Lucene search
K

12 matches found

CNNVD
CNNVD
added 2025/11/08 12:0 a.m.3 views

WordPress plugin Saphali LiqPay for donate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.7AI score0.00034EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/12/23 12:0 a.m.1 views

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

7.3CVSS6.7AI score0.00303EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:0 a.m.2 views

The vulnerability of the FFmpeg multimedia library in the Debian GNU/Linux operating system allows a perpetrator to trigger an octath in service or execute arbitrary code.

The vulnerability of the FFmpeg multimedia library in the Debian GNU/Linux operating system is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to trigger an octath in the service or execute arbitrary code...

5.9CVSS5.8AI score
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.1 views

The vulnerability of HEVC Video Extensions relates to insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.03164EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.4 views

The vulnerability of the DirectX Graphics Kernel File component in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the DirectX Graphics Kernel File component in the Windows operating system exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.5CVSS7.3AI score0.02222EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/12/09 12:0 a.m.1 views

The vulnerability of embedded software developed by Qualcomm, due to insufficient testing of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software in embedded Qualcomm devices exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

7.8CVSS7.2AI score0.00033EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.1 views

The vulnerability of Intel Graphics Driver drivers lies in insufficient validation of input data, which allows attackers to exploit their privileges.

The vulnerability of Intel Graphics Drivers’ drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

6.1CVSS7.2AI score0.00058EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.2 views

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

4.6CVSS5.8AI score0.0012EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2020/07/01 4:15 p.m.10 views

CVE-2020-12497

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

7.8CVSS0.08365EPSS
Exploits0References3
Cvelist
Cvelist
added 2020/07/01 3:52 p.m.15 views

CVE-2020-12497 Phoenix Contact Automation Worx <= 1.87: stack-based overflow

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

7.8CVSS7.9AI score0.08365EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.2 views

The vulnerability of Intel Active Management Technology’s microprogramming software arises from insufficient testing of input data, allowing attackers to exploit this weakness to gain increased privileges.

The vulnerability of Microprogramming Software under Intel Active Management Technology exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain increased privileges...

7.5CVSS7.7AI score0.00224EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.2 views

Vulnerability in the built-in software of the Intel NUC Kit, related to insufficient verification of input data, allows attackers to escalate their privileges or cause service failures.

The vulnerability in the built-in software of the Intel NUC Kit is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

7.8CVSS7.2AI score0.00066EPSS
Exploits0References2Affected Software6
Rows per page
Query Builder