Lucene search
+L

811 matches found

Positive Technologies
Positive Technologies
•added 2021/12/22 12:00 a.m.•3 views

PT-2021-24215

Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0 Description: An invalid pointer reference issue exists via the gf svg node del function, causing a segmentation fault and application crash. Recommendations: For gpac version 1.1.0, consider avoiding the use of the gf svg...

5.5CVSS0.00667EPSS
SaveExploits1References9
OSV
OSV
•added 2021/12/02 11:15 p.m.•20 views

CVE-2020-29177

Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \appdel.php...

9.1CVSS7.4AI score0.00961EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/17 12:00 a.m.•4 views

PT-2021-7476

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A critical issue has been found in the Linux Kernel, specifically in the del timer function of the drivers/isdn/mISDN/l1oip core.c file, which is part of the Bluetooth component. This...

7.8CVSS0.00346EPSS
SaveExploits0
OSV
OSV
•added 2021/10/11 11:15 a.m.•15 views

CVE-2021-24711

The delreistereddomains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack...

8.8CVSS5.8AI score0.0069EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2021/10/11 12:00 a.m.•4 views

PT-2021-16214

Name of the Vulnerable Software and Affected Versions Software License Manager WordPress plugin versions prior to 4.5.1 Description The issue concerns a lack of CSRF checks in the del reistered domains AJAX action, making it susceptible to a CSRF attack. This allows an attacker to potentially...

8.8CVSS0.0069EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
•added 2021/09/24 12:00 a.m.•4 views

PT-2021-10504

Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: A Cross-Site Request Forgery CSRF issue allows authenticated attackers to delete all users via the API endpoint "admin.php/admin/admin/del/ids/.html". Recommendations: For Maccms version 10, as a temporary...

8.1CVSS0.0043EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/24 12:00 a.m.•10 views

CVE-2020-20514: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/ .html allows authenticated attackers to delete all users...

8.1CVSS5.8AI score0.0043EPSS
SaveExploits1References2
OSV
OSV
•added 2021/09/20 4:15 p.m.•41 views

UBUNTU-CVE-2021-32270

An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwidboxdel located in boxcodebase.c. It allows an attacker to cause Denial of Service...

5.5CVSS7.1AI score0.00635EPSS
SaveExploits1References3
Veracode
Veracode
•added 2021/09/20 3:29 a.m.•44 views

Prototype Pollution

object-path is vulnerable to Prototype Pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype via the del function...

7.5CVSS4.8AI score0.0204EPSS
SaveExploits1References8Affected Software2
Positive Technologies
Positive Technologies
•added 2021/09/17 12:00 a.m.•7 views

PT-2021-21941 · Npm +2 · Object-Path +2

Name of the Vulnerable Software and Affected Versions: object-path affected versions not specified Description: The issue is related to Improperly Controlled Modification of Object Prototype Attributes, also known as 'Prototype Pollution'. This occurs because the del function does not properly...

9.8CVSS7.2AI score0.0204EPSS
SaveExploits2References31
Positive Technologies
Positive Technologies
•added 2021/09/03 12:00 a.m.•3 views

PT-2021-27738

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several functions: zend string release, zend closure free...

5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/08/28 12:00 a.m.•4 views

PT-2021-27727

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, specifically a READ 4 crash type. The crash state involves several functions: zend string release,...

5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•2 views

PT-2021-29943

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for exploitation have not been fully determined...

6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•3 views

PT-2021-29837

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. This problem has been identified but its actual impact and potential for...

5.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•4 views

PT-2021-29879

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description A potential issue exists where a use-after-free condition could be triggered by calling del timer sync. The actual impact and likelihood of an attack have not been confirmed. Recommendations...

5.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•1 views

PT-2021-25917

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for attack have not been confirmed. Recommendation...

5.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•3 views

PT-2021-25842

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for exploitation have not been confirmed...

6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•3 views

PT-2021-29912

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for exploitation have not been confirmed...

6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•1 views

PT-2021-25660

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.4 Description: The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for attack have not been confirmed...

5.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/03 12:00 a.m.•3 views

PT-2021-25800

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to a possible use-after-free condition that can be triggered by calling del timer sync. The actual impact and potential for attack have not been confirmed. Recommendation...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder