Lucene search
+L

20016 matches found

NVD
NVD
added 2023/12/29 9:15 a.m.32 views

CVE-2023-25054

Improper Control of Generation of Code 'Code Injection' vulnerability in David F. Carr RSVPMaker.This issue affects RSVPMaker: from n/a through 10.6.6...

10CVSS0.00681EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/29 8:53 a.m.69 views

CVE-2023-25054

CVE-2023-25054 affects RSVPMaker for WordPress (vulnerable:

10CVSS8.6AI score0.00681EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2023/12/28 7:17 p.m.12 views

f-legrand.fr Improper Access Control vulnerability OBB-3824510

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/12/27 12:0 a.m.9 views

The vulnerability of the microprogrammed software of the ABB AC700F and AC900F controllers, as well as the ABB Freelance SCADA system, relates to the possibility of buffer overflows based on stacks. This allows a hacker to cause the controller to stop working.

The vulnerability of the microprogramming software for ABB AC700F and AC900F controllers, as well as the ABB Freelance SCADA system, relates to the possibility of buffer overflows based on stacks. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause the...

9CVSS7.4AI score0.00478EPSS
SaveExploits0References2Affected Software1
Circl
Circl
added 2023/12/22 9:51 a.m.7 views

GHSA-37VQ-HR2F-G7H7

creationtimestamp| type| source ---|---|--- 2023-12-22 09:51:44+00:00| seen| https://t.me/ctinow/158282...

4.8AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/12/20 2:6 a.m.4 views

SUSE CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

5.3CVSS6.8AI score0.00829EPSS
SaveExploits1References5
Veracode
Veracode
added 2023/12/19 8:14 a.m.28 views

Denial Of Service (DoS)

libcryptopp.so is vulnerable to Denial Of Service DoS. The vulnerability is caused when DER public key data for an F2^m curve is not strictly decreasing each polynomial term, which allows an attacker to cause an application crash...

7.5CVSS7AI score0.00829EPSS
SaveExploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/12/19 12:0 a.m.21 views

Mitsubishi Electric MELSEC-F Series Improper Authentication (CVE-2023-4562)

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending...

9.1CVSS8.2AI score0.0085EPSS
SaveExploits0References4
NVD
NVD
added 2023/12/18 4:15 a.m.11 views

CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

7.5CVSS0.00829EPSS
SaveExploits1References1
OSV
OSV
added 2023/12/18 4:15 a.m.3 views

DEBIAN-CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

7.5CVSS7.2AI score0.00829EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/18 4:15 a.m.13 views

Command injection

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

5CVSS6.9AI score0.00829EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2023/12/18 12:0 a.m.55 views

CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

7.5CVSS7.3AI score0.00829EPSS
SaveExploits1
Cvelist
Cvelist
added 2023/12/18 12:0 a.m.36 views

CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

7.5AI score0.00829EPSS
SaveExploits1References1
OSV
OSV
added 2023/12/18 12:0 a.m.18 views

CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

6.7AI score
SaveExploits0References3
CVE
CVE
added 2023/12/18 12:0 a.m.63 views

CVE-2023-50980

CVE-2023-50980 affects Crypto++ (gf2n.cpp) up to version 8.9.0. The vulnerability allows a DoS (application crash) via DER-encoded public-key data for an F(2^m) curve when the polynomial term degrees are not strictly decreasing. Multiple advisories (OpenSUSE, SUSE, Astra Linux, Nessus references)...

7.5CVSS7.2AI score0.00829EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.10 views

The vulnerability of the FortiDDoS-F software and the FortiADC web management tool lies in the use of an unauthorized intermediate policy file, allowing attackers to access confidential information.

The vulnerability of the FortiDDoS-F software and the FortiADC web management tool lies in the use of an unauthorized intermediate policy file. Exploiting this vulnerability can allow attackers to access confidential information...

9.1CVSS7.7AI score0.00395EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.9 views

The vulnerability of the access control devices in Fortinet’s FortiNAC and FortiNAC-F systems arises from the lack of protective measures for the website structure. This allows attackers to execute arbitrary code.

The vulnerability of the access control devices in Fortinet’s FortiNAC and FortiNAC-F systems exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.1AI score0.0061EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.10 views

The vulnerability of the FortiDDoS-F software and the FortiADC application delivery controller, which involves copying buffers without checking the size of the input data, allows attackers to execute arbitrary code or perform arbitrary commands.

The vulnerability of the FortiDDoS-F software-defined security platform and the FortiADC application delivery controller lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or perform arbitrary...

6.7CVSS7.1AI score0.00244EPSS
SaveExploits0References3Affected Software2
Openbugbounty
Openbugbounty
added 2023/11/29 10:39 p.m.8 views

f-faro.com Improper Access Control vulnerability OBB-3798557

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/11/29 10:39 p.m.21 views

f-momiji.com Improper Access Control vulnerability OBB-3798558

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Rows per page
Query Builder