Lucene search
K

4502 matches found

BDU FSTEC
BDU FSTEC
added 2019/10/09 12:0 a.m.2 views

The vulnerability in the web interface of the software-hardware management interface for Cisco Firepower Management Center allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the web interface for managing the software-hardware environment of Cisco Firepower Management Center is related to input validation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS5.9AI score0.02965EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2019/10/08 12:0 a.m.6 views

WordPress Arforms Plugin Input Validation Error Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ARforms is a responsive form builder plugin used in it. An input validation error vulnerability exists in the 'arfdeletefile' function ...

7.5CVSS6.8AI score0.09726EPSS
Exploits5References1
CNVD
CNVD
added 2019/09/30 12:0 a.m.1 views

Google Android Denial of Service Vulnerability (CNVD-2019-34131)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A denial of service vulnerability exists in Google Android 10. The vulnerability stems from the presence of incorrect input validation in libstagefright in Android...

7.1CVSS6.7AI score0.00685EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.2 views

Mozilla Thunderbird Input Validation Error Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. An input validation error vulnerability exists in Mozilla Thunderbird versions prior to...

7.5CVSS8.8AI score0.01075EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/25 12:0 a.m.2 views

ZTE ZXV10 B860A Input Validation Error Vulnerability

The ZTE ZXV10 B860A is a network set-top box from China's ZTE Corporation ZTE. An input validation error vulnerability exists in ZTE ZXV10 B860A 81511329.1008 and earlier versions, which can be exploited by an attacker to compromise a user's terminal system...

10CVSS6.8AI score0.01053EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/25 12:0 a.m.2 views

F5 BIG-IP Input Validation Error Vulnerability (CNVD-2019-34369)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An input validation error vulnerability exists in F5 BIG-IP, which can be exploited by remote attackers to perform unauthorize...

4.3CVSS6.8AI score0.00476EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/23 12:0 a.m.3 views

ZZZCMS zzzphp input validation error vulnerability

ZZZCMS zzzphp is a content management system CMS. An input validation error vulnerability exists in ZZZCMS zzzphp v1.7.2, which can be exploited by an attacker to execute arbitrary code...

9.8CVSS7.5AI score0.03116EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/23 12:0 a.m.3 views

Tenda N301 Input Validation Error Vulnerability

The Tenda N301 is a wireless router from the Chinese company Tenda. An input validation error vulnerability exists in the Tenda N301. An attacker can exploit this vulnerability by sending the 'wifiSSID' parameter with a long string to goform/setWifi, causing the application to crash...

7.8CVSS7AI score0.01359EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/18 12:0 a.m.4 views

TIBCO Software Spotfire Analytics Platform for AWS Marketplace and TIBCO Software Enterprise Runtime for R-Server Edition Input Validation Error Vulnerabilities

TIBCO Software Spotfire Analytics Platform for AWS Marketplace and TIBCO Software Enterprise Runtime for R-Server Edition are products of TIBCO Software, Inc. TIBCO Software Spotfire Analytics Platform for AWS Marketplace is a platform for visualizing and analyzing data for the cloud application...

9.9CVSS7.3AI score0.03723EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/17 12:0 a.m.1 views

SPIP Input Validation Error Vulnerability

SPIP is a Web-based content publishing system. The system is primarily used for online collaboration. An input validation error vulnerability exists in SPIP versions prior to 3.1.11 and 3.2.2 prior to 3.2.5, which arises from a web-based system or product that does not properly validate incoming...

6.1CVSS8.8AI score0.011EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/17 12:0 a.m.2 views

WordPress Post Indexer Plugin Input Validation Error Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An input validation error vulnerability exists in the WordPress Post Indexer plugin prior to version 3.0.6.2...

8.1CVSS6.7AI score0.01724EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/16 12:0 a.m.1 views

GitLab Input Validation Error Vulnerability (CNVD-2020-20439)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An input validation error vulnerability exists in service...

4CVSS6.8AI score0.00988EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.3 views

WordPress Input Validation Error Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress is vulnerable to an input validation error vulnerability. Detailed vulnerability details are not...

6.1CVSS6.8AI score0.0255EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.4 views

GitLab Input Validation Error Vulnerability (CNVD-2020-20441)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...

5.8CVSS6.7AI score0.01118EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.3 views

WordPress Ocean Extra plugin input validation error vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ocean Extra is a plugin used to add extensions to the Ocean theme. An input validation error vulnerability exists in the...

7.5CVSS6.7AI score0.01364EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.4 views

CentOS Web Panel Input Validation Error Vulnerability

CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove email forwarding destinations from an affected user's account...

6.5CVSS6.9AI score0.01787EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.2 views

CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32248)

CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to delete an affected user's mail account...

6.5CVSS6.9AI score0.01787EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.2 views

CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32243)

CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to add an email forwarding destination to an affected user's account...

6.5CVSS6.9AI score0.01787EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.2 views

CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32244)

CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to remove subdomains from an affected user's account...

6.5CVSS6.9AI score0.01787EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/11 12:0 a.m.2 views

CentOS Web Panel Input Validation Error Vulnerability (CNVD-2019-32245)

CentOS Web Panel CWP is a free web hosting control panel. An input validation error vulnerability exists in CWP version 0.9.8.851, which arises from a network system or product that does not properly validate incoming data. No detailed vulnerability details are currently available...

6.5CVSS6.9AI score0.01787EPSS
Exploits2References1
Rows per page
Query Builder