Lucene search
+L

13829 matches found

CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•15 views

Tungsten Automation Power PDF 资源管理错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. A resource management error vulnerability exists in Tungsten Automation Power PDF, which stems from the JP2 file parsing module containing a post-release reuse issue that could lead ...

3.3CVSS4.1AI score0.00349EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•19 views

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. A buffer error vulnerability exists in Tungsten Automation Power PDF, which stems from the JP2 file parsing module containing an out-of-bounds read issue that could lead to a remote...

7.8CVSS8AI score0.0041EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•4 views

CVE-2024-12548: Use After Free

Tungsten Automation Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability i...

3.3CVSS6.1AI score0.00349EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•3 views

CVE-2024-12550: Out-of-bounds Read

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabili...

7.8CVSS6AI score0.00348EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•7 views

CVE-2024-12549: Out-of-bounds Read

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in tha...

7.8CVSS6.7AI score0.00355EPSS
SaveExploits0References1
ICS
ICS
•added 2025/02/11 12:00 a.m.•15 views

Siemens SIPROTEC 5

SUMMARY Affected SIPROTEC 5 devices do not encrypt certain data within the on-board flash storage on their PCB. This could allow an attacker with physical access to read the sensitive information from the filesystem of the device. Siemens is preparing fix versions and recommends specific...

5.1CVSS6.7AI score0.00163EPSS
SaveExploits0References10
ICS
ICS
•added 2025/02/11 12:00 a.m.•24 views

Siemens SIPROTEC 5 Devices

SUMMARY An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is...

8.7CVSS7AI score0.00584EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2025/02/10 12:00 a.m.•17 views

The vulnerability of Schneider Electric EcoStruxure Power Build Rapsody software for designing and configuring electrical systems lies in the fact that operations may occur outside the buffer boundaries of memory, allowing an attacker to execute arbitrary code.

The vulnerability of Schneider Electric EcoStruxure Power Build Rapsody software for designing and configuring electrical systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

5.3CVSS6.3AI score0.00228EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•16 views

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27002)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27002 advisory. - In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: Do a runtime PM g...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/06 8:43 p.m.•49 views

Security Bulletin: This Power System update is being released to address CVE-2024-41781

Summary An attacker that gains service access to the HMC can locate and through a series of service procedures decrypt data contained in the Platform KeyStore Vulnerability Details CVEID:CVE-2024-41781 DESCRIPTION: IBM PowerVM Platform KeyStore functionality can be compromised if an attacker gain...

5.9CVSS5AI score0.00348EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/06 2:13 a.m.•25 views

CVE-2025-0429

The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form'postcontent' variable through the wpaicgexportaiforms function. This allows authenticated attackers, with...

7.2CVSS9.6AI score0.00653EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 1:51 a.m.•15 views

CVE-2022-43545

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, SICAM P850 All versions V3.10, SICAM P850 All versions V3.10, SICAM P850 All versions...

9.9CVSS7.6AI score0.01463EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 1:50 a.m.•15 views

CVE-2022-43439

A vulnerability has been identified in POWER METER SICAM Q100 7KG9501-0AA01-0AA1 All versions V2.50, POWER METER SICAM Q100 7KG9501-0AA01-2AA1 All versions V2.50, POWER METER SICAM Q100 7KG9501-0AA31-0AA1 All versions V2.50, POWER METER SICAM Q100 7KG9501-0AA31-2AA1 All versions V2.50, SICAM P850...

9.9CVSS7.3AI score0.01607EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 1:47 a.m.•16 views

CVE-2022-43398

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50. Affected devices do not renew the session cookie after login/logout and also accept us...

8.8CVSS6.4AI score0.00522EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 1:43 a.m.•15 views

CVE-2022-43546

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, SICAM P850 All versions V3.10, SICAM P850 All versions V3.10, SICAM P850 All versions...

9.9CVSS7.6AI score0.01625EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 12:06 a.m.•22 views

CVE-2022-47593

Auth. subscriber+ SQL Injection SQLi vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize plugin = 1.6.35 versions...

8.5CVSS8.1AI score0.00635EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 10:11 p.m.•21 views

CVE-2022-33174

Power Distribution Units running on Powertek firmware multiple brands before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an emp...

9.8CVSS7AI score0.14116EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:02 a.m.•14 views

CVE-2024-29119

A vulnerability has been identified in Spectrum Power 7 All versions V24Q3. The affected product contains several root-owned SUID binaries that could allow an authenticated local attacker to escalate privileges...

8.5CVSS6.6AI score0.00142EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 5:50 a.m.•17 views

CVE-2024-49670

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Glover Client Power Tools Portal client-power-tools allows Reflected XSS.This issue affects Client Power Tools Portal: from n/a through = 1.9.0...

7.1CVSS5.9AI score0.00306EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:27 a.m.•18 views

CVE-2024-31288

Server-Side Request Forgery SSRF vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize.This issue affects RapidLoad Power-Up for Autoptimize: from n/a through 2.2.11...

7.2CVSS8.6AI score0.00369EPSS
SaveExploits0References1
Rows per page
Query Builder