Lucene search
+L

98 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:6 a.m.6 views

SUSE CVE-2008-4696

Cross-site scripting XSS vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier aka the "optional fragment", which is not properly escaped before storage in the History Search database aka md.dat...

4.3CVSS6.3AI score0.45729EPSS
SaveExploits6References5
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.8 views

PT-2022-22894 · Wavlink · Wavlink Wn533A8 +4

Name of the Vulnerable Software and Affected Versions: WAVLINK WN572HP3 WAVLINK WN533A8 WAVLINK WN530H4 WAVLINK WN535G3 WAVLINK WN531P3 Description: The issue is related to a lack of filtering on parameters: qos bandwith and qos dat in the qos.cgi file, which leads to command injection in the pag...

9.8CVSS9.6AI score0.02194EPSS
SaveExploits1References4
NVD
NVD
added 2022/06/24 9:15 p.m.26 views

CVE-2022-33121

A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...

8.1CVSS0.0039EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/24 9:15 p.m.5 views

CVE-2022-33121

A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...

8.1CVSS5.8AI score0.0039EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/06/24 8:59 p.m.30 views

CVE-2022-33121

A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...

8.2AI score0.0039EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/24 8:59 p.m.21 views

CVE-2022-33121

A Cross-Site Request Forgery CSRF in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link...

6.8AI score
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/24 12:0 a.m.12 views

MiniCMS 跨站请求伪造漏洞

MiniCMS is content management system. A cross-site request forgery vulnerability exists in MiniCMS v1.11. An attacker can exploit this vulnerability to delete any local .dat file by clicking a malicious link...

8.1CVSS5.4AI score0.0039EPSS
SaveExploits1References2
NVD
NVD
added 2021/10/20 9:15 p.m.29 views

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS0.00716EPSS
SaveExploits1References5
OSV
OSV
added 2021/10/20 9:15 p.m.6 views

ALPINE-CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS7.7AI score0.00716EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2021/10/20 8:5 p.m.51 views

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

7.8CVSS8.1AI score0.00716EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/10/13 12:0 a.m.8 views

Proofpoint Spam Engine 访问控制错误漏洞

Proofpoint Spam Engine is an email filter from Proofpoint USA, Inc. It is used to filter inbound and outbound email traffic for service filtering organizations. An Access Control Error vulnerability exists in Proofpoint Spam Engine, which stems from the product allowing .dat files to be sent via...

7.5CVSS7.3AI score0.01042EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/25 9:15 p.m.6 views

CVE-2021-37452

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...

5.5CVSS5.8AI score0.00264EPSS
SaveExploits1References2
NVD
NVD
added 2021/07/25 9:15 p.m.17 views

CVE-2021-37452

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...

5.5CVSS0.00264EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/07/25 8:12 p.m.27 views

CVE-2021-37452

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...

5.6AI score0.00264EPSS
SaveExploits1References2
CVE
CVE
added 2021/07/25 8:12 p.m.65 views

CVE-2021-37452

CVE-2021-37452 affects NCH Quorum (v2.03 and earlier). The issue is an information disclosure where local users can read plaintext login information by accessing the local .dat configuration files. Multiple sources (NVD, Red Hat, CNVD, CVE records) consistently describe the vulnerability as local...

5.5CVSS5.2AI score0.00264EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/07/25 12:0 a.m.7 views

NCH Quorum 访问控制错误漏洞

NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. An information disclosure vulnerability exists in NCH Quorum, which stems from the fact that the product does not add valid permissions for access to the local .dat file, which could be exploit...

5.5CVSS5.5AI score0.00264EPSS
SaveExploits1References3
vulnersOsv
vulnersOsv
added 2021/05/10 6:44 p.m.7 views

@cycle-robot-drivers/run (>=0.0.0 <=1.0.27), @wannaby/wanna-model-viewer (>=0.0.1 <=0.0.10) +17 more potentially affected by CVE-2020-7755 via dat.gui (>=0.6.5 <=0.7.7)

dat.gui NPM version =0.6.5, =0.0.0, =0.0.1, =1.0.0, =3.0.0, =0.0.0, =0.0.0, =1.0.0, =0.6.0, =0.1.0, =0.3.2, =2.0.0, =0.0.7, =0.0.0, =0.0.7 and more Source cves: CVE-2020-7755 Source advisory: OSV:GHSA-CHWR-HF3W-C984...

7.5CVSS7.1AI score0.02099EPSS
SaveExploits1
CNVD
CNVD
added 2021/01/15 12:0 a.m.7 views

Jiajia DAT Video Format Converter is vulnerable to dll hijacking.

Jiajia DAT Video Format Converter is the software to convert DAT format. Jiajia DAT Video Format Converter has a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/10/27 12:0 a.m.9 views

PT-2020-19769 · Dat · Dat.Gui

Name of the Vulnerable Software and Affected Versions: dat.gui versions prior to a fixed version Description: The issue is related to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values. This can be exploited in all versions of the package dat.gui...

7.5CVSS6.4AI score0.02099EPSS
SaveExploits1References8
vulnersOsv
vulnersOsv
added 2020/10/07 1:13 p.m.6 views

@cycle-robot-drivers/run (>=0.0.0 <=1.0.27), @wannaby/wanna-model-viewer (>=0.0.1 <=0.0.10) +17 more potentially affected by CVE-2020-7755 via dat.gui (>=0.6.5 <=0.7.7)

dat.gui NPM version =0.6.5, =0.0.0, =0.0.1, =1.0.0, =3.0.0, =0.0.0, =0.0.0, =1.0.0, =0.6.0, =0.1.0, =0.3.2, =2.0.0, =0.0.7, =0.0.0, =0.0.7 and more Source cves: CVE-2020-7755 Source advisory: SNYK:JS-DATGUI-1016275...

7.5CVSS7.1AI score0.02099EPSS
SaveExploits1
Rows per page
Query Builder