Lucene search
+L

5 matches found

CVE
CVE
•added 2026/09/12 12:08 p.m.•27 views

CVE-2026-90547

WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains an authorization flaw in the Bookmark plugin 's getBookmarks.json.php endpoint. The endpoint fails to validate user permissions, allowing unauthenticated attackers to query it with a video ID parameter and retrieve cha...

6.9CVSS5.8AI score0.00413EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/08 10:15 a.m.•10 views

CVE-2021-20043

A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

8.8CVSS8.5AI score0.23259EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/08 12:00 a.m.•8 views

CVE-2021-20043: Heap-based Buffer Overflow

A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

8.8CVSS6.4AI score0.23259EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/08 12:00 a.m.•7 views

PT-2021-13739

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 versions affected versions not specified SonicWall SMA200 affected versions not specified SonicWall SMA210 affected versions not specified SonicWall SMA400 affected versions not specified SonicWall SMA410 affected versions no...

8.8CVSS0.23259EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/12/07 12:00 a.m.•18 views

Sonicwall SMA100 buffer error vulnerability

The Sonicwall SMA100 is a secure access gateway device from Sonicwall USA. A security vulnerability exists in the SonicWall SMA100 getBookmarks method that allows a remote authenticated attacker to execute code as the nobody user in the device. The vulnerability affects SMA 200, 210, 400, 410, an...

8.8CVSS8.8AI score0.23259EPSS
SaveExploits0References3
Rows per page
Query Builder