Lucene search
+L

1510 matches found

OSV
OSV
added 2023/10/30 7:15 p.m.6 views

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

9.8CVSS5.8AI score0.00719EPSS
SaveExploits1References2
NVD
NVD
added 2023/10/30 7:15 p.m.37 views

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

9.8CVSS7.8AI score0.00719EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/10/30 7:15 p.m.5 views

CVE-2023-47104

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

9.8CVSS5.8AI score0.00719EPSS
SaveExploits2References3
OSV
OSV
added 2023/10/30 7:15 p.m.5 views

CVE-2020-36767

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

7.5CVSS5.8AI score0.00439EPSS
SaveExploits1References1
Prion
Prion
added 2023/10/30 7:15 p.m.29 views

Design/Logic Flaw

tinyfiledialogs aka tiny file dialogs before 3.15.0 allows shell metacharacters such as a backquote or a dollar sign in titles, messages, and other input data. NOTE: this issue exists because of an incomplete fix for CVE-2020-36767, which only considered single and double quote characters...

7.5CVSS8.2AI score0.00719EPSS
SaveExploits2References2Affected Software1
Prion
Prion
added 2023/10/30 7:15 p.m.17 views

Input validation

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

5CVSS8.6AI score0.00439EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/30 12:0 a.m.10 views

PT-2023-11904 · Unknown · Tinyfiledialogs

Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.8.0 Description: The issue allows shell metacharacters in titles, messages, and other input data. Recommendations: For versions prior to 3.8.0, update to version 3.8.0 or later to resolve the issue...

7.5CVSS7.2AI score0.00439EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2023/10/30 12:0 a.m.34 views

CVE-2020-36767

tinyfiledialogs aka tiny file dialogs before 3.8.0 allows shell metacharacters in titles, messages, and other input data...

8AI score0.00439EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/10/30 12:0 a.m.5 views

PT-2023-30311 · Unknown · Tinyfiledialogs

Name of the Vulnerable Software and Affected Versions: tinyfiledialogs versions prior to 3.15.0 Description: The issue allows shell metacharacters, such as a backquote or a dollar sign, in titles, messages, and other input data. This problem exists due to an incomplete fix for a previous issue,...

9.8CVSS7.2AI score0.00719EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2023/10/23 12:0 a.m.10 views

The vulnerability of the Oracle Database Recovery Manager component of the Oracle Database Server database management system allows a perpetrator to trigger a service failure.

The vulnerability of the Oracle Database Recovery Manager component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

6.8CVSS5.6AI score0.0058EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.12 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to errors in processing input data, allows a perpetrator to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.3CVSS7.1AI score0.00782EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.12 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to errors in processing input data, allows a perpetrator to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.3CVSS7.1AI score0.00782EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.9 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to errors in processing input data, allows a perpetrator to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.3CVSS7.3AI score0.00782EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/21 12:0 a.m.11 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to errors in processing input data, allows a perpetrator to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.3CVSS7.3AI score0.00782EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.7 views

The vulnerability of the DirectMusic component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectMusic component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00955EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.10 views

The vulnerability of the Packet Forwarding Engine (PFE) module in Junos OS and Junos OS Evolved operating systems allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Junos OS and Junos OS Evolved operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.5CVSS7.1AI score0.00515EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/13 12:0 a.m.8 views

The vulnerability of the Windows Message Queuing system allows a hacker to execute arbitrary code.

The vulnerability of Windows’ Message Queuing system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS7.6AI score0.00967EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/13 12:0 a.m.9 views

The vulnerability of the Windows Message Queuing system allows a hacker to execute arbitrary code.

The vulnerability of Windows’ Message Queuing system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS7.6AI score0.00967EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/13 12:0 a.m.8 views

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, allows a intruder to execute arbitrary commands.

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, is related to insufficient cleaning of input data during the processing of dtb format files. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

9CVSS7.9AI score0.01265EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/13 12:0 a.m.8 views

The vulnerability of the Windows Message Queuing system allows a perpetrator to cause a service failure.

The vulnerability of Windows’ Message Queuing system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.3AI score0.02395EPSS
SaveExploits0References3
Rows per page
Query Builder