Lucene search
+L

701 matches found

CNNVD
CNNVD
added 2022/12/09 12:00 a.m.59 views

Akeneo PIM Development Repository 代码注入漏洞

Akeneo PIM Development Repository is an Akeneo open source repository . It is used to develop Akeneo PIM products. A code injection vulnerability exists in Akeneo PIM Development Repository versions prior to v5.0.119 and v6.0.53, which originates from a code injection vulnerability that could all...

8.8CVSS8.5AI score0.01406EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/12/08 12:00 a.m.5 views

PT-2022-35966 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns an invalid length check when fetching device IDs. This problem was introduced in version v5.3 and is fixed in Linux Kernel version v6.0.10. The actual impact and attack...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/08 12:00 a.m.4 views

PT-2022-36395 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: The issue concerns an invalid length check when fetching device IDs. This problem was introduced in version v5.3 and is fixed in Linux Kernel version v5.4.225. The actual impact and attack...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/30 12:00 a.m.11 views

PT-2022-24575 · Zkteco · Zkteco Biotime

Name of the Vulnerable Software and Affected Versions: Zkteco BioTime versions prior to 8.5.3 Build:20200816.447 Description: The issue is related to Incorrect Access Control, allowing an authenticated administrator to exploit XSS in a pdf generator when exporting data as a PDF, potentially...

6.2CVSS5.9AI score0.00639EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/11/11 12:00 a.m.11 views

PT-2022-23627 · Intel · Intel Nuc 10 Performance Mini Pcs +1

Name of the Vulnerable Software and Affected Versions: IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs versions prior to FNCML357.0053 Description: The issue is related to improper access control in BIOS firmware, which may allow a privileged user to enable escalation of...

7.8CVSS7.5AI score0.00172EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/11/08 12:00 a.m.8 views

EyesOfNetwork 跨站脚本漏洞

EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. A cross-site scripting vulnerability exists i...

6.1CVSS5.9AI score0.00397EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/11/08 12:00 a.m.9 views

EyesOfNetwork 跨站脚本漏洞

EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. A cross-site scripting vulnerability exists i...

4.8CVSS4.9AI score0.00384EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/26 7:15 p.m.11 views

AZL-11350 CVE-2022-3474 affecting package bazel for versions less than 5.3.2-1

A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3...

4.3CVSS5.8AI score0.00315EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/10/11 12:00 a.m.14 views

GNU oSIP 输入验证错误漏洞

GNU oSIP is the GNU Foundation's free software library for VoIP applications that implement lower-level session-initiation protocols. The library contains the minimum code base required for any SIP application and provides enough flexibility to implement any SIP extension or behavior. A security...

6.5CVSS6.4AI score0.00574EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/29 12:00 a.m.9 views

IBM Rational Change 跨站脚本漏洞

IBM Rational Change is a software tool from IBM Corporation, USA. provides software configuration management functionality for all artifacts related to software development, including source code, documentation and images, as well as final build software executables and libraries. A cross-site...

6.1CVSS6.2AI score0.00931EPSS
SaveExploits0References3
OSV
OSV
added 2022/09/28 9:15 p.m.12 views

CVE-2022-34424

Networking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could allow an attacker to cause a system crash by running particular security scans...

7.5CVSS5.8AI score0.0067EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/09/28 12:00 a.m.10 views

Dell SmartFabric OS10 缓冲区错误漏洞

Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell, USA. A security vulnerability exists in Dell SmartFabric OS10 versions 10.5.1.x, 10.5.2.x, and 10.5.3.x. The vulnerability stems from the fact that an attacker can cause a system crash by running a specific security...

7.5CVSS7.4AI score0.0067EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/27 12:00 a.m.12 views

EyesOfNetwork 安全漏洞

EyesOfNetwork EON is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides business process configuration tools, generates pop-up windows when events occur in the active queue, and other features.EyesOfNetwork EON 5.3.11 and earlier versions have a...

9.8CVSS6.5AI score0.00883EPSS
SaveExploits0References2
Circl
Circl
added 2022/09/26 8:22 p.m.12 views

CVE-2022-3053

creationtimestamp| type| source ---|---|--- 2022-09-26 20:22:54+00:00| seen| https://t.me/cibsecurity/50507...

4.3CVSS5.3AI score0.00553EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/23 4:15 p.m.12 views

CVE-2022-38134

Authenticated subscriber+ Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin = 5.3.5 at WordPress...

8.8CVSS5.8AI score0.00861EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/09/06 6:15 p.m.9 views

CVE-2022-2433

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'almrepeatersexport' parameter in versions up to, and including 5.5.3. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they...

8.8CVSS5.9AI score0.01709EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/09/06 12:00 a.m.15 views

PT-2022-19603 · WordPress · Wordpress Infinite Scroll – Ajax Load More

Name of the Vulnerable Software and Affected Versions: WordPress Infinite Scroll – Ajax Load More plugin versions up to, and including, 5.5.3 Description: The issue allows authenticated attackers with administrative privileges to download arbitrary files hosted on the server due to insufficient...

4.9CVSS5AI score0.01656EPSS
SaveExploits2References8
Circl
Circl
added 2022/08/29 10:34 p.m.12 views

CVE-2022-2537

creationtimestamp| type| source ---|---|--- 2022-08-29 22:34:19+00:00| seen| https://t.me/cibsecurity/48996...

6.1CVSS6.3AI score0.00651EPSS
SaveExploits2References1
Circl
Circl
added 2022/08/24 4:27 p.m.12 views

CVE-2022-37153

creationtimestamp| type| source ---|---|--- 2022-08-24 16:27:36+00:00| seen| https://t.me/cibsecurity/48640 2022-08-25 15:01:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6670 2025-09-17 21:02:39+00:00| seen|...

6.1CVSS6.1AI score0.01647EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/08/15 12:00 a.m.11 views

Eyes of Network Web 跨站请求伪造漏洞

Eyes of Network Web is a global regulatory solution for hardware status of devices, operating systems, standard applications, business applications and performance from the Eyes of Network Web community. A security vulnerability exists in Eyes of Network Web version 5.3, which stems from a lack o...

8.8CVSS7.7AI score0.00481EPSS
SaveExploits1References3
Rows per page
Query Builder