Lucene search
+L

11735 matches found

CNNVD
CNNVD
added 2021/12/28 12:0 a.m.8 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat, which stems from vulnerability to input errors when generating web pages. No detailed vulnerability details are...

6.6CVSS5.2AI score0.0046EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/12/28 12:0 a.m.55 views

Unspecified vulnerability in livehelperchat

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A security vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. No details of the vulnerability ar...

6.1CVSS6.2AI score0.00948EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.10 views

The vulnerability of the Content Security Policy mechanism implemented in Google Chrome allows a violator to circumvent existing access restrictions policies.

The vulnerability of the Content Security Policy mechanism implemented by Google Chrome is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to circumvent existing access control policies...

5.8CVSS6.8AI score0.01284EPSS
SaveExploits1References11Affected Software7
CNVD
CNVD
added 2021/12/27 12:0 a.m.38 views

GPAC Code Issue Vulnerability (CNVD-2022-04962)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS5.1AI score0.00625EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/27 12:0 a.m.39 views

GPAC null pointer dereference vulnerability (CNVD-2022-04961)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

7.5CVSS4.5AI score0.01066EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/27 12:0 a.m.4 views

Vim 资源管理错误漏洞

Vim is a UNIX-based editor. Vim is vulnerable to resource management errors, and no detailed vulnerability details are currently available...

7.8CVSS8.1AI score0.01629EPSS
SaveExploits1References27
CNNVD
CNNVD
added 2021/12/26 12:0 a.m.10 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A security vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. No details of the vulnerability ar...

6.1CVSS5.6AI score0.00948EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/12/24 12:0 a.m.27 views

GPAC Denial of Service Vulnerability (CNVD-2021-103386)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a security vulnerability that originates from the gfsgcommanddel function in the software and can be exploited to cause segmentation errors and application crashes...

5.5CVSS5.1AI score0.00622EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/24 12:0 a.m.9 views

KONICA MINOLTA MFPs and printing systems 信息泄露漏洞

KONICA MINOLTA MFPs and printing systems is a printer from KONICA MINOLTA. An information disclosure vulnerability exists in KONICA MINOLTA MFPs and printing systems, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could...

6.5CVSS6.5AI score0.0052EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.9 views

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco IOS XE routers cBR-8 allows a attacker to cause a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE routers cBR-8 is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.7CVSS7.2AI score0.01101EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.14 views

The vulnerability of the Apache DolphinScheduler scheduler platform, related to privilege management errors, allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the Apache DolphinScheduler scheduler platform is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL queries...

9CVSS8.1AI score0.01861EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2021/12/24 12:0 a.m.63 views

GPAC Code Issue Vulnerability (CNVD-2022-03661)

GPAC is an open source multimedia framework. GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS5AI score0.00667EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/24 12:0 a.m.8 views

KONICA MINOLTA MFPs and printing systems 信息泄露漏洞

KONICA MINOLTA MFPs and printing systems is a printer from KONICA MINOLTA. An information disclosure vulnerability exists in KONICA MINOLTA MFPs and printing systems, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could...

6.5CVSS6.5AI score0.00532EPSS
SaveExploits0References5
Redos
Redos
added 2021/12/24 12:0 a.m.5 views

ROS-2-1986

2.1986 Mozilla Thunderbird email client vulnerability CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

8.8CVSS8.3AI score0.03582EPSS
SaveExploits1
Redos
Redos
added 2021/12/24 12:0 a.m.21 views

ROS-2-862

2.862 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

8.8CVSS9.3AI score0.03582EPSS
SaveExploits1
CNVD
CNVD
added 2021/12/24 12:0 a.m.22 views

GPAC null pointer reference vulnerability

GPAC is an open source multimedia framework. GPAC version 1.1.0 contains a security vulnerability that stems from a null pointer dereference vulnerability in lsrreadid.part, which can be exploited to cause segmentation errors and application crashes...

5.5CVSS4.1AI score0.00607EPSS
SaveExploits1References1
Redos
Redos
added 2021/12/24 12:0 a.m.36 views

ROS-2-1352

2.1352 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.7AI score0.02662EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.8 views

The vulnerability of the mwifiex_usb_recv function (drivers/net/wireless/marvell/mwifiex/usb.c) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mwifiexusbrecv function drivers/net/wireless/marvell/mwifiex/usb.c in the Linux Server kernel is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

4.9CVSS6.6AI score0.00643EPSS
SaveExploits0References18Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.14 views

The vulnerability of the Network Address Translation (NAT) technology implementation in Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in Cisco IOS XE operating systems is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

8.6CVSS7.6AI score0.01328EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.13 views

The vulnerability of the `wheel.pillar_roots.write` component in the configuration management system and the remote execution of SaltStack Salt, which is related to errors in data validation, allows a perpetrator to execute arbitrary code.

The vulnerability of the wheel.pillarroots.write component in the configuration management system and the remote execution of SaltStack Salt are related to errors during data validation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.8CVSS8.4AI score0.1051EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder