Lucene search
+L

4517 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/09/12 12:00 a.m.•49 views

Microsoft 3D Builder PLY File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

5.3CVSS6.3AI score0.00682EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/09/11 12:00 a.m.•23 views

WordPress plugin tagDiv Composer cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

4.8CVSS6.1AI score0.0044EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2023/09/06 4:59 p.m.•94 views

CVE-2023-20250

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...

6.5CVSS7.4AI score0.0095EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/09/06 3:11 a.m.•54 views

CVE-2023-30712

Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity...

6.8CVSS7.8AI score0.00188EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/09/05 7:13 p.m.•32 views

CVE-2020-10128 SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript...

5.3AI score0.00488EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/05 7:15 a.m.•33 views

CVE-2022-40534

Memory corruption due to improper validation of array index in Audio...

8.4CVSS8.6AI score0.00116EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/05 7:15 a.m.•36 views

CVE-2022-33275

Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...

8.4CVSS8.6AI score0.00116EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/05 7:15 a.m.•32 views

Memory corruption

Memory Corruption due to improper validation of array index in Linux while updating adn record...

4.3CVSS7.5AI score0.00115EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/05 7:15 a.m.•52 views

Memory corruption

Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...

4.3CVSS7.8AI score0.00116EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/09/05 6:24 a.m.•54 views

CVE-2023-28573 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while parsing WMI command parameters...

7.8CVSS8.1AI score0.00116EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/09/05 6:24 a.m.•18 views

CVE-2023-28565 Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command streams through WMI interfaces...

7.8CVSS8AI score0.00116EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/09/05 6:23 a.m.•10 views

CVE-2022-40534 Improper Validation of Array Index in Audio

Memory corruption due to improper validation of array index in Audio...

8.4CVSS8.6AI score0.00116EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/05 12:00 a.m.•6 views

CVE-2023-28548: Improper Validation of Array Index

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART...

7.8CVSS7.5AI score0.00116EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/05 12:00 a.m.•4 views

CVE-2022-40534: Improper Validation of Array Index

Memory corruption due to improper validation of array index in Audio...

8.4CVSS7.5AI score0.00116EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/05 12:00 a.m.•3 views

CVE-2023-28567: Improper Validation of Array Index

Memory corruption in WLAN HAL while handling command through WMI interfaces...

7.8CVSS7.5AI score0.00116EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/05 12:00 a.m.•5 views

CVE-2023-28557: Improper Validation of Array Index

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload...

7.8CVSS7.5AI score0.00116EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/05 12:00 a.m.•4 views

CVE-2023-21636: Improper Validation of Array Index

Memory Corruption due to improper validation of array index in Linux while updating adn record...

7.8CVSS7.3AI score0.00115EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/01 12:00 a.m.•4 views

CVE-2022-22305: Improper Validation of Certificate with Host Mismatch

An improper certificate validation vulnerability CWE-295 in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle th...

5.4CVSS5.6AI score0.00479EPSS
SaveExploits0References3
NVD
NVD
•added 2023/08/31 6:15 a.m.•24 views

CVE-2023-2173

The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to improper validation and authorization checks within the badgeosdeletestepajaxhandler, badgeosdeleteawardstepajaxhandler, badgeosdeletedeductstepajaxhandler,...

6.5CVSS6.3AI score0.00515EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/08/31 12:00 a.m.•22 views

Acronis Agent authorization issue vulnerability

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that stems from improper token expiration validation leading to the disclosure of sensitive information...

6.3CVSS6.4AI score0.00142EPSS
SaveExploits0References2
Rows per page
Query Builder