Lucene search
+L

108 matches found

Kitploit
Kitploit
added 2026/09/01 2:44 a.m.5 views

CVE-2019-9849

CVE-2019-9849:LibreOffice 在“隐身模式”下获取远程项目符号图形 LibreOffice 具有一种“隐身模式”,在该模式下,仅允许从被视为“受信任”的位置获取远程资源。 该模式并非默认模式,但希望禁用 LibreOffice 在文档中包含远程资源功能的用户,可以启用该模式。 在 6.2.5 版本之前存在一个缺陷:项目符号图形被遗漏在此保护范围之外。 HTML 标签| HTML 属性| 打开时触发| 保存/导出时触发 ---|---|---|--- ol| src| 否| 是 ul| src| 否| 是 厂商披露: 该漏洞的厂商披露可在此处查看。 概念验证:...

4.3CVSS6.9AI score0.03149EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.19 views

Brickcom多款产品 安全漏洞

Brickcom Cube, among others, are products of the Brickcom company. The Brickcom Cube is a series of indoor network surveillance cameras. The Brickcom Dome is a series of hemispherical network surveillance cameras. The Brickcom Bullet is a series of gun-type network surveillance cameras. Several o...

8.3CVSS5.5AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.29 views

Brickcom多款产品 访问控制错误漏洞

Brickcom Cube, among others, are products of the Brickcom company. The Brickcom Cube is a series of indoor network surveillance cameras. The Brickcom Dome is a series of hemispherical network surveillance cameras. The Brickcom Bullet is a series of gun-type network surveillance cameras. Several o...

8.3CVSS5.4AI score0.00156EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/16 6:45 p.m.7 views

MINI-RX4R-892W-9PHV

Bulletin has no description...

6.1CVSS5.7AI score0.0034EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 8:35 a.m.14 views

CVE-2020-17406

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the ping parameter provided to tools.sh. The issu...

9CVSS7.2AI score0.05342EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:12 a.m.11 views

CVE-2024-2666

The Premium Addons for Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the plugin's Bullet List Widget in all versions up to, and including, 4.10.24 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

5.4CVSS5.8AI score0.00441EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/10 3:57 p.m.5 views

MINI-5F34-RRQH-37Q9

Bulletin has no description...

7.5CVSS6.9AI score0.00934EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/11/13 10:02 a.m.11 views

CVE-2025-64404

Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used backgrou...

7.5CVSS6.7AI score0.01207EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/12 9:15 a.m.10 views

CVE-2025-64404

Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used backgrou...

7.5CVSS5.8AI score0.01207EPSS
SaveExploits0References3
NVD
NVD
added 2025/11/12 9:15 a.m.18 views

CVE-2025-64404

Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used backgrou...

7.5CVSS0.01207EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/11/12 9:08 a.m.18 views

CVE-2025-64404 Apache OpenOffice: Remote documents loaded without prompt via background and bullet images

Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used backgrou...

0.01207EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/12 9:08 a.m.34 views

CVE-2025-64404

CVE-2025-64404 affects Apache OpenOffice up to version 4.1.15. The issue is a missing Authorization vulnerability that allows an attacker to craft a document containing links (specifically background fill or bullet images) that would cause external files to be loaded without prompting the user. A...

7.5CVSS6.4AI score0.01207EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/12 9:08 a.m.3 views

CVE-2025-64404 Apache OpenOffice: Remote documents loaded without prompt via background and bullet images

Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used backgrou...

6.4AI score0.01207EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/10/28 12:00 a.m.10 views

Fedora: Security Advisory (FEDORA-2025-9b8c8ca077)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.00417EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2011-2860

Malware in sbrugna...

4.3CVSS6.2AI score0.01453EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2025-24119

Malicious code in bioql PyPI...

8.4CVSS6.6AI score0.00583EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/08/13 4:29 a.m.21 views

CVE-2025-8854

Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OFF file with an overlong initial token processed by the VHACD test utility or invoked indirectly through PyBullet's vhacd function...

8.4CVSS8.7AI score0.00583EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/11 5:15 a.m.12 views

CVE-2025-8854

Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OFF file with an overlong initial token processed by the VHACD test utility or invoked indirectly through PyBullet's vhacd function...

9.8CVSS0.00583EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/08/11 4:24 a.m.17 views

CVE-2025-8854 bullet3 VHACD utility: stack-based buffer overflow in OFF parser (LoadOFF)

Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OFF file with an overlong initial token processed by the VHACD test utility or invoked indirectly through PyBullet's vhacd function...

8.4CVSS0.00583EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/08/11 4:24 a.m.3 views

CVE-2025-8854 bullet3 VHACD utility: stack-based buffer overflow in OFF parser (LoadOFF)

Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OFF file with an overlong initial token processed by the VHACD test utility or invoked indirectly through PyBullet's vhacd function...

8.4CVSS8.6AI score0.00583EPSS
SaveExploits1References2
Rows per page
Query Builder