Lucene search
K

4504 matches found

CNNVD
CNNVD
added 2021/04/15 12:0 a.m.3 views

Matrix Sydent 输入验证错误漏洞

Matrix Sydent is an implementation of the Matrix Authentication Server API from the Matrix.org Foundation in the UK. Sydent suffers from a security vulnerability that can be exploited by an attacker to send arbitrary e-mail from a Sydent e-mail address...

5.7CVSS6.1AI score0.00934EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.3 views

Juniper多款产品 输入验证错误漏洞

The Juniper Networks EX4300 and Juniper Networks EX4600 are both Juniper Networks products.The Juniper Networks EX4300 is a 4300 series enterprise switch.The Juniper Networks Juniper Networks EX4600 is a 4600 series enterprise switch. Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 Serie...

6.5CVSS6.6AI score0.00381EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.3 views

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS is vulnerable to an input validation error vulnerability, no details of the vulnerability are provided at this ti...

6.5CVSS5.6AI score0.00452EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.4 views

谷歌 Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 90.0.4430.72 in the "QR scanner". An attacker can exploit this vulnerability to bypass security restrictions...

6.5CVSS8.3AI score0.01398EPSS
Exploits0References16
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.4 views

Eaton Intelligent Power Manager 输入验证错误漏洞

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69,...

9.6CVSS6AI score0.01015EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.18 views

Microsoft Windows Console Driver 输入验证错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A denial of service vulnerability exists in the "console driver" in Microsoft Windows and Windows Server,...

5.5CVSS5.7AI score0.00648EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.3 views

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft. A security vulnerability exists in the Windows application compatibility cache. An attacker could exploit this vulnerability to cause a denial of service attack...

6.5CVSS5.7AI score0.02519EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.3 views

Windows Installer 输入验证错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA Microsoft Windows is an operating system for personal devices and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Windows Installer in Microsoft...

7.8CVSS5.7AI score0.03569EPSS
Exploits1References5
CNNVD
CNNVD
added 2021/04/13 12:0 a.m.7 views

Google Chrome 输入验证错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A remote code execution vulnerability exists in the Google V8 engine, which can be exploited by an attacker to execute arbitrary code...

8.8CVSS9.5AI score0.70435EPSS
Exploits6References14
CNVD
CNVD
added 2021/04/09 12:0 a.m.12 views

Exiv2 heap buffer overflow vulnerability (CNVD-2021-29115)

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. Exiv2 suffers from a heap buffer overflow vulnerability. The vulnerability stems from improper validation of input to the rawData.size property in Jp2Image::readMetadata in jp2image.cpp. An attacker could...

6.5CVSS7AI score0.02295EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/04/07 12:0 a.m.4 views

Cisco Small Business RV110W RV130W RV215W 输入验证错误漏洞

The Cisco RV110W, among others, is a router from the U.S. company Cisco. An input validation error vulnerability exists in the Cisco Small Business RV110W, RV130, RV130W, and RV215W that could allow an unauthenticated, remote attacker to execute arbitrary code on the affected devices...

10CVSS9.3AI score0.03023EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/07 12:0 a.m.5 views

Cisco SD-WAN vManage Software 输入验证错误漏洞

Cisco?SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A security vulnerability exists in Cisco?SD-WAN vManage Software that could be exploited by an unauthenticated, remote attacker to execute...

7.8CVSS6.2AI score0.0055EPSS
Exploits0References3
CNVD
CNVD
added 2021/04/06 12:0 a.m.7 views

nodejs input validation error vulnerability

nodejs is a JavaScript runtime environment based on the ChromeV8 engine through the Chromev8 engine for the packaging and the use of event-driven and non-blocking IO applications so that the development of high-performance Javascript background applications has become possible . Node.js netmask...

9.1CVSS6.5AI score0.16356EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/04/06 12:0 a.m.22 views

Aleksa Sarai umoci modifies Open Container images 输入验证错误漏洞

Aleksa Sarai umoci modifies Open Container images is an open source application from Aleksa Sarai, a reference implementation of the OCI image specification that provides users with the ability to create, manipulate, and interact with container images. A security vulnerability exists in Open...

5.5CVSS6.6AI score0.00344EPSS
Exploits0References8
CNNVD
CNNVD
added 2021/04/05 12:0 a.m.3 views

多款Qualcomm芯片输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from an input validation error...

8.4CVSS7.4AI score0.00162EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/05 12:0 a.m.5 views

WordPress 输入验证错误漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A security vulnerability exists in the...

6.1CVSS6.3AI score0.03066EPSS
Exploits2References3
CNNVD
CNNVD
added 2021/04/05 12:0 a.m.4 views

Google Android 输入验证错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Media Framework component of Google Android 8.1, 9, 10, and 11. No details of the vulnerability are provided a...

5.5CVSS5.6AI score0.00124EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/05 12:0 a.m.3 views

Qualcomm 芯片 输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. An input validation error vulnerability exists in...

8.4CVSS7.3AI score0.00202EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/05 12:0 a.m.14 views

HTMLDOC 输入验证错误漏洞

HTMLDOC is an HTML file format conversion editor that reads HTML and Markdown source files or web pages and generates the corresponding EPUB, HTML, PostScript or PDF files with optional table of contents. An integer overflow vulnerability exists in HTMLDOC 1.9.11 and earlier versions. An attacker...

9.8CVSS6.2AI score0.02477EPSS
Exploits1References6
CNNVD
CNNVD
added 2021/04/05 12:0 a.m.4 views

WordPress Ninja Forms Contact Form 输入验证错误漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on PHP and MySQL servers. An input validation error vulnerability exists in the Ninja Forms Contact Form WordPress plugin before 3.4.34, which...

6.1CVSS6.2AI score0.01643EPSS
Exploits2References3
Rows per page
Query Builder