17642 matches found
CVE-2019-14152
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2019-14141
CVE-2019-14141 entry is rejected and not used; it does not represent an active vulnerability.
CVE-2019-14142
This CVE entry is rejected/not used per the initial description; it does not represent an active vulnerability entry.
CVE-2019-10599
CVE-2019-10599 entry is rejected/not used and does not represent an active vulnerability.
CVE-2018-13974
CVE-2018-13974 entry is rejected; not used and does not represent an active vulnerability.
CVE-2021-38413
CVE-2021-38413 concerns Fuji Electric Tellus Lite and V-Server Lite (V-Simulator) vulnerable to a stack-based buffer overflow in V-Simulator file parsing (X1/V9). ZDI advisories describe the flaw as improper validation of the length of user-supplied data before copying to a fixed-size stack buffe...
SEUR Oficial < 1.7.0 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Put the following payload in one of the plugin's settings: " Affected files:...
Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2021-101711)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft Corporation USA. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information.A remo...
Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Description XSS in Classification Store included panels like Collections, Groups, Key,... in the store Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web...
CVE-2020-8968
CVE-2020-8968 affects Parallels Remote Application Server (RAS). A local attacker can retrieve certain profile passwords in clear text by uploading a previously stored cyphered file, compromising confidentiality (and potentially integrity/availability of user data). Exploitation is local and requ...
CVE-2021-40852
TCMAN GIM is affected by an open redirect vulnerability. The issue allows an attacker to redirect user navigation to attacker-controlled pages, potentially enabling information disclosure. Connected sources confirm the flaw in TCMAN GIM’s handling of redirects, with CVE-2021-40852 documented acro...
CVE-2020-35215
CVE-2020-35215 affects Atomix v3.1.5. A malicious Atomix node querying distributed variable primitives can access the full lists of primitives that ONOS nodes use to share important state, causing information disclosure. The connected Red Hat, CNVD, CVE/CVE ecosystem entries corroborate an inform...