Lucene search
+L

2993 matches found

OSV
OSV
added 2022/04/28 10:15 a.m.9 views

CVE-2022-29819

In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible...

7.7CVSS6.1AI score0.0022EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/28 10:15 a.m.2 views

CVE-2022-29819

In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible...

7.7CVSS7.5AI score0.0022EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/04/28 10:15 a.m.20 views

Code injection

In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible...

4.4CVSS7.7AI score0.0022EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/04/28 10:15 a.m.23 views

Code injection

In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible...

4.4CVSS7.7AI score0.0022EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/28 9:55 a.m.29 views

CVE-2022-29821

In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible...

6.9CVSS7.9AI score0.0022EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/28 9:55 a.m.82 views

CVE-2022-29821

JetBrains Rider affected: local code execution vulnerability in versions prior to 2022.1 caused by crafted links in ReSharper Quick Documentation. Root cause details are not provided beyond the affect scope in the connected documents. There is no explicit exploit status or remediation information...

7.7CVSS7.7AI score0.0022EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/04/28 12:0 a.m.8 views

Jetbrains JetBrains IntelliJ IDEA 代码注入漏洞

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Jetbrains, a Czech company.A code injection vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which stems from the execution of native code via a link in Quick...

7.7CVSS6AI score0.0022EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.8 views

The vulnerability of the QR Code Generator browser extensions for Google Chrome and Microsoft Edge allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the QR Code Generator browser extensions for Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7AI score0.00867EPSS
SaveExploits1References7Affected Software4
Rapid7 Blog
Rapid7 Blog
added 2022/04/05 3:45 p.m.20 views

What's New in InsightIDR: Q1 2022 in Review

Introducing new InsightIDR capabilities to accelerate your detection and response program When we talk to customers and security professionals about what they need more of in their security operations center SOC, there is one consistent theme: time. InsightIDR — Rapid7's leading cloud SIEM and XD...

SaveExploits0
Kitploit
Kitploit
added 2022/04/04 12:30 p.m.69 views

Live-Forensicator - Powershell Script To Aid Incidence Response And Live Forensics

Live Forensicator is part of the Black Widow Toolbox, its aim is to assist Forensic Investigators and Incidence responders in carrying out a quick live forensic investigation. It achieves this by gathering different system information for further review for anomalous behaviour or unexpected data...

6.9AI score
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2022/04/02 12:0 a.m.13 views

Quick Adsense < 2.8.2 - Subscriber+ Post Stats Reset

The plugin does not have authorisation and CSRF checks in some of its AJAX actions allowing any authenticated users, such as subscribers to call them and reset Posts stats for example PoC fetch"/wp-admin/admin-ajax.php", "headers": "accept": "/", "accept-language": "en-US,en;q=0.9", "content-type...

2.2AI score
SaveExploits0Affected Software1
OSV
OSV
added 2022/04/01 11:15 p.m.6 views

CVE-2021-23247

A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine...

9.8CVSS6.4AI score0.01738EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/01 11:15 p.m.3 views

CVE-2021-23247

A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine...

9.8CVSS8AI score0.01738EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/01 11:15 p.m.24 views

CVE-2021-23247

A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine...

9.8CVSS0.01738EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/01 11:15 p.m.24 views

Command injection

A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine...

7.5CVSS10AI score0.01738EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/04/01 10:17 p.m.65 views

CVE-2021-23247

CVE-2021-23247 is described across multiple sources as a command-injection vulnerability in the Quick Game Engine, allowing a remote attacker to execute arbitrary code. Affected component/behavior: the Quick App environment within the engine. Root cause and technical specifics are not fully discl...

9.8CVSS10AI score0.01738EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/01 10:17 p.m.25 views

CVE-2021-23247

A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine...

10AI score0.01738EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/01 12:0 a.m.7 views

quick game engine 命令注入漏洞

quick game engine is an open source game framework. A command injection vulnerability exists in quick game engine, which stems from the fact that the quick app can arbitrarily execute remote code. A remote attacker can exploit this vulnerability to execute arbitrary code in quick game engine...

9.8CVSS8.9AI score0.01738EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/29 5:15 p.m.2 views

DEBIAN-CVE-2022-1050

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...

8.8CVSS7.1AI score0.00374EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/28 7:15 p.m.5 views

CVE-2022-0735

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure...

10CVSS5.4AI score0.13227EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder