Lucene search
K

4502 matches found

CNNVD
CNNVD
added 2020/12/21 12:0 a.m.2 views

Miniweb 输入验证错误漏洞

MiniWeb is an HTTP server-side software written in C, with less resource consumption, fast response, cross-platform and other advantages. A denial of service vulnerability exists in MiniWeb 0.8.19. A remote attacker can exploit this vulnerability by using the long name of the first parameter in a...

7.5CVSS7.2AI score0.0266EPSS
Exploits1References5
CNVD
CNVD
added 2020/12/18 12:0 a.m.6 views

Phoenix Contact PLCnext Control Devices Input Validation Error Vulnerability

Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact. An input validation error vulnerability exists in Phoenix Contact PLCnext Control Devices prior to version 2021.0 LTS, which stems from a specially designed LLDP packet tha...

6.5CVSS6.7AI score0.00454EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/18 12:0 a.m.4 views

Mitel Networks MiCollab 输入验证错误漏洞

Mitel MiCollab is an enterprise collaboration software and tools platform solution. An insufficient access control vulnerability exists in the online help portal in Mitel MiCollab versions prior to 9.2. An attacker could exploit the vulnerability by executing a malicious script to redirect users ...

6.1CVSS6.4AI score0.00806EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/18 12:0 a.m.2 views

MediaWiki 输入验证错误漏洞

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. An input validation error vulnerability exists in MediaWiki versions prior to...

5.3CVSS6.4AI score0.01512EPSS
Exploits1References10
CNNVD
CNNVD
added 2020/12/17 12:0 a.m.5 views

F5 BIG-IP APM 输入验证错误漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. An input validation error vulnerability exists in F5 BIG-IP APM, which can be exploited by an attacker to spoof a user and redirect them to a...

6.1CVSS6.3AI score0.00634EPSS
Exploits0References4
CNVD
CNVD
added 2020/12/17 12:0 a.m.4 views

WESEEK GROWI Input Validation Error Vulnerability

GROWI is a team collaboration software. WESEEK GROWI suffers from an input validation error vulnerability that can be exploited by remote attackers to cause a denial of service...

7.5CVSS6.8AI score0.0196EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/17 12:0 a.m.1 views

Smilegate STOVE Client Input Validation Error Vulnerability

Smilegate Stove is a gaming platform client software from the Korean company Smilegate. Smilegate STOVE Client 0.0.4.72 suffers from an Input Validation Error vulnerability that originates in a manner that incorrectly validates input values. An attacker could exploit this vulnerability to execute...

8.8CVSS7.7AI score0.01198EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/17 12:0 a.m.3 views

Bitdefender Hypervisor Introspection Input Validation Error Vulnerability

Bitdefender Hypervisor Introspection is a Hypervisor Introspection HVI security solution from Bitdefender Romania. It protects business-sensitive data before it is exposed by detecting and blocking cyberattacks in real-time. Bitdefender Hypervisor Introspection suffers from an Input Validation...

6.1CVSS6.1AI score0.00271EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/17 12:0 a.m.2 views

Bitdefender Hypervisor Introspection Input Validation Error Vulnerability

Bitdefender Hypervisor Introspection is a Hypervisor Introspection HVI security solution from Bitdefender Romania. It protects business-sensitive data before it is exposed by detecting and blocking cyberattacks in real-time. Bitdefender Hypervisor Introspection suffers from an input validation...

5.5CVSS6.1AI score0.00271EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/17 12:0 a.m.5 views

Phoenix Contact PLCnext Control Devices 输入验证错误漏洞

Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact. An input validation error vulnerability exists in Phoenix Contact PLCnext Control Devices prior to version 2021.0 LTS, which stems from a specially designed LLDP packet tha...

6.5CVSS6.6AI score0.00454EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/16 12:0 a.m.3 views

Sprymedia Datatables Input Validation Error Vulnerability

Sprymedia Datatables is a Javascript-based plug-in from Sprymedia UK that supports efficient data presentation on Html pages. A security vulnerability exists in Sprymedia Datatables that stems from the fact that all versions of the package datatables.net are susceptible to prototype contamination...

7.5CVSS6.7AI score0.0367EPSS
Exploits2References12
CNVD
CNVD
added 2020/12/15 12:0 a.m.5 views

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2021-25963)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

5.5CVSS7.3AI score0.01172EPSS
Exploits1References1
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.3 views

Tidwall Gjson Input Validation Error Vulnerability

Tidwall Gjson is a Go-based codebase for interacting with data in json format by Tidwall's individual developers. An input validation error vulnerability exists in GJSON before version 1.6.4. The vulnerability stems from a network system or product that does not properly validate input data, and...

7.5CVSS7.1AI score0.01662EPSS
Exploits1References2
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.4 views

Weseek GROWI 输入验证错误漏洞

GROWI is a team collaboration software. WESEEK GROWI suffers from an input validation error vulnerability that can be exploited by remote attackers to cause a denial of service...

7.5CVSS6.6AI score0.0196EPSS
Exploits0References5
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.5 views

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 84, whereby when a user types a URL into the address bar or search bar and quickly presses the enter key, the website sometimes...

6.1CVSS6.9AI score0.00717EPSS
Exploits1References6
CNNVD
CNNVD
added 2020/12/14 12:0 a.m.2 views

Liftoff GateOne 输入验证错误漏洞

Liftoff GateOne is a terminal emulator and SSH client based on an HTML5 implementation. An arbitrary command execution vulnerability exists in Liftoff GateOne. A remote attacker can exploit this vulnerability to execute arbitrary commands via shell metacharacters in the port field when attempting...

9.8CVSS7.7AI score0.02652EPSS
Exploits1References2
CNNVD
CNNVD
added 2020/12/14 12:0 a.m.6 views

P11-glue P11-kit Input Validation Error Vulnerability

P11-glue P11-kit is a utility software for loading and enumerating PKCS modules by the individual developer of P11-glue. An input validation error vulnerability exists in P11-glue P11-kit versions 0.21.1 through 0.23.21. No information about this vulnerability is available at this time, so stay...

7.5CVSS6.9AI score0.0335EPSS
Exploits0References38
CNNVD
CNNVD
added 2020/12/14 12:0 a.m.3 views

GNOME Glib Input Validation Error Vulnerability

GNOME GLib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. An input validation error vulnerability exists in GNOME GLib versions prior to 2.65.3, which stems from an integer overflow, which could result...

7.8CVSS7.1AI score0.00567EPSS
Exploits1References4
CNVD
CNVD
added 2020/12/11 12:0 a.m.7 views

Schneider Electric EcoStruxure Control Expert Input Validation Error Vulnerability

Schneider Electric EcoStruxure Control Expert formerly Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. A security vulnerability exists in Schneider Electric EcoStruxure Control Expert that arises from a failure to...

8.6CVSS7.3AI score0.01387EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/10 12:0 a.m.3 views

JasPer jpc encoder input validation error vulnerability

JasPer is a C-based tool for image processing from the individual developer Michael Adams. The software supports the JPEG-2000 format as defined in ISO / IEC 15444-1 and is primarily used for image encoding and processing. A security vulnerability exists in jpc encoder prior to version 2.0.23 in...

7.8CVSS7AI score0.01371EPSS
Exploits1References14
Rows per page
Query Builder