Lucene search
+L

3997 matches found

OSV
OSV
added 2022/09/23 2:15 p.m.8 views

CVE-2022-3144

The Wordfence Security – Firewall & Malware Scan plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 7.6.0 via a setting on the options page due to insufficient escaping on the stored value. This makes it possible for authenticated users, with...

4.8CVSS5.7AI score0.00667EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.7 views

Tenda AC15 缓冲区错误漏洞

Tenda AC15 and Tenda AC18 are both products of Tenda, a Chinese company.Tenda AC15 is a wireless router.Tenda AC18 is a router. A stack overflow vulnerability exists in Tenda AC15 and AC18 version V15.03.05.19, which stems from the fromNatStaticSetting method not size-checking the input data when...

9.8CVSS8.2AI score0.0122EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.7 views

Tenda AC15 缓冲区错误漏洞

The Tenda AC15 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda AC15 router version V15.03.05.19, which originates from the list parameter of the fastsettingwifiset function that does not perform a size check on the input data, and can be exploit...

9.8CVSS8.3AI score0.01013EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/22 10:15 p.m.5 views

CVE-2022-40089

A remote file inclusion RFI vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allowurlinclude is set to On...

9.8CVSS6.1AI score0.02059EPSS
SaveExploits1References3
Oracle linux
Oracle linux
added 2022/09/22 12:0 a.m.62 views

kernel security, bug fix, and enhancement update

5.14.0-70.26.1.0.10.OL9 - lockdown: also lock down previous kgdb use Daniel Thompson Orabug: 34290418 CVE-2022-21499 5.14.0-70.26.10.OL9 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted...

7.8CVSS0.1AI score0.05496EPSS
SaveExploits11
ATTACKERKB
ATTACKERKB
added 2022/09/19 3:15 p.m.6 views

CVE-2022-40075

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formfastsettingwifiset...

7.5CVSS7.1AI score0.00889EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/19 3:15 p.m.6 views

CVE-2022-40075

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formfastsettingwifiset...

7.5CVSS5.8AI score0.00889EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/09/19 12:0 a.m.10 views

Tenda AC21 缓冲区错误漏洞

Tenda AC21 is a wireless router from Tenda China. Tenda AC21 V16.03.08.15 is vulnerable to a buffer overflow vulnerability, which originates in the formfastsettingwifiset function of /bin/httpd for lack of length checking of input data, and can be exploited by an attacker to cause httpd to restar...

7.5CVSS7.5AI score0.00889EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/17 1:12 a.m.14 views

GSD-2022-1006266 arm64: fix oops in concurrently setting insn_emulation sysctls

arm64: fix oops in concurrently setting insnemulation sysctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/09/17 12:52 a.m.11 views

GSD-2022-1006054 arm64: fix oops in concurrently setting insn_emulation sysctls

arm64: fix oops in concurrently setting insnemulation sysctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/09/17 12:38 a.m.14 views

GSD-2022-1005903 arm64: fix oops in concurrently setting insn_emulation sysctls

arm64: fix oops in concurrently setting insnemulation sysctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/09/17 12:17 a.m.12 views

GSD-2022-1005667 arm64: fix oops in concurrently setting insn_emulation sysctls

arm64: fix oops in concurrently setting insnemulation sysctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/09/16 11:49 p.m.16 views

GSD-2022-1005334 arm64: fix oops in concurrently setting insn_emulation sysctls

arm64: fix oops in concurrently setting insnemulation sysctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

7.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/09/15 8:15 p.m.2 views

CVE-2022-38326

Tenda AC15 WiFi Router V15.03.05.19multi and AC18 WiFi Router V15.03.05.19multi were discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting...

9.8CVSS6.1AI score0.00973EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/09/15 12:0 a.m.6 views

Tenda AC15 安全漏洞

Tenda AC15 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC15 WiFi Router version V15.03.05.19multi, AC18 WiFi Router version V15.03.05.19multi, which originates from the discovery of a buffer overflow via the page parameter in /goform/NatStaticSetting...

9.8CVSS8.7AI score0.00973EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/09/15 12:0 a.m.10 views

PT-2022-24369 · Tenda · Tenda Ac18 Wifi Router +1

Name of the Vulnerable Software and Affected Versions: Tenda AC15 WiFi Router version V15.03.05.19 multi Tenda AC18 WiFi Router version V15.03.05.19 multi Description: A buffer overflow issue was discovered via the page parameter at the "/goform/NatStaticSetting" API endpoint. This issue affects...

9.8CVSS9.7AI score0.00973EPSS
SaveExploits1References4
OSV
OSV
added 2022/09/14 12:0 a.m.13 views

GHSA-CH4C-278Q-5654 rdiffweb Missing Custom Error Page

rdiffweb version 2.4.1 is set to a default and leaks error information. Version 2.4.2 fixes this issue...

5.3CVSS5.1AI score0.0071EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2022/09/12 12:0 a.m.17 views

The vulnerability of the driver vmwgfx (drivers/gpu/vmxgfx/vmxgfx_kms.c) in the Linux operating system allows a hacker to increase their privileges or cause service failures.

The vulnerability of the vmwgfx driver drivers/gpu/vmxgfx/vmxgfxexecbuf.c in the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

5.5CVSS6.4AI score0.00613EPSS
SaveExploits0References35Affected Software3
NVD
NVD
added 2022/09/09 3:15 p.m.29 views

CVE-2022-38058

Authenticated subscriber+ Plugin Setting change vulnerability in WP Shamsi plugin = 4.1.1 at WordPress...

4.3CVSS0.00538EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/09 3:15 p.m.28 views

Command injection

Authenticated subscriber+ Plugin Setting change vulnerability in WP Shamsi plugin = 4.1.1 at WordPress...

4CVSS4.7AI score0.00538EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder