Lucene search
+L

895 matches found

CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•14 views

PaperCut NG Security Vulnerability

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. A security vulnerability exists in PaperCut NG/MF that stems from an elevation of privilege vulnerability...

9.8CVSS7.1AI score0.63984EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•13 views

PaperCut NG/MF Security Vulnerabilities

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. A security vulnerability exists in PaperCut NG/MF that originates from allowing unauthorized write operations that could result in remote code execution...

7.2CVSS8AI score0.01308EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•13 views

PaperCut NG Security Vulnerability

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. A security vulnerability exists in PaperCut NG/MF that originates from allowing an authenticated administrator user to create a malicious payload that can remotely execute code on the server...

7.2CVSS7.1AI score0.01411EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/14 12:00 a.m.•16 views

PaperCut NG Security Vulnerability

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. A security vulnerability exists in PaperCut NG/MF that stems from a vulnerability that allows an attacker to expose files on the server to affected API endpoints via a payload...

3.1CVSS6.8AI score0.00546EPSS
SaveExploits0References2
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•31 views

[SECURITY] Fedora 40 Update: forge-parent-38-28.fc40

Sonatype Forge is an open-source community dedicated to the creation of the next-generation of development tools and technologies...

8.8CVSS6.8AI score0.02578EPSS
SaveExploits3
NVD
NVD
•added 2024/03/04 4:15 p.m.•28 views

CVE-2023-5451

Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads. Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Next...

6.1CVSS6.2AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/04 3:54 p.m.•39 views

CVE-2023-5451

Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads. Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Next...

6.1CVSS6.9AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/04 3:54 p.m.•29 views

CVE-2023-5451

Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads. Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Next...

6.1CVSS6.5AI score0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/04 12:00 a.m.•3 views

CVE-2023-5451: Improper Neutralization of Input During Web Page Generation

Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads. Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Next...

6.1CVSS5.8AI score0.00308EPSS
SaveExploits0References2
OSV
OSV
•added 2024/02/14 7:28 p.m.•11 views

CVE-2023-50926 Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO message when using the RPL-Lite implementation in the Contiki-NG operating system. More specifically, the prefix information of the DIO message...

7.5CVSS6.6AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2024/02/14 12:00 a.m.•72 views

Contiki-NG Buffer Error Vulnerability

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A buffer error vulnerability exists in Contiki-NG 4.9 and earlier versions, which stems from an out-of-bounds write in the driver for the IEEE 802.15.4 radio...

7.6CVSS7.2AI score0.00387EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•37 views

PT-2024-14013 · Unknown · Contiki-Ng

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.9 Description: The issue is caused by insufficient control of the lengths for DIO and DAO messages, particularly when they contain RPL sub-option headers, allowing an attacker to trigger out-of-bounds reads in t...

8.6CVSS7.3AI score0.00508EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/01/18 12:00 a.m.•19 views

Contiki-NG Security Vulnerability

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A security vulnerability exists in Contiki-NG tinyDTLS version 2018-08-30 and earlier versions that stems from the fact that an incorrect handshake may be accomplished using different...

9.8CVSS6.6AI score0.01181EPSS
SaveExploits0References3
Microsoft Malware Protection
Microsoft Malware Protection
•added 2024/01/12 5:00 p.m.•54 views

Microsoft is named a Leader in the 2023 Gartner® Magic Quadrant™ for Endpoint Protection Platforms

It’s no secret that ransomware is top of mind for many chief information security officers CISOs as the number of attacks has increased exponentially. As seen in the latest Microsoft Digital Defense Report, our “telemetry indicates that organizations faced an increased rate of ransomware attacks...

7.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2023/12/12 12:00 a.m.•14 views

eSpeak NG Security Vulnerability

eSpeak NG is an open source software text-to-speech synthesizer from eSpeak NG Open Source. A security vulnerability exists in eSpeak NG version 1.52-dev, which is caused by a buffer overflow in the SetUpPhonemeTable method of the synthdata.c file...

5.3CVSS7.3AI score0.00396EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•15 views

PaperCut MF and PaperCut NG Security Vulnerabilities

PaperCut MF and PaperCut NG are both products of PaperCut Australia.PaperCut MF is a multifunctional printer control software.PaperCut NG is a next-generation printer control software.PaperCut MF is a multifunctional printer control software.PaperCut NG is a next-generation printer control...

7.8CVSS6.4AI score0.0036EPSS
SaveExploits0References3
NVD
NVD
•added 2023/11/05 12:15 a.m.•33 views

CVE-2023-46964

Cross Site Scripting XSS vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering...

6.1CVSS6.1AI score0.0055EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/05 12:15 a.m.•31 views

Cross site scripting

Cross Site Scripting XSS vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering...

5.8CVSS6.7AI score0.0055EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/04 12:00 a.m.•3 views

CVE-2023-46964: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering...

6.1CVSS7AI score0.0055EPSS
SaveExploits0References2
CVE
CVE
•added 2023/11/04 12:00 a.m.•110 views

CVE-2023-46964

CVE-2023-46964 affects Hillstone Next Generation Firewall SG-6000-e3960 (v5.5). The issue is a Cross Site Scripting (XSS) vulnerability due to using front-end filtering instead of back-end filtering, enabling a remote attacker to execute arbitrary code. Impact is described as arbitrary code execu...

6.1CVSS6AI score0.0055EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder