Lucene search
+L

1806 matches found

CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•18 views

Microsoft Windows Wireless Wide Area Network Service 数字错误漏洞

Microsoft Windows Wireless Wide Area Network Service is a key component in Windows 10 and Windows 11 from Microsoft Corporation USA that facilitates wireless communication over cellular networks. A numeric error vulnerability exists in Microsoft Windows Wireless Wide Area Network Service. An...

4.3CVSS6.1AI score0.00968EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•7 views

CVE-2024-49093: Incorrect Conversion between Numeric Types

Windows Resilient File System ReFS Elevation of Privilege Vulnerability...

8.8CVSS5.7AI score0.00941EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•20 views

Microsoft Windows Mobile Broadband Driver 数字错误漏洞

The Microsoft Windows Mobile Broadband Driver is a driver from Microsoft Corporation USA that allows the Windows operating system to communicate with mobile broadband devices. A numeric error vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker could exploit the...

6.8CVSS6.2AI score0.00879EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2024/12/07 1:43 a.m.•26 views

K000148897: Sudo vulnerability CVE-2019-19232

Security Advisory Description In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because...

7.5CVSS6.2AI score0.03295EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2024/12/05 4:33 p.m.•12 views

rexml: REXML ReDoS vulnerability

A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...

8.7CVSS7.3AI score0.0142EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2024/12/05 2:28 p.m.•11 views

rexml: REXML ReDoS vulnerability

A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...

8.7CVSS7.3AI score0.0142EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2024/12/04 2:47 a.m.•14 views

rexml: REXML ReDoS vulnerability

A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...

8.7CVSS7.3AI score0.0142EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2024/11/29 6:20 p.m.•20 views

WordPress Wallet for WooCommerce plugin <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types vulnerability

Authenticated Subscriber+ Incorrect Conversion between Numeric Types vulnerability discovered by stealthcopter in WordPress Plugin TeraWallet – For WooCommerce versions = 1.5.6...

6.5CVSS7AI score0.00496EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/11/28 1:15 p.m.•23 views

CVE-2024-7747

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...

6.5CVSS7.3AI score0.00496EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/11/28 12:54 p.m.•39 views

CVE-2024-7747 Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...

6.5CVSS0.00496EPSS
SaveExploits0References3
CVE
CVE
•added 2024/11/28 12:54 p.m.•81 views

CVE-2024-7747

CVE-2024-7747 affects Wallet for WooCommerce (WordPress). The vulnerability is an incorrect conversion between numeric types in all versions up to and including 1.5.6, caused by a numerical logic flaw during transfers. When exploited by an authenticated user with Subscriber+ privileges, an attack...

6.5CVSS6.2AI score0.00496EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/28 12:54 p.m.•17 views

CVE-2024-7747 Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...

6.5CVSS6.5AI score0.00496EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/28 12:00 a.m.•23 views

WordPress plugin Wallet for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

6.5CVSS8.5AI score0.00496EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/28 12:00 a.m.•6 views

CVE-2024-7747: Incorrect Conversion between Numeric Types

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...

6.5CVSS5.7AI score0.00496EPSS
SaveExploits0References1
osv-ghsa
osv-ghsa
•added 2024/11/25 9:30 a.m.•22 views

GHSA-PCX7-8HXG-J823 Duplicate Advisory: Keycloak proxy header handling Denial-of-Service (DoS) vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jgwc-jh89-rpgq. This link is maintained to preserve external references. Original Description A vulnerability was found in the Keycloak Server. The Keycloak Server is vulnerable to a denial of service DoS attack...

4.7CVSS5.7AI score
SaveExploits0References7
CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•42 views

7-Zip 数字错误漏洞

7-Zip is a compression software from the 7-Zip open source. A numeric error vulnerability exists in 7-Zip that stems from improper validation of user-supplied data during the Zstandard decompression process, which could result in an integer overflow and execution of arbitrary code before writing ...

7.8CVSS8AI score0.22561EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2024/11/20 12:00 a.m.•14 views

Linux kernel LPIT Code Execution

The vulnerability of the LPIT component in the Linux operating system’s kernel is related to a numerical overflow in the lpitupdateresidency function. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7AI score0.00252EPSS
SaveExploits0References30Affected Software5
CNVD
CNVD
•added 2024/11/15 12:00 a.m.•86 views

Adobe Photoshop Digital Error Vulnerability (CNVD-2025-24445)

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a numeric error vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the current...

7.8CVSS7.3AI score0.00312EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•22 views

Kerberos KDC Proxy Protocol Code Execution

The vulnerability of the Kerberos Key Distribution Center KDC Proxy Protocol implementation in Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.08943EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/11/12 12:00 a.m.•52 views

Adobe Photoshop 数字错误漏洞

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a numeric error vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the current...

7.8CVSS7.2AI score0.00312EPSS
SaveExploits0References1
Rows per page
Query Builder