Lucene search
+L

4775 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/14 12:00 a.m.9 views

The vulnerability of the TCP/IP protocol implementation in the Windows operating system allows a hacker to cause a service failure.

The vulnerability of the TCP/IP protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.4AI score0.02314EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:00 a.m.12 views

The vulnerability of Windows operating systems’ message queues allows attackers to induce service failures.

The vulnerability of Windows operating systems’ message queues is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.3AI score0.02395EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/10/11 12:00 a.m.11 views

PT-2023-6134 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S8 Junos OS versions 21.1R1 through 21.2R3-S6 Junos OS versions prior to 21.3R3-S5 Junos OS versions prior to 21.4R3-S4 Junos OS versions prior to 22.1R3-S3 Junos OS versions prior to 22.2R3-S1 Junos OS...

6.5CVSS5.3AI score0.00322EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.5 views

PT-2023-5975 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ versions affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of Windows operating systems. It allows a remote attacker to cause a...

7.8CVSS9.1AI score0.02395EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.23 views

PT-2023-5942 · Microsoft +1 · Quic +2

Name of the Vulnerable Software and Affected Versions: Microsoft QUIC affected versions not specified Description: The issue is related to insufficient input validation in the implementation of the QUIC network protocol in the Windows operating system. This can be exploited by a remote attacker t...

9.8CVSS6.3AI score0.99999EPSS
SaveExploits21References142
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.6 views

PT-2023-6072 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of Windows operating systems. It allows remote attackers to execute arbitrary...

7.3CVSS9.5AI score0.00921EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.9 views

PT-2023-6166 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows TCP/IP protocol implementation. This can be exploited by a remote attacker to cause a denial of service. Recommendations...

7.8CVSS9.1AI score0.02314EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.8 views

PT-2023-6060 · Microsoft · Virtual Trusted Platform Module +1

Name of the Vulnerable Software and Affected Versions: Microsoft Virtual Trusted Platform Module affected versions not specified Description: The issue is related to insufficient input validation in the virtual trusted platform module of Windows operating systems. This can be exploited by attacke...

7.8CVSS8.6AI score0.01583EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.4 views

PT-2023-6055 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ versions affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of the Windows operating system. This allows a remote attacker to...

7.3CVSS9.5AI score0.00977EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.4 views

PT-2023-6044 · Microsoft · Odbc Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ODBC Driver for SQL Server. This can allow an attacker to execute arbitrary code...

7.8CVSS9.7AI score0.01034EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.10 views

PT-2023-6153 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Setup Files Cleanup component. It allows remote attackers to execute arbitrary code on the system...

7.8CVSS9.8AI score0.00836EPSS
SaveExploits0References7
NVD
NVD
added 2023/10/04 2:15 a.m.28 views

CVE-2023-5357

The Instagram for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS5.7AI score0.00355EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/10/04 1:52 a.m.44 views

CVE-2023-5357 Instagram for WordPress <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Instagram for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS5.8AI score0.00355EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:00 a.m.17 views

The vulnerability of the imgsys component in MediaTek’s microprogramming software allows attackers to enhance their privileges.

The vulnerability of the imgsys microprogramming system component of MediaTek’s chips is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.8CVSS6.5AI score0.00101EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/10/03 2:15 a.m.32 views

CVE-2023-5334

The WP Responsive header image slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spresponsiveslider' shortcode in versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.7AI score0.00348EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/10/03 12:00 a.m.16 views

WordPress Slide Anything Plugin < 2.4.9 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:slideanythingproject:slideanything"; ifdescription...

5.4CVSS5.6AI score0.00473EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/28 5:15 a.m.24 views

CVE-2023-5230

The TM WooCommerce Compare & Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tmwoowishlisttable' shortcode in versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.7AI score0.00333EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/28 5:15 a.m.17 views

Cross site scripting

The Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fawesome' shortcode in versions up to, and including, 5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...

4.9CVSS5.2AI score0.00359EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/09/28 4:31 a.m.31 views

CVE-2023-5233 Font Awesome Integration <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fawesome' shortcode in versions up to, and including, 5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...

6.4CVSS5.8AI score0.00359EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/09/28 4:31 a.m.36 views

CVE-2023-5232 Font Awesome More Icons <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Font Awesome More Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' shortcode in versions up to, and including, 3.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS5.8AI score0.00362EPSS
SaveExploits0References2
Rows per page
Query Builder