Lucene search
K

11189 matches found

CNNVD
CNNVD
added 2021/12/28 12:0 a.m.1 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat, which stems from vulnerability to input errors when generating web pages. No detailed vulnerability details are...

6.6CVSS5.2AI score0.00141EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.0 views

The vulnerability of the Google Chrome browser’s background loading function allows a hacker to bypass content security policies and gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s background loading function is related to privilege management errors. Exploiting this vulnerability could allow a remote attacker to bypass content security policies and gain unauthorized access to protected information...

6.4CVSS0.00327EPSS
Exploits0References9Affected Software5
CNVD
CNVD
added 2021/12/27 12:0 a.m.18 views

GPAC null pointer dereference vulnerability (CNVD-2022-04961)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

7.5CVSS4.5AI score0.00281EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/27 12:0 a.m.13 views

GPAC Code Issue Vulnerability (CNVD-2022-04962)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS5.1AI score0.00288EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/12/27 12:0 a.m.1 views

Vim 资源管理错误漏洞

Vim is a UNIX-based editor. Vim is vulnerable to resource management errors, and no detailed vulnerability details are currently available...

7.8CVSS8.1AI score0.0029EPSS
Exploits1References27
CNNVD
CNNVD
added 2021/12/26 12:0 a.m.1 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A security vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. No details of the vulnerability ar...

6.1CVSS5.6AI score0.00576EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.1 views

The vulnerability of the Apache DolphinScheduler scheduler platform, related to privilege management errors, allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the Apache DolphinScheduler scheduler platform is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL queries...

9CVSS0.0116EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.0 views

The vulnerability of the `wheel.pillar_roots.write` component in the configuration management system and the remote execution of SaltStack Salt, which is related to errors in data validation, allows a perpetrator to execute arbitrary code.

The vulnerability of the wheel.pillarroots.write component in the configuration management system and the remote execution of SaltStack Salt are related to errors during data validation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.8CVSS0.10038EPSS
Exploits0References9Affected Software4
Redos
Redos
added 2021/12/24 12:0 a.m.31 views

ROS-2-1352

2.1352 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.7AI score0.00818EPSS
Exploits0
CNVD
CNVD
added 2021/12/24 12:0 a.m.26 views

GPAC Denial of Service Vulnerability (CNVD-2021-103386)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a security vulnerability that originates from the gfsgcommanddel function in the software and can be exploited to cause segmentation errors and application crashes...

5.5CVSS5.1AI score0.00288EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/24 12:0 a.m.16 views

GPAC Denial of Service Vulnerability (CNVD-2021-103387)

GPAC is an open source multimedia framework. gfsvgdeleteattributevalue is invalid and can be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS5.3AI score0.00149EPSS
Exploits1References1
Redos
Redos
added 2021/12/24 12:0 a.m.14 views

ROS-2-862

2.862 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

8.8CVSS9.3AI score0.02512EPSS
Exploits1
CNVD
CNVD
added 2021/12/24 12:0 a.m.17 views

GPAC Code Issue Vulnerability (CNVD-2022-03661)

GPAC is an open source multimedia framework. GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS5AI score0.00301EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/12/24 12:0 a.m.1 views

KONICA MINOLTA MFPs and printing systems 信息泄露漏洞

KONICA MINOLTA MFPs and printing systems is a printer from KONICA MINOLTA. An information disclosure vulnerability exists in KONICA MINOLTA MFPs and printing systems, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could...

6.5CVSS6.5AI score0.00239EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.0 views

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco IOS XE routers cBR-8 allows a attacker to cause a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE routers cBR-8 is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.7CVSS0.00344EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.0 views

The vulnerability of the Network Address Translation (NAT) technology implementation in Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in Cisco IOS XE operating systems is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

8.6CVSS0.00418EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2021/12/24 12:0 a.m.17 views

GPAC null pointer reference vulnerability

GPAC is an open source multimedia framework. GPAC version 1.1.0 contains a security vulnerability that stems from a null pointer dereference vulnerability in lsrreadid.part, which can be exploited to cause segmentation errors and application crashes...

5.5CVSS4.1AI score0.00288EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/12/24 12:0 a.m.2 views

KONICA MINOLTA MFPs and printing systems 信息泄露漏洞

KONICA MINOLTA MFPs and printing systems is a printer from KONICA MINOLTA. An information disclosure vulnerability exists in KONICA MINOLTA MFPs and printing systems, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could...

6.5CVSS6.5AI score0.00325EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.0 views

The vulnerability of the mwifiex_usb_recv function (drivers/net/wireless/marvell/mwifiex/usb.c) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mwifiexusbrecv function drivers/net/wireless/marvell/mwifiex/usb.c in the Linux Server kernel is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

4.9CVSS0.00048EPSS
Exploits0References18Affected Software4
Redos
Redos
added 2021/12/24 12:0 a.m.2 views

ROS-2-1986

2.1986 Mozilla Thunderbird email client vulnerability CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...

8.8CVSS8.3AI score0.02512EPSS
Exploits1
Rows per page
Query Builder