Lucene search
K

353 matches found

CNNVD
CNNVD
added 2022/12/27 12:0 a.m.1 views

Markdown-It 安全漏洞

Markdown-It is a Markdown parser. A security vulnerability exists in versions of Markdown-It before 2.x. An attacker exploited the vulnerability to cause an increase in the complexity of regular expressions...

7.5CVSS5.6AI score0.00561EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.3 views

Indeed Engineering util 跨站脚本漏洞

util is a set of useful Java utilities open-sourced by Indeed Engineering. A cross-site scripting vulnerability exists in Indeed Engineering util versions prior to 1.0.33. Attackers use this vulnerability to execute cross-site scripting attacks...

5.4CVSS4.8AI score0.00299EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/12/08 12:0 a.m.3 views

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda, a Chinese company. Tenda W30E is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...

7.5CVSS7.2AI score0.00354EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/12/06 12:0 a.m.2 views

Zkteco BioTime 安全漏洞

Zkteco BioTime is a powerful web-based time and attendance management software from the Chinese company Zkteco. A security vulnerability exists in Zkteco BioTime, which can be exploited by attackers to obtain sensitive information...

7.5CVSS7.4AI score0.0028EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/11/30 12:0 a.m.2 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

4.3CVSS8.3AI score0.00071EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.1 views

The vulnerability of the server software HAProxy arises from executing a loop with an unavailable exit condition, allowing a attacker to cause a service failure.

The vulnerability of the server software HAProxy lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.8CVSS7.4AI score0.66484EPSS
Exploits0References10Affected Software3
CNNVD
CNNVD
added 2022/11/08 12:0 a.m.0 views

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...

8CVSS6.6AI score0.00972EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/10/24 12:0 a.m.1 views

Apple macOS Big Sur和macOS Monterey 安全漏洞

Apple macOS Big Sur and Apple macOS Monterey are products of Apple Inc. Apple macOS Big Sur is the 17th major release of Apple's macOS operating system for the MAC. apple macOS Monterey is the 18th major release of Apple's macOS desktop operating system for the MAC. Apple macOS Big Sur is Apple's...

6.1CVSS7.1AI score0.00511EPSS
Exploits0References24
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.1 views

Microsoft Hyper-V 安全漏洞

Microsoft Windows Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization, Microsoft Windows Hyper-V has an elevation of privilege vulnerability that stems from improper privilege assignment in the application and...

7.8CVSS8.8AI score0.00552EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.2 views

WordPress plugin FontMeister 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS6AI score0.0021EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/09/19 12:0 a.m.2 views

Adobe Bridge 资源管理错误漏洞

Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a resource management error, which stems from the impact of post-release reuse and can be exploited by attackers to cause a memory leak...

5.5CVSS6.8AI score0.00301EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/09/05 12:0 a.m.2 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. Huawei HarmonyOS is vulnerable to an information disclosure vulnerability that could be exploited by attackers to compromise confidentiality...

7.5CVSS6.1AI score0.00131EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.1 views

The vulnerability of Microsoft Windows Defender operating systems, which allows a hacker to bypass security restrictions

The vulnerability of Microsoft Windows Defender operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

7.1CVSS7AI score0.0067EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/08/09 12:23 p.m.3 views

mariadb: server crash at Field::set_default via specially crafted SQL statements

A flaw was found in MariaDB. The component, Field::setdefault, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

7.5CVSS7.3AI score0.00217EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/08/09 12:0 a.m.1 views

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel, which can be exploited by attackers to perform certain illegal operations...

7.3CVSS5.6AI score0.02096EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/08/01 12:0 a.m.2 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from incorrect programmatic calls to high-level native procedures. An attacker can exploit this vulnerability to cause an elevatio...

7.8CVSS5.8AI score0.00016EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.2 views

The vulnerability of Cisco IOS operating system loaders, related to security mechanism deficiencies, allows attackers to trigger service failures.

The vulnerability of Cisco IOS operating system loaders is related to security mechanisms that are flawed. Exploiting this vulnerability can allow attackers to cause service failures...

4.9CVSS5.7AI score0.00329EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/07/12 12:0 a.m.1 views

Simple Sales Management System 跨站脚本漏洞

Simple Sales Management System is a simple sales management system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Simple Sales Management System version 1.0. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

5.4CVSS5.5AI score0.00206EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/06/10 12:0 a.m.3 views

phplist 跨站脚本漏洞

phplist is a set of open source newsletter and email marketing software from phplist UK. phplist version 3.2.6 has a security vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

5.4CVSS5.2AI score0.00206EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/06/08 12:0 a.m.1 views

SialWeb CMS 跨站脚本漏洞

SialWeb CMS is a content management system from SialWeb Pakistan.A cross-site scripting vulnerability exists in SialWeb CMS. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

5.4CVSS5.2AI score0.00502EPSS
Exploits1References3
Rows per page
Query Builder