Lucene search
+L

618 matches found

Patchstack
Patchstack
•added 2024/11/15 8:51 a.m.•18 views

WordPress NIX Anti-Spam Light plugin <= 0.0.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin NIX Anti-Spam Light versions = 0.0.4...

9.8CVSS7.3AI score0.00523EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•1 views

CVE-2022-20685: Integer Overflow or Wraparound

A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit th...

7.5CVSS7.6AI score0.01444EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/06 12:00 a.m.•17 views

Symfony 注入漏洞

Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony. Symfony suffers from an injection vulnerability that stems from allowing the separation of a PHP application from its global state...

7.3CVSS7.2AI score0.64802EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/10/02 12:00 a.m.•14 views

The vulnerability of the PHP programming language interpreter, related to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the PHP programming language interpreter is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS6.5AI score0.00935EPSS
SaveExploits1References16Affected Software5
BDU FSTEC
BDU FSTEC
•added 2024/10/02 12:00 a.m.•13 views

The vulnerability of the PHP programming language interpreter, which allows attackers to circumvent existing security restrictions

The vulnerability of the PHP programming language interpreter is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and manipulate the PHP-FPM logs...

10CVSS6.5AI score0.00487EPSS
SaveExploits1References13Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/09/18 12:00 a.m.•27 views

The vulnerability of the DeviceHandler component of the cross-platform Xen hypervisor for Linux operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the DeviceHandler component in the cross-platform hypervisor Xen of the Linux operating system is related to the incorrect placement of the preprocessor directive in the source code. Exploiting this vulnerability can allow an attacker to increase their privileges...

4.1CVSS5.5AI score0.00264EPSS
SaveExploits0References6Affected Software5
Redos
Redos
•added 2024/09/16 12:00 a.m.•26 views

ROS-20240916-06

Vulnerability in the Device Handler component of the Xen cross-platform hypervisor of the Linux kernel is related to incorrect placement of a preprocessor directive in the source code. Exploiting the vulnerability could allow an attacker to escalate privileges...

4.1CVSS7.4AI score0.00264EPSS
SaveExploits0
Patchstack
Patchstack
•added 2024/08/30 2:48 a.m.•15 views

WordPress Betheme theme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection vulnerability

Authenticated Contributor+ PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Theme Betheme versions = 27.5.6...

8.8CVSS7.3AI score0.00623EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/07/15 12:00 a.m.•17 views

The vulnerability of the virtual server “1C-Bitrix: Virtual Machine” involves unlimited loading of dangerous type files, allowing a hacker to execute arbitrary code.

The vulnerability of the virtual server “1C-Bitrix: Virtual Machine” is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted PHP file...

10CVSS6AI score
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/06/21 4:15 p.m.•11 views

CVE-2024-35778

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John West Slideshow SE PHP Local File Inclusion.This issue affects Slideshow SE: from n/a through 2.5.17...

8.8CVSS5.8AI score0.00567EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/20 11:15 a.m.•15 views

ALPINE-CVE-2023-46840

Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen...

4.1CVSS7.2AI score0.00264EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/20 11:15 a.m.•30 views

CVE-2023-46840

Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen...

4.1CVSS6.9AI score
SaveExploits0References3
OSV
OSV
•added 2024/03/20 11:15 a.m.•10 views

DEBIAN-CVE-2023-46840

Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen...

4.1CVSS5.2AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/20 11:15 a.m.•48 views

CVE-2023-46840

Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen...

4.1CVSS4AI score0.00264EPSS
SaveExploits0References3
OSV
OSV
•added 2024/03/20 11:15 a.m.•12 views

UBUNTU-CVE-2023-46840

Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen...

4.1CVSS5.8AI score0.00264EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2024/03/20 11:15 a.m.•45 views

CVE-2023-46840

Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen...

4.1CVSS5.9AI score0.00264EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/20 10:40 a.m.•115 views

CVE-2023-46840

The Xen hypervisor contains a vulnerability in the DeviceHandler component caused by the incorrect placement of a preprocessor directive in the source code. This flaw leads to unintended logic when support for HVM guests is compiled out. An attacker could exploit this issue to achieve privilege e...

4.1CVSS4.3AI score0.00264EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2024/03/20 10:40 a.m.•112 views

CVE-2023-46840

Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen...

4.1CVSS4.5AI score0.00264EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/03/20 10:40 a.m.•22 views

CVE-2023-46840 VT-d: Failure to quarantine devices in !HVM builds

Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen...

7.4AI score0.00264EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•16 views

Xen Security Vulnerabilities

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A security vulnerability exists in Xen 4....

4.1CVSS6.7AI score0.00264EPSS
SaveExploits0References5
Rows per page
Query Builder