CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

18566 matches found

VulnCheck KEV•added 2024/01/04 12:00 a.m.•13 views

VulnCheck KEV: CVE-2018-15517

The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an index.php/System/MailConnect/host/127.0.0.1/port/22/secure/ U...

8.6CVSS7.2AI score0.44101EPSS

SaveIn wildExploits3References261

vulnersOsv•added 2024/01/03 10:04 p.m.•1 views

org.infinispan:infinispan-distribution (>=14.0.23.final, <=14.0.35.final), org.infinispan:infinispan-feature-pack (>=14.0.23.final, <=14.0.35.final) potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.0.3)

software.amazon.ion:ion-java MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - org.infinispan:infinispan-distribution =14.0.23.final, =14.0.23.final, =14.0.35.final Source cves:...

7.5CVSS7.4AI score0.00827EPSS

SaveExploits0

Vulnrichment•added 2024/01/03 5:01 p.m.•5 views

CVE-2023-6004 Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter...

4.8CVSS6.1AI score0.00449EPSS

SaveExploits0References5

Tenable Nessus•added 2024/01/03 12:00 a.m.•38 views

GitLab 11.9 < 13.11.6 / 13.12 < 13.12.6 / 14.0 < 14.0.2 (CVE-2021-22223)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link...

6.1CVSS6.4AI score0.01018EPSS

SaveExploits0References4

Tenable Nessus•added 2024/01/03 12:00 a.m.•30 views

GitLab 12.10 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39932)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Usin...

4.3CVSS5.2AI score0.00889EPSS

SaveExploits0References3

osv_debian•added 2024/01/02 10:15 a.m.•13 views

DEBIAN-CVE-2023-6693

A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...

5.3CVSS6.7AI score0.0033EPSS

SaveExploits0References1

osv_ubuntu•added 2024/01/02 10:15 a.m.•21 views

UBUNTU-CVE-2023-6693

5.3CVSS7.1AI score0.0033EPSS

SaveExploits0References5

Positive Technologies•added 2024/01/01 12:00 a.m.•23 views

PT-2024-14054

Name of the Vulnerable Software and Affected Versions FLIR AX8 thermal sensor cameras up to and including 1.46.16 Description The issue is related to Directory Traversal due to improper access restriction, allowing an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by...

7.5CVSS7.6AI score0.01254EPSS

SaveExploits1References7

CNNVD•added 2023/12/31 12:00 a.m.•20 views

Tecno Camon Security Breach

The Tecno Camon is a Camon series smartphone from China-based Transocean. A security vulnerability exists in Tecno Camon X CA7 Gallery3d, which originates from a vulnerability that allows attackers to bypass the Gallary3D hidden image feature in TECNO Camon X. The vulnerability is caused due to t...

2.1CVSS6.7AI score0.00281EPSS

SaveExploits1References3

vulnersOsv•added 2023/12/30 12:30 a.m.•2 views

org.infinispan.server:infinispan-server-feature-pack (9.1.0.alpha1), org.infinispan:infinispan-distribution (9.1.0.alpha1) +1 more potentially affected by CVE-2023-3629 via org.infinispan:infinispan-server-rest (9.1.0.alpha1)

org.infinispan:infinispan-server-rest MAVEN version 9.1.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.1.0.alpha1 -...

6.5CVSS0.00721EPSS

SaveExploits0

vulnersOsv•added 2023/12/30 12:30 a.m.•2 views

org.infinispan.server:infinispan-server-feature-pack (9.1.0.final), org.infinispan:infinispan-distribution (9.1.0.final) +1 more potentially affected by CVE-2023-3629 via org.infinispan:infinispan-server-rest (9.1.0.final)

org.infinispan:infinispan-server-rest MAVEN version 9.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.1.0.final -...

6.5CVSS0.00721EPSS

SaveExploits0