Lucene search
+L

69 matches found

OSV
OSV
added 2023/01/17 6:11 p.m.7 views

GSD-2023-1000796 drm/amdgpu/powerplay/psm: Fix memory leak in power state init

drm/amdgpu/powerplay/psm: Fix memory leak in power state init This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.4 views

PT-2023-33873 · Amd · Amdgpu

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A memory leak issue was discovered in the power state initialization of the AMDGPU powerplay module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

7.2AI score
SaveExploits0References1
NVD
NVD
added 2022/04/22 5:15 p.m.31 views

CVE-2021-20464

IBM Cognos Analytics PowerPlay IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813...

6.5CVSS0.01376EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/22 5:15 p.m.7 views

CVE-2021-20464

IBM Cognos Analytics PowerPlay IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813...

6.5CVSS5.5AI score0.01376EPSS
SaveExploits0References3
CVE
CVE
added 2022/04/22 4:30 p.m.105 views

CVE-2021-20464

CVE-2021-20464 affects IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7). A malicious authenticated user could trigger an XML Bomb attack, leading to a denial of service of the affected PowerPlay component. Connected sources confirm impacted product lines and the XM...

6.5CVSS6.7AI score0.01376EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/21 12:00 a.m.7 views

CVE-2021-20464

IBM Cognos Analytics PowerPlay IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813...

6.5CVSS6.5AI score0.01376EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/13 4:15 p.m.5 views

CVE-2021-37586

The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user with Administrator rights to replay a previously recorded conversation of another tenant due to insufficient validation...

4.9CVSS5.8AI score0.0082EPSS
SaveExploits0References2
Prion
Prion
added 2021/08/13 4:15 p.m.14 views

Input validation

The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user with Administrator rights to replay a previously recorded conversation of another tenant due to insufficient validation...

4CVSS5.1AI score0.0082EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/08/13 4:15 p.m.6 views

CVE-2021-37586

The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user with Administrator rights to replay a previously recorded conversation of another tenant due to insufficient validation...

4.9CVSS6AI score0.0082EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/08/13 12:00 a.m.8 views

Mitel Interaction Recording Multitenancy 输入验证错误漏洞

Mitel Interaction Recording Multitenancy is an interactive call recording system from Mitel Canada. A security vulnerability exists in the PowerPlay Web component of the Mitel Interaction Recording Multitenancy system prior to 6.7, which arises from insufficient authentication and replay of a...

4.9CVSS5.3AI score0.0082EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/05/25 12:00 a.m.11 views

WordPress Powerplay Gallery plugin file upload vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.Powerplay Gallery is one of the gallery plug-ins for displaying images. A file upload vulnerability exists in the...

7.5CVSS7AI score0.01843EPSS
SaveExploits1References1
Prion
Prion
added 2017/05/23 4:29 a.m.24 views

Design/Logic Flaw

upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable...

5CVSS7.4AI score0.01843EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2017/05/23 4:29 a.m.23 views

CVE-2015-5682

upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable...

7.5CVSS7.5AI score0.01843EPSS
SaveExploits1References2
CVE
CVE
added 2017/05/23 3:56 a.m.52 views

CVE-2015-5682

The CVE concerns the WordPress Powerplay Gallery plugin, version 3.3, where upload.php allows remote attackers to create arbitrary directories through vectors related to the targetDir parameter. This is a remote, unauthenticated vulnerability that enables directory creation, potentially aiding fu...

7.5CVSS7.4AI score0.01843EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2017/05/23 3:56 a.m.24 views

CVE-2015-5682

upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable...

7.5AI score0.01843EPSS
SaveExploits1References2
CNVD
CNVD
added 2015/08/19 12:00 a.m.29 views

WordPress Powerplay Gallery Plugin Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.Powerplay Gallery is one of the gallery plug-ins for displaying images. An arbitrary file upload vulnerability exists ...

7.5CVSS7.4AI score0.04811EPSS
SaveExploits1References1
NVD
NVD
added 2015/08/18 3:59 p.m.31 views

CVE-2015-5681

Unrestricted file upload vulnerability in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploadfolder/big/...

7.5CVSS7.7AI score0.04811EPSS
SaveExploits1References5
NVD
NVD
added 2015/08/18 3:59 p.m.19 views

CVE-2015-5599

Multiple SQL injection vulnerabilities in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 albumid or 2 name parameter...

7.5CVSS8.6AI score0.03166EPSS
SaveExploits1References4
Prion
Prion
added 2015/08/18 3:59 p.m.15 views

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploadfolder/big/...

7.5CVSS8.3AI score0.04811EPSS
SaveExploits1References5Affected Software1
Prion
Prion
added 2015/08/18 3:59 p.m.20 views

Sql injection

Multiple SQL injection vulnerabilities in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 albumid or 2 name parameter...

7.5CVSS9.3AI score0.03166EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder