Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2013-1192

Malware in sbrugna...

7.8CVSS6.2AI score0.0071EPSS
Exploits0References2
OSV
OSV
added 2025/07/29 2:15 p.m.1 views

CVE-2024-42645

An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service DoS...

7.5CVSS6.2AI score0.00149EPSS
Exploits1References3
NVD
NVD
added 2024/10/09 4:15 p.m.10 views

CVE-2024-46316

DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrary commands via supplying a crafted HTTP message...

8CVSS0.00457EPSS
Exploits0References1
CVE
CVE
added 2024/10/09 12:0 a.m.42 views

CVE-2024-46316

DrayTek Vigor3900, firmware 1.5.1.6, contains a command-injection vulnerability in the sub_2C920 function exposed via /cgi-bin/mainfunction.cgi. An attacker can supply a crafted HTTP message to execute arbitrary commands with low privileges and no user interaction, potentially impacting confident...

8CVSS8.3AI score0.00457EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/09 12:0 a.m.19 views

CVE-2024-46316

DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrary commands via supplying a crafted HTTP message...

8.7AI score0.00457EPSS
Exploits0References1
ArchLinux
ArchLinux
added 2021/06/09 12:0 a.m.117 views

[ASA-202106-22] thunderbird: arbitrary code execution

Arch Linux Security Advisory ASA-202106-22 ========================================== Severity: High Date : 2021-06-09 CVE-ID : CVE-2021-29967 Package : thunderbird Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2035 Summary ======= The package thunderbird...

8.8CVSS1.4AI score0.00365EPSS
Exploits0References5
NVD
NVD
added 2021/04/23 4:15 p.m.15 views

CVE-2018-25007

Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2 allows attacker to update element property values via crafted synchronization message...

4.3CVSS0.00288EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2019/11/11 4:15 a.m.11 views

CVE-2019-18849

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup...

5.5CVSS6.8AI score0.00769EPSS
Exploits1References4
OSV
OSV
added 2018/03/30 4:29 p.m.1 views

CVE-2017-1747

A specially crafted message could cause a denial of service in IBM WebSphere MQ 9.0, 9.0.0.1, 9.0.0.2, 9.0.1, 9.0.2, 9.0.3, and 9.0.4 applications consuming messages that it needs to perform data conversion on. IBM X-Force ID: 135520...

6.5CVSS5.8AI score0.00244EPSS
Exploits0References3
Rows per page
Query Builder