Lucene search
+L

4512 matches found

CNNVD
CNNVD
added 2020/12/16 12:0 a.m.8 views

Sprymedia Datatables Input Validation Error Vulnerability

Sprymedia Datatables is a Javascript-based plug-in from Sprymedia UK that supports efficient data presentation on Html pages. A security vulnerability exists in Sprymedia Datatables that stems from the fact that all versions of the package datatables.net are susceptible to prototype contamination...

7.5CVSS6.7AI score0.0367EPSS
SaveExploits2References12
CNVD
CNVD
added 2020/12/15 12:0 a.m.7 views

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2021-25963)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

5.5CVSS7.3AI score0.01172EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.10 views

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 84, whereby when a user types a URL into the address bar or search bar and quickly presses the enter key, the website sometimes...

6.1CVSS6.9AI score0.00717EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.9 views

Tidwall Gjson Input Validation Error Vulnerability

Tidwall Gjson is a Go-based codebase for interacting with data in json format by Tidwall's individual developers. An input validation error vulnerability exists in GJSON before version 1.6.4. The vulnerability stems from a network system or product that does not properly validate input data, and...

7.5CVSS7.1AI score0.01662EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.9 views

Weseek GROWI 输入验证错误漏洞

GROWI is a team collaboration software. WESEEK GROWI suffers from an input validation error vulnerability that can be exploited by remote attackers to cause a denial of service...

7.5CVSS6.6AI score0.0196EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2020/12/14 12:0 a.m.7 views

Liftoff GateOne 输入验证错误漏洞

Liftoff GateOne is a terminal emulator and SSH client based on an HTML5 implementation. An arbitrary command execution vulnerability exists in Liftoff GateOne. A remote attacker can exploit this vulnerability to execute arbitrary commands via shell metacharacters in the port field when attempting...

9.8CVSS7.7AI score0.02652EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2020/12/14 12:0 a.m.7 views

GNOME Glib Input Validation Error Vulnerability

GNOME GLib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. An input validation error vulnerability exists in GNOME GLib versions prior to 2.65.3, which stems from an integer overflow, which could result...

7.8CVSS7.1AI score0.00567EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2020/12/14 12:0 a.m.11 views

P11-glue P11-kit Input Validation Error Vulnerability

P11-glue P11-kit is a utility software for loading and enumerating PKCS modules by the individual developer of P11-glue. An input validation error vulnerability exists in P11-glue P11-kit versions 0.21.1 through 0.23.21. No information about this vulnerability is available at this time, so stay...

7.5CVSS6.9AI score0.0335EPSS
SaveExploits0References38
CNVD
CNVD
added 2020/12/11 12:0 a.m.9 views

Schneider Electric EcoStruxure Control Expert Input Validation Error Vulnerability

Schneider Electric EcoStruxure Control Expert formerly Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A security vulnerability exists in Schneider Electric EcoStruxure Control Expert that arises from a failure to...

8.6CVSS7.3AI score0.01387EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/12/10 12:0 a.m.11 views

apt input validation error vulnerability

apt is a command-line package manager from the Debian Project Collaboration that provides search, management, and query package information functionality. APT suffers from an input validation error vulnerability that stems from APT incorrectly processing certain software packages. A local attacke...

5.7CVSS6.2AI score0.00377EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2020/12/10 12:0 a.m.12 views

Soliton Systems Kk FileZen Path Traversal Vulnerability

Soliton Systems Kk FileZen is a file hosting device from Soliton Systems Kk, Japan. The device features file storage, file transfer, file upload and download. A security vulnerability exists in Soliton Systems FileZen that originates from an input validation error when processing a directory...

10CVSS7.2AI score0.05009EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2020/12/10 12:0 a.m.10 views

Cisco Jabber Input Validation Error Vulnerability

Cisco Jabber is the United States Cisco Cisco company's set of unified communications client solutions. The solution provides online status display, instant messaging, voice, and other features. Cisco Jabber suffers from an Input Validation Error vulnerability, which is caused by the software...

9.9CVSS7.5AI score0.0143EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2020/12/10 12:0 a.m.9 views

JasPer jpc encoder input validation error vulnerability

JasPer is a C-based tool for image processing from the individual developer Michael Adams. The software supports the JPEG-2000 format as defined in ISO / IEC 15444-1 and is primarily used for image encoding and processing. A security vulnerability exists in jpc encoder prior to version 2.0.23 in...

7.8CVSS7AI score0.01371EPSS
SaveExploits1References14
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.7 views

Microsoft Edge Input Validation Error Vulnerability

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. An input validation error vulnerability exists in Microsoft Edge. The following products and versions are affected:Microsoft Edge for Android...

6.1CVSS5.8AI score0.02059EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.10 views

Contiki Input Validation Error Vulnerability

Contiki is an open source cross-platform operating system for IoT Internet of Things devices. Contiki 3.0 suffers from an input validation error vulnerability that stems from the DNS transaction ID not being randomized enough. If the DNS cache is very small four entries, this can facilitate a DNS...

8.3CVSS7.2AI score0.03145EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.12 views

Contiki-NG 输入验证错误漏洞

Contiki is an open source, highly portable, networked multitasking operating system for memory-constrained systems. An infinite loop vulnerability exists in the processing of IPv6 extended headers in exthdroptionsprocess in net/ipv6/uip6.c in the uIP TCP/IP stack component in Contiki 3.0 and...

7.5CVSS7.1AI score0.01678EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.8 views

ImageMagick Studio ImageMagick 输入验证错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

5.5CVSS6.8AI score0.01172EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.12 views

picoTCP Input Validation Error Vulnerability

Altran EESY Belgium Picotcp is a software from the Altran EESY Belgium community that provides TCP/IP protocol support for real-time systems. An input validation error vulnerability exists in picoTCP version 1.7.0, which arises from a network system or product that does not properly validate...

7.5CVSS7.1AI score0.02798EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.10 views

SAP Solution Manager 输入验证错误漏洞

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

6.1CVSS6.1AI score0.02338EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.9 views

Microsoft Azure DevOps Server 输入验证错误漏洞

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as sharing code, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. No details of the...

6.4CVSS6.6AI score0.01234EPSS
SaveExploits0References3
Rows per page
Query Builder