Lucene search
+L

11821 matches found

Positive Technologies
Positive Technologies
added 2026/01/28 12:00 a.m.11 views

PT-2026-5162

Nidesoft 3GP Video Converter 2.6.18 contains a local stack buffer overflow vulnerability in the license registration parameter. Attackers can craft a malicious payload and paste it into the 'License Code' field to execute arbitrary code on the system...

8.4CVSS6.5AI score0.0016EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.16 views

WordPress plugin Simple User Registration 访问控制错误漏洞

WordPress is a set of blogging platform developed using the PHP language, the platform has the ability to set up a personal blog site on a server based on PHP and MySQL, WordPress plugin is an application plugin. An access control error vulnerability exists in the WordPress plugin Simple User...

8.8CVSS5.7AI score0.00297EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.16 views

Nidesoft 3GP Video Converter has security vulnerabilities

Nidesoft 3GP Video Converter is a video format conversion tool developed by Nidesoft Corporation. Version 2.6.18 of Nidesoft 3GP Video Converter has a security vulnerability. This vulnerability stems from an overflow in the local stack buffer associated with license registration parameters, which...

8.4CVSS6.2AI score0.0016EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/27 7:16 p.m.14 views

CVE-2020-36976

Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Acer\Registration\ to inject malicious executables...

8.5CVSS0.00167EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/27 7:16 p.m.19 views

CVE-2020-36978

Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...

6.4CVSS0.00317EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/01/27 6:51 p.m.5 views

CVE-2020-36978

Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...

6.4CVSS6AI score0.00317EPSS
SaveExploits0References7Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/27 6:51 p.m.4 views

CVE-2020-36978 Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting

Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...

6.4CVSS6AI score0.00317EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/01/27 6:51 p.m.46 views

CVE-2020-36978 Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting

Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...

6.4CVSS0.00317EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/01/27 6:51 p.m.14 views

EUVD-2020-30871

Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...

6.4CVSS6AI score0.00317EPSS
SaveExploits0References7
CVE
CVE
added 2026/01/27 6:51 p.m.27 views

CVE-2020-36978

Froxlor Server Management Panel 0.10.16 is affected by a persistent Cross-Site Scripting (XSS) vulnerability in the customer registration input fields. An attacker can inject malicious scripts via the username, name, or firstname parameters, which are then executed in the administrator’s browser ...

6.4CVSS6AI score0.00317EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/01/27 6:51 p.m.36 views

CVE-2020-36976 Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path

Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Acer\Registration\ to inject malicious executables...

8.5CVSS0.00167EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/27 6:51 p.m.5 views

CVE-2020-36976

Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Acer\Registration\ to inject malicious executables...

8.5CVSS6.1AI score0.00167EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/27 6:51 p.m.6 views

CVE-2020-36976 Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path

Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Acer\Registration\ to inject malicious executables...

8.5CVSS6.1AI score0.00167EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/27 6:51 p.m.11 views

EUVD-2020-30873

Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Acer\Registration\ to inject malicious executables...

8.5CVSS6.1AI score0.00167EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/27 6:51 p.m.25 views

CVE-2020-36976

CVE-2020-36976 affects Acer Global Registration Service 1.0.0.3. The issue is an unquoted service path in the service configuration, enabling a local attacker to replace or inject an executable in C:\Program Files (x86)\Acer\Registration\ that could run at service startup with LocalSystem privile...

8.5CVSS6.1AI score0.00167EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/27 3:23 p.m.12 views

CVE-2025-59098

The Access Manager is offering a trace functionality to debug errors and issues with the device. The trace functionality is implemented as a simple TCP socket. A tool called TraceClient.exe, provided by dormakaba via the Access Manager web interface, is used to connect to the socket and receive...

8.7CVSS5.9AI score0.0039EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/27 2:11 a.m.13 views

Malicious code in @afg-ikea/ikea-family-registration-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ac39afe31e807b61c9297e45f81042917f9e889e1ceb953fcaeba093c75576 The package @afg-ikea/ikea-family-registration-module was found to contain malicious code. Source: ghsa-malware...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/27 12:00 a.m.16 views

PT-2026-5001

Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...

6.4CVSS6AI score0.00317EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/01/27 12:00 a.m.15 views

Acer Global Registration Service Code Vulnerability

Acer Global Registration Service is an official registration and warranty activation software for products of Acer, a company based in Taiwan, China. Version 1.0.0.3 of Acer Global Registration Service contains a code vulnerability; this vulnerability stems from a service path that lacks quotes,...

8.5CVSS6AI score0.00167EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/27 12:00 a.m.26 views

PT-2026-35493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock condition exists in the GPIO OMAP driver. The omap mpuio driver was being registered within the omap gpio probe function. Because the driver core prohibits registering drivers...

5.5CVSS5.5AI score0.00096EPSS
SaveExploits0
Rows per page
Query Builder