Lucene search
K

64 matches found

Patchstack
Patchstack
added 2025/12/31 12:0 a.m.5 views

WordPress Ads Pro plugin <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id' vulnerability

Unauthenticated Time-Based SQL Injection via ‘bsaproid' vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ads Pro versions = 4.89...

7.5CVSS5.9AI score0.00326EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-7081

Malware in sbrugna...

4.3CVSS4.7AI score0.09307EPSS
Exploits4References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-7078

Malware in sbrugna...

5.4CVSS5.4AI score0.00413EPSS
Exploits4References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in bsa-contract (npm)

The package bsa-contract was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.0 views

MAL-2025-16227 Malicious code in bsa-contract (npm)

The package bsa-contract was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/07/02 4:15 a.m.2 views

CVE-2025-5339

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘bsaproid’ parameter in all versions up to, and including, 4.89 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

7.5CVSS5.8AI score0.00326EPSS
Exploits0References2
OSV
OSV
added 2024/05/03 2:15 a.m.0 views

CVE-2023-32157

Tesla Model 3 bsaserver BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to pair a malicious Bluetooth device with the...

7.5CVSS6.2AI score0.00112EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.0 views

CVE-2023-32157

Tesla Model 3 bsaserver BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to pair a malicious Bluetooth device with the...

7.5CVSS6.2AI score0.00112EPSS
Exploits0References2
CVE
CVE
added 2024/05/03 1:56 a.m.52 views

CVE-2023-32157

CVE-2023-32157 affects Tesla Model 3 with the bsa_server heap-based buffer overflow. Root cause: improper validation of user-supplied data length copied into a fixed-length heap buffer, allowing an attacker to execute code in the context of an unprivileged user in a sandboxed process. Exploitatio...

7.5CVSS5.2AI score0.00112EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.1 views

Tesla Model 3 安全漏洞

The Tesla Model 3 is an electric vehicle from the American company Tesla. A security vulnerability exists in the Tesla Model 3 that stems from a specific flaw in the bsaserver process that lacks proper validation of the length of user-supplied data before copying it to a heap-based fixed-length...

7.5CVSS4.9AI score0.00112EPSS
Exploits0References2
Broadcom
Broadcom
added 2022/11/08 12:0 a.m.32 views

CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl

Security Advisory ID : BSA-2022-1661 Component : OpenSSL Revision : 1.0 A flaw was found in the way OpenSSL verified certificates via the X509verifycert function. X509verifycert fuunction may return a negative return value to indicate an internal error for example, out of memory. Such a negative...

7.5CVSS7.1AI score0.3328EPSS
Exploits0
Broadcom
Broadcom
added 2022/09/13 12:0 a.m.31 views

CVE-2017-18018: In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file

Security Advisory ID : BSA-2022-2073 Component : GNU Coreutils Revision : 1.0 In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of...

7.1CVSS4.7AI score0.00056EPSS
Exploits1
Broadcom
Broadcom
added 2022/09/13 12:0 a.m.17 views

CVE-2022-33183. Stack buffer overflow using in “firmwaredownload” and “diagshow” commands.

Security Advisory ID : BSA-2022-2085 Component : FOS Revision : 1.1 A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and...

7.1CVSS7.5AI score0.00661EPSS
Exploits0
Broadcom
Broadcom
added 2021/05/10 12:0 a.m.30 views

BSA-2021-1490

Security Advisory ID : BSA-2021-1490 Component : Web Management Interface Revision : 1.1 The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An...

5.3CVSS7.4AI score0.00051EPSS
Exploits0
Broadcom
Broadcom
added 2021/05/10 12:0 a.m.25 views

BSA-2021-1484

Security Advisory ID : BSA-2021-1484 Component : hard-coded administrator account Revision : 1.0 Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a password is not provided for PostgreSQL at install-time. Affected Products Brocade...

6.6CVSS7.1AI score0.00273EPSS
Exploits0
Broadcom
Broadcom
added 2021/05/10 12:0 a.m.29 views

BSA-2021-1495

Security Advisory ID : BSA-2021-1495 Component : CLI Revision : 1.0 Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security scanning, which could lead to a slower response to CLI commands and other operations. Affected Products Brocade...

5.3CVSS5.4AI score0.00377EPSS
Exploits0
Broadcom
Broadcom
added 2021/05/10 12:0 a.m.35 views

BSA-2021-1481

Security Advisory ID : BSA-2021-1481 Component : IPv6 networking Revision : 1.0 The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the network, increasing the potential attack surface. When IPv6 networking is enabled on t...

3.5CVSS5.2AI score0.00237EPSS
Exploits0
Broadcom
Broadcom
added 2020/11/20 12:0 a.m.39 views

BSA-2020-1158

Security Advisory ID : BSA-2020-1158 Component : LDAP Revision : 1.0 Brocade Fabric OS before v9.0.0 and afterv8.1.0, configured in Virtual Fabric mode contains a weakness in the ldap implementation that could allowa remote ldap user to login in the Brocade Fibre Channel SAN switch with "user"...

4.3CVSS4.4AI score0.00226EPSS
Exploits0
Broadcom
Broadcom
added 2020/09/08 12:0 a.m.25 views

BSA-2020-1080

Security Advisory ID : BSA-2020-1080 Component : seccryptocfg templates Revision : 2.0 Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0CBN3, contains code injection and privilege escalation vulnerability. The vulnerability could allow an unauthenticate...

6.7CVSS9.8AI score0.00571EPSS
Exploits0
Check Point Advisories
Check Point Advisories
added 2020/07/27 12:0 a.m.1 views

BSA Radar Information Disclosure (CVE-2020-14946)

An information disclosure vulnerability exists in BSA Radar. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

4CVSS2.5AI score0.09307EPSS
Exploits4
Rows per page
Query Builder