Lucene search
+L

809 matches found

Broadcom
Broadcom
added 2023/11/07 12:00 a.m.17 views

NULL Pointer Exception bug that can be used by a remote attacker

handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. Products Confirmed Not Affected Brocade Fabri...

6.5CVSS7AI score0.5346EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/09/16 12:00 a.m.23 views

PT-2023-26262 · Unknown · Revive Adserver

Name of the Vulnerable Software and Affected Versions: Revive Adserver versions 5.4.1 and earlier Description: A reflected XSS vulnerability exists. This issue may allow attackers to inject malicious scripts into websites, potentially leading to unauthorized access or control of user sessions...

6.1CVSS6AI score0.02068EPSS
SaveExploits1References5
Microsoft CVE
Microsoft CVE
added 2023/08/31 7:00 a.m.10 views

Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability.

...

7.5CVSS7.6AI score0.01751EPSS
SaveExploits0
PyPA
PyPA
added 2023/08/30 6:15 p.m.11 views

PYSEC-2023-159

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

8.3CVSS6.8AI score0.00683EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/08/29 9:15 p.m.12 views

CVE-2023-32241

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin = 5.4.8 versions...

6.1CVSS7.3AI score0.00374EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/08/27 12:00 a.m.20 views

PT-2023-6289 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.5.4 Description: The issue is related to a use-after-free error in the ext4 file system driver of the Linux kernel, specifically in the fs/ext4/extents status.c file, related to the ext4 es insert extent...

8.8CVSS7AI score0.09141EPSS
SaveExploits3References63
SUSE CVE
SUSE CVE
added 2023/08/24 2:26 a.m.9 views

SUSE CVE-2022-28069

A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...

7.5CVSS7.5AI score0.00898EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/08/24 2:26 a.m.7 views

SUSE CVE-2022-28070

A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...

7.5CVSS7AI score0.00921EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2023/08/22 7:16 p.m.5 views

CVE-2022-28073

A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...

7.5CVSS5.8AI score0.00921EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/22 7:16 p.m.9 views

UBUNTU-CVE-2022-28070

A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...

7.5CVSS5.8AI score0.00921EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/08/22 12:00 a.m.18 views

radare2 缓冲区错误漏洞

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a heap buffer overflow in the vaxopfunction method...

7.5CVSS7.5AI score0.00898EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/22 12:00 a.m.13 views

radare2 资源管理错误漏洞

radare2 is a set of libraries and tools for working with binaries. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a post-release reuse issue in the rregsetvalue method...

7.5CVSS7.2AI score0.00921EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/11 3:15 a.m.13 views

CVE-2023-28711

Insufficient control flow management in the Hyperscan Library maintained by IntelR before version 5.4.1 may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS5.8AI score0.00171EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/08 10:15 a.m.12 views

CVE-2023-37372

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.4. The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database...

9.8CVSS6.1AI score0.00936EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/08/08 12:00 a.m.9 views

PT-2023-21920 · Unknown · Hyperscan Library

Name of the Vulnerable Software and Affected Versions: Hyperscan Library versions prior to 5.4.1 Description: Insufficient control flow management in the Hyperscan Library may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions prior...

5.5CVSS6.6AI score0.00171EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/07/27 12:00 a.m.32 views

WordPress Plugin WpStream – Live Streaming, Video on Demand, Pay Per View 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WpStream -...

8.8CVSS7.8AI score0.0025EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.24 views

Jenkins Plugin Datadog 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.5AI score0.00834EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/07/02 2:49 a.m.9 views

SUSE CVE-2013-2110

Heap-based buffer overflow in the phpquotprintencode function in ext/standard/quotprint.c in PHP before 5.3.26 and 5.4.x before 5.4.16 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted argument to the quotedprintableenco...

5CVSS8AI score0.06748EPSS
SaveExploits1References4
OSV
OSV
added 2023/06/26 7:15 p.m.19 views

CVE-2020-23065

Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacker to execute arbitrary code via the video-js.swf...

5.4CVSS6.1AI score0.00492EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/26 6:15 a.m.9 views

CVE-2023-28992

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin = 5.4.3 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
Rows per page
Query Builder