Lucene search
+L

1769 matches found

CNNVD
CNNVD
added 2025/03/03 12:00 a.m.8 views

WordPress plugin G Web Pro Store Locator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

7.1CVSS5.9AI score0.00357EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/06 2:17 a.m.8 views

CVE-2025-0543

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

8.5CVSS7.3AI score0.00148EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:14 a.m.14 views

CVE-2025-0542

Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a crafted ZIP archive in a globally...

7.8CVSS7.2AI score0.00166EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:58 p.m.9 views

CVE-2022-22996

The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the system user...

7.8CVSS7.7AI score0.00312EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/25 5:15 p.m.23 views

CVE-2025-0542

Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a crafted ZIP archive in a globally...

7.8CVSS0.00166EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/25 5:15 p.m.13 views

CVE-2025-0543

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

8.5CVSS0.00148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/25 4:17 p.m.4 views

CVE-2025-0543 G DATA Security Client Local privilege escalation

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

8.5CVSS8AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/25 4:17 p.m.73 views

CVE-2025-0543

CVE-2025-0543 describes a local privilege escalation in the G DATA Security Client caused by incorrect assignment of directory privileges. An unprivileged local attacker can escalate to SYSTEM by placing an arbitrary executable in a globally writable directory, which is then executed by the Setup...

8.5CVSS7.9AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/25 4:17 p.m.33 views

CVE-2025-0543 G DATA Security Client Local privilege escalation

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

8.5CVSS0.00148EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/25 4:15 p.m.336 views

CVE-2025-0542

CVE-2025-0542 affects G DATA Management Server. The issue is an incorrect assignment of privileges for temporary files in the update mechanism, enabling a local, unprivileged attacker to escalate privileges by placing a crafted ZIP archive in a globally writable directory, which is unpacked in th...

7.8CVSS7.8AI score0.00166EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/25 4:15 p.m.36 views

CVE-2025-0542 G DATA Management Server Local privilege escalation

Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a crafted ZIP archive in a globally...

7.8CVSS0.00166EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/25 12:00 a.m.8 views

G DATA Security Client 安全漏洞

G DATA Security Client is an antivirus software security client from G DATA. A security vulnerability exists in G DATA Security Client that stems from an incorrect assignment of directory permissions, resulting in local elevation of privileges...

8.5CVSS6.6AI score0.00148EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/25 12:00 a.m.15 views

G DATA Management Server 安全漏洞

G DATA Management Server is a management tool for G DATA Business Solutions from G DATA Corporation. A security vulnerability exists in G DATA Management Server that stems from an incorrect assignment of permissions to temporary files in the update mechanism, resulting in a local elevation of...

7.8CVSS6.7AI score0.00166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.18 views

PT-2025-3948 · G Data · G Data Security Client

Name of the Vulnerable Software and Affected Versions: G DATA Security Client versions are not explicitly specified in the provided descriptions. Description: The issue is related to incorrect assignment of privileges to directories in G DATA Security Client, allowing a local, unprivileged attack...

8.5CVSS7.3AI score0.00148EPSS
SaveExploits0References8
NVD
NVD
added 2025/01/22 3:15 p.m.13 views

CVE-2025-23709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kiroro Formatted post formatted-post allows Reflected XSS.This issue affects Formatted post: from n/a through = 1.01...

7.1CVSS0.00373EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/22 2:32 p.m.43 views

CVE-2025-23709 WordPress Formatted post plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kiroro Formatted post formatted-post allows Reflected XSS.This issue affects Formatted post: from n/a through = 1.01...

7.1CVSS0.00373EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/22 2:32 p.m.10 views

CVE-2025-23709 WordPress Formatted post plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kiro G. Formatted post allows Reflected XSS. This issue affects Formatted post: from n/a through 1.01...

7.1CVSS6.9AI score0.00373EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/22 12:00 a.m.10 views

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation of 5G Core and Epc in C, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which can be exploited to cause a denial of service by an attacker who sends an "S1SETUP request" message missing the...

8.6CVSS6.6AI score0.0078EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/01/21 12:00 a.m.8 views

PT-2025-2385

Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF oai-cn5g-amf versions up to v2.0.0 Description: A stack overflow in the sctp server::sctp receiver thread component allows attackers to cause a Denial of Service DoS by repeatedly establishing SCTP connections with t...

7.5CVSS5.9AI score0.00912EPSS
SaveExploits0References6
OSV
OSV
added 2025/01/14 10:15 p.m.10 views

CVE-2024-57482

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST reques...

9.8CVSS6.4AI score0.00753EPSS
SaveExploits0References2
Rows per page
Query Builder