Lucene search
+L

12706 matches found

Prion
Prion
•added 2022/09/02 12:15 p.m.•37 views

Memory corruption

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto...

4.3CVSS7.9AI score0.00124EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/09/02 11:31 a.m.•44 views

CVE-2022-22100

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto...

8.4CVSS8.8AI score0.00124EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/02 11:31 a.m.•96 views

CVE-2022-22100

CVE-2022-22100 : Qualcomm Snapdragon Auto memory corruption in multimedia due to an improper check on received export descriptors. Affected component is the multimedia export-descriptor handling in Snapdragon Auto. Root cause: memory corruption from boundary/descriptor validation issue. Impact: h...

8.4CVSS7.8AI score0.00124EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/02 12:00 a.m.•23 views

PT-2022-15236 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in multimedia due to an improper check on received export descriptors. Recommendations: At the moment, there is no information abo...

8.4CVSS7.7AI score0.00124EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/02 12:00 a.m.•9 views

CVE-2022-22100: Out-of-bounds Write

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto...

8.4CVSS7.5AI score0.00124EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/08/29 9:15 p.m.•22 views

CVE-2022-32993

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh...

9.8CVSS5.8AI score0.00958EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2022/08/29 9:15 p.m.•20 views

CVE-2022-32993

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh...

9.8CVSS5.8AI score0.00958EPSS
SaveExploits2References3
attackerkb
attackerkb
•added 2022/08/29 6:15 p.m.•15 views

CVE-2022-2638

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...

6.5CVSS6.6AI score0.0119EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/08/29 6:15 p.m.•23 views

CVE-2022-2638

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...

6.5CVSS5.8AI score0.0119EPSS
SaveExploits1References1
Prion
Prion
•added 2022/08/29 6:15 p.m.•37 views

Path traversal

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...

4.7CVSS6.4AI score0.0119EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/08/29 5:15 p.m.•86 views

CVE-2022-2638

CVE-2022-2638 affects the WordPress Export All URLs plugin prior to version 4.4. The vulnerability arises from insufficient validation of the path of the CSV file to be removed, enabling high-privilege users to delete arbitrary files on the server. Public sources in the connected documents consis...

6.5CVSS6.4AI score0.0119EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/08/29 12:00 a.m.•23 views

WordPress plugin “Export All URLs” has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS6.7AI score0.0119EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/29 12:00 a.m.•17 views

PT-2022-17822 · WordPress · Export All Urls

Name of the Vulnerable Software and Affected Versions: Export All URLs WordPress plugin versions prior to 4.4 Description: The issue concerns a lack of validation for the file path to be removed on the system, which is supposed to be a CSV file. This could allow high privilege users to delete...

6.5CVSS6.4AI score0.0119EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/08/29 12:00 a.m.•24 views

TOTOLINK A7000R security vulnerabilities

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from an access control vulnerability that stems from improper access control in its /cgi-bin/ExportSettings.sh...

9.8CVSS6.8AI score0.00958EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2022/08/29 12:00 a.m.•14 views

PT-2022-21627 · Totolink · Totolink A7000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A7000R version 4.1cu.4134 Description: The issue is related to an access control problem. It can be exploited via the "/cgi-bin/ExportSettings.sh" API endpoint. Recommendations: For TOTOLINK A7000R version 4.1cu.4134, consider...

9.8CVSS9.3AI score0.00958EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/29 12:00 a.m.•6 views

CVE-2022-2638: External Control of File Name or Path

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...

6.5CVSS6.7AI score0.0119EPSS
SaveExploits1References3
Citrix
Citrix
•added 2022/08/26 12:00 a.m.•18 views

How to export logs using App Layering 2204 or higher

Walk-through the new export logs steps...

7.1AI score
SaveExploits0
osv_debian
osv_debian
•added 2022/08/25 8:15 p.m.•17 views

DEBIAN-CVE-2021-20224

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead t...

5.5CVSS6.7AI score0.00389EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/08/25 8:15 p.m.•17 views

CVE-2021-20224

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead t...

5.5CVSS6.9AI score0.00389EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2022/08/25 12:00 a.m.•51 views

CVE-2021-20224

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead t...

5.5CVSS6.6AI score0.00389EPSS
SaveExploits0
Rows per page
Query Builder