Lucene search
+L

5706 matches found

Positive Technologies
Positive Technologies
•added 2025/08/21 12:00 a.m.•22 views

PT-2025-34269

Name of the Vulnerable Software and Affected Versions: PandoraNext-TokensTool versions 0.6.8 and earlier Description: An authentication bypass allows an attacker to access the API without a token. Recommendations: Update to a version later than 0.6.8...

8.1CVSS6.6AI score0.00429EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/08/21 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2017-3650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: C API. Supported versions that are affected are 5.7.18 and earlier. Difficult to explo...

4.3CVSS5.4AI score0.02495EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/20 4:15 p.m.•13 views

CVE-2011-10024

MJM Core Player likely now referred to as MJM Player 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The vulnerability arises from improper bounds checking in the file parser, allowing an attacker to overwrite memory on the stack and execute...

8.4CVSS0.00354EPSS
SaveExploits1References5
NVD
NVD
•added 2025/08/20 4:15 p.m.•20 views

CVE-2011-10023

MJM QuickPlayer also known as MJM Player version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file. The flaw occurs due to improper bounds checking in the file parser, allowing an attacker to overwrite memory and execute arbitrary code...

8.4CVSS0.00347EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/08/20 3:41 p.m.•42 views

CVE-2011-10026 Spreecommerce < 0.50.x API RCE

Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API's search functionality. Improper input sanitation allows attackers to inject arbitrary shell commands via the searchinstanceeval parameter, which is dynamically invoked using Ruby’s send method. Thi...

9.3CVSS0.0264EPSS
SaveExploits2References5
Cvelist
Cvelist
•added 2025/08/20 3:37 p.m.•35 views

CVE-2011-10023 MJM QuickPlayer <= 2010 .s3m Stack-Based Buffer Overflow

MJM QuickPlayer also known as MJM Player version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file. The flaw occurs due to improper bounds checking in the file parser, allowing an attacker to overwrite memory and execute arbitrary code...

8.4CVSS0.00347EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/20 3:37 p.m.•47 views

CVE-2011-10023

CVE-2011-10023 affects MJM QuickPlayer/Player (≈2010) with a stack-based buffer overflow in the .s3m file parser. The flaw stems from improper bounds checking, enabling memory overwrite and arbitrary code execution. Exploitation described uses a crafted payload that bypasses DEP/ASLR via ROP and ...

8.4CVSS6.3AI score0.00347EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2025/08/20 3:37 p.m.•12 views

CVE-2011-10023

MJM QuickPlayer also known as MJM Player version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file. The flaw occurs due to improper bounds checking in the file parser, allowing an attacker to overwrite memory and execute arbitrary code...

8.4CVSS6.3AI score0.00347EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/08/20 3:37 p.m.•24 views

CVE-2011-10024 MJM Core Player 2011 .s3m File Stack-Based Buffer Overflow

MJM Core Player likely now referred to as MJM Player 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The vulnerability arises from improper bounds checking in the file parser, allowing an attacker to overwrite memory on the stack and execute...

8.4CVSS0.00354EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/20 3:37 p.m.•30 views

CVE-2011-10024

CVE-2011-10024 affects MJM Core Player (2011) where the .s3m file parser has a stack-based buffer overflow due to improper bounds checking. The vulnerability is triggered when a user opens a crafted .s3m file, allowing an attacker to overwrite stack memory and execute arbitrary code. Exploitation...

8.4CVSS7.5AI score0.00354EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/20 3:37 p.m.•15 views

CVE-2011-10024 MJM Core Player 2011 .s3m File Stack-Based Buffer Overflow

MJM Core Player likely now referred to as MJM Player 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The vulnerability arises from improper bounds checking in the file parser, allowing an attacker to overwrite memory on the stack and execute...

8.4CVSS7.3AI score0.00354EPSS
SaveExploits1References5
HackRead
HackRead
•added 2025/08/20 3:00 p.m.•21 views

Link11 Highlights Growing Cybersecurity Risks and Introduces Integrated WAAP Platform

Frankfurt am Main, Germany, 20th August 2025, CyberNewsWire...

7.3AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2025/08/20 6:00 a.m.•18 views

Akamai Beats Other WAAP Vendors in Third-Party Evaluation

...

7.3AI score
SaveExploits0
OSV
OSV
•added 2025/08/20 4:16 a.m.•9 views

CVE-2025-57788

A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk...

6.5CVSS5.8AI score0.02854EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•17 views

PT-2025-34105 · Undefined · Undefined

MJM Core Player likely now referred to as MJM Player 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The vulnerability arises from improper bounds checking in the file parser, allowing an attacker to overwrite memory on the stack and execute...

8.4CVSS8.2AI score0.00354EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•10 views

PT-2025-33898

Name of the Vulnerable Software and Affected Versions: Commvault versions prior to 11.36.60 Description: A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. Role-Based Access Control RBAC can limit exposure, but does...

6.9CVSS7.1AI score0.02854EPSS
SaveExploits4References19
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•8 views

CVE-2024-57157

Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a token...

7.3AI score0.00422EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•33 views

PT-2025-34104

Name of the Vulnerable Software and Affected Versions MJM QuickPlayer version 2010 Description MJM QuickPlayer also known as MJM Player contains a stack-based buffer overflow triggered by opening a malicious .s3m music file. This issue arises from improper bounds checking in the file parser, whic...

8.4CVSS5.8AI score0.00347EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•24 views

Commvault 安全漏洞

Commvault is a data backup and recovery software from Commvault Corporation, USA. A security vulnerability exists in Commvault versions prior to 11.36.60 that stems from a known login mechanism that allows an unauthenticated attacker to execute API calls...

6.9CVSS7.1AI score0.02854EPSS
SaveExploits4References4
Tenable Nessus
Tenable Nessus
•added 2025/08/20 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2024-52337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequenc...

5.5CVSS6AI score0.003EPSS
SaveExploits0References3
Rows per page
Query Builder