Lucene search
K

12 matches found

OSV
OSV
added 2024/06/27 2:15 p.m.2 views

CVE-2024-39158

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...

8.8CVSS5.8AI score0.00296EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/06/27 12:0 a.m.2 views

idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which originates from the component /admin/userSysdeal.php?mudi=infoSet...

8.8CVSS6.8AI score0.00296EPSS
Exploits1References2
NVD
NVD
added 2024/05/22 2:15 p.m.9 views

CVE-2024-35556

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...

8.8CVSS7.1AI score0.00295EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/05/16 12:0 a.m.4 views

PT-2024-26271 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms via the component admin/sysImages deal.php?mudi=infoSet. This allows for unauthorized actions to be performed on behalf of a user...

5.4CVSS6.7AI score0.00188EPSS
Exploits3References7
OpenVAS
OpenVAS
added 2024/03/08 12:0 a.m.16 views

Fedora: Security Advisory for jaxb-fi (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02557EPSS
Exploits3References2
Fedora
Fedora
added 2024/03/07 10:33 p.m.15 views

[SECURITY] Fedora 40 Update: xmlstreambuffer-2.1.0-5.fc40

Stream based representation for XML infoset...

8.8CVSS7AI score0.02557EPSS
Exploits3
Fedora
Fedora
added 2024/03/07 10:33 p.m.35 views

[SECURITY] Fedora 40 Update: jaxb-stax-ex-2.1.0-8.fc40

This project contains a few extensions to complement JSR-173 StAX API in the following areas: - Enable parser instance reuse which is important in the high-performance environment like Eclipse Implementation of JAXB and Eclipse Metro - Improve the support for reading from non-text XML infoset, su...

8.8CVSS6.8AI score0.02557EPSS
Exploits3
Fedora
Fedora
added 2024/03/07 10:33 p.m.18 views

[SECURITY] Fedora 40 Update: jaxb-fi-2.1.1-5.fc40

Fast Infoset Project, an Open Source implementation of the Fast Infoset Standard for Binary XML. The Fast Infoset specification ITU-T Rec. X.891 | ISO/IEC 24824-1 describes an open, standards-based "binary XML" format that is based on the XML Information Set...

8.8CVSS6.9AI score0.02557EPSS
Exploits3
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.1 views

The vulnerability of the enterprise automation system 1C:Enterprise allows a malicious individual to trigger service failures or execute arbitrary codes.

The automation system of the enterprise 1C:Enterprise contains a vulnerability in the Fast Infoset decoder of the XML document handling library xml2.dll. A malicious individual, by manipulating input data, can set the Fast Infoset decoder to the CIIUTF8LARGELENGTH state for processing a single...

9.3CVSS5.8AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.3 views

The vulnerability of the enterprise automation system 1C:Enterprise, which allows a malicious individual to cause service failures

The 1C:Enterprise system contains a vulnerability in the Fast Infoset decoder of the xml2.dll library, which is used for working with XML documents. A malicious individual can manipulate input data, causing the Fast Infoset decoder to become in the EIIINDEXLARG state. This allows them to send an...

7.8CVSS5.5AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.5 views

The vulnerability of the enterprise automation system 1C:Enterprise, which allows a malicious individual to cause service failures

The 1C:Enterprise system contains a vulnerability in the Fast Infoset decoder of the xml2.dll library, which is used for working with XML documents. A malicious individual can manipulate input data, causing the Fast Infoset decoder to become in the EIIINDEXMEDIUM state. This allows them to send a...

7.8CVSS5.5AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.4 views

The vulnerability of the enterprise automation system 1C:Enterprise, which allows a malicious individual to cause service failures

The automation system of the enterprise 1C:Enterprise contains a vulnerability in the Fast Infoset decoder library for working with XML documents xml2.dll. A malicious individual, by manipulating input data, can set the Fast Infoset decoder to the DOCUMENTCHARACTERENCODINGSCHEME state processing...

7.8CVSS5.5AI score
Exploits0Affected Software1
Rows per page
Query Builder