacker to cause a service failure.

The vulnerability of the server software HAProxy lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.8CVSS7.4AI score0.1619EPSS
Exploits0References10Affected Software3
CNNVD
CNNVD
added 2022/11/08 12:0 a.m.0 views

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...

8CVSS6.6AI score0.00776EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/10/24 12:0 a.m.2 views

Apple macOS Big Sur和macOS Monterey 安全漏洞

Apple macOS Big Sur and Apple macOS Monterey are products of Apple Inc. Apple macOS Big Sur is the 17th major release of Apple's macOS operating system for the MAC. apple macOS Monterey is the 18th major release of Apple's macOS desktop operating system for the MAC. Apple macOS Big Sur is Apple's...

6.1CVSS7.1AI score0.01192EPSS
Exploits0References24
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.2 views

WordPress plugin FontMeister 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS6AI score0.0041EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.3 views

Microsoft Hyper-V 安全漏洞

Microsoft Windows Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization, Microsoft Windows Hyper-V has an elevation of privilege vulnerability that stems from improper privilege assignment in the application and...

7.8CVSS8.8AI score0.00564EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/09/19 12:0 a.m.4 views

Adobe Bridge 资源管理错误漏洞

Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a resource management error, which stems from the impact of post-release reuse and can be exploited by attackers to cause a memory leak...

5.5CVSS6.8AI score0.00379EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/09/05 12:0 a.m.2 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. Huawei HarmonyOS is vulnerable to an information disclosure vulnerability that could be exploited by attackers to compromise confidentiality...

7.5CVSS6.1AI score0.0043EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.2 views

The vulnerability of Microsoft Windows Defender operating systems, which allows a hacker to bypass security restrictions

The vulnerability of Microsoft Windows Defender operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

7.1CVSS7AI score0.00822EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/08/09 12:23 p.m.5 views

mariadb: server crash at Field::set_default via specially crafted SQL statements

A flaw was found in MariaDB. The component, Field::setdefault, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

7.5CVSS7.3AI score0.02057EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/08/09 12:0 a.m.2 views

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel, which can be exploited by attackers to perform certain illegal operations...

7.3CVSS5.6AI score0.00767EPSS
Exploits0References5
Rows per page
Query Builder