Lucene search
+L

12397 matches found

Patchstack
Patchstack
added 2020/10/21 12:00 a.m.25 views

WordPress Simple Download Monitor plugin <= 3.8.8 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by Gen Sato Mitsui Bussan Secure Directions in WordPress Simple Download Monitor plugin versions = 3.8.8 . Solution Update the WordPress Simple Download Monitor plugin to the latest available version at least 3.8.9...

6.1CVSS2.7AI score0.00943EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2020/10/21 12:00 a.m.32 views

WordPress Simple Download Monitor plugin <= 3.8.8 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by Gen Sato Mitsui Bussan Secure Directions in WordPress Simple Download Monitor plugin versions = 3.8.8 . Solution Update the WordPress Simple Download Monitor plugin to the latest available version at least 3.8.9...

6.1CVSS2.7AI score0.00943EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2020/10/21 12:00 a.m.21 views

WordPress Simple Download Monitor plugin <= 3.8.8 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by Gen Sato Mitsui Bussan Secure Directions in WordPress Simple Download Monitor plugin versions = 3.8.8. Solution Update the WordPress Simple Download Monitor plugin to the latest available version at least 3.8.9...

8.8CVSS3.4AI score0.01506EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/16 12:00 a.m.11 views

The vulnerability of the SDL_FillRect function in the Simple DirectMedia Layer library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SDLFillRect function in the video/SDLsurface.c library in the Simple DirectMedia Layer library is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

6.8CVSS7.1AI score0.03098EPSS
SaveExploits1References22Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/10/16 12:00 a.m.10 views

The vulnerability of the Blit1to4 function in the Simple DirectMedia Layer library allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Blit1to4 function in the Simple DirectMediaLayer library is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

5.8CVSS7AI score0.03299EPSS
SaveExploits1References31Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/10/15 12:00 a.m.9 views

The vulnerability of the InitMS_ADPCM function in the Simple DirectMedia Layer library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the InitMSADPCM function in the Simple DirectMediaLayer library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

6.8CVSS7AI score0.02946EPSS
SaveExploits1References19Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/10/15 12:00 a.m.12 views

The vulnerability of the MS_ADPCMDecode function in the Simple DirectMediaLayer library allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the MSADPCMDecode function audio/SDLwave.c in the Simple DirectMediaLayer library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

8.8CVSS7.1AI score0.02942EPSS
SaveExploits1References27Affected Software8
BDU FSTEC
BDU FSTEC
added 2020/10/15 12:00 a.m.13 views

The vulnerability of the IMA_ADPCMDecode function in the Simple DirectMediaLayer library allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the IMAADPCMDecode function in the Simple DirectMediaLayer library is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

6.8CVSS7AI score0.02806EPSS
SaveExploits1References19Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/10/15 12:00 a.m.9 views

The vulnerability of the InitIMA_ADPCM function in the Simple DirectMediaLayer library allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the InitIMAADPCM function in the Simple DirectMediaLayer library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

8.1CVSS7AI score0.02898EPSS
SaveExploits1References27Affected Software7
OSV
OSV
added 2020/10/14 1:15 p.m.11 views

CVE-2020-6086

An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious...

7.5CVSS7.1AI score0.04263EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/10/13 12:00 a.m.5 views

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2020-57873)

CMS Made Simple CMSMS is an open source content management system CMS from the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in CMS Made...

5.4CVSS5.7AI score0.01087EPSS
SaveExploits3References1
BDU FSTEC
BDU FSTEC
added 2020/10/09 12:00 a.m.12 views

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco IOS XE operating systems of Cisco Catalyst 9000 Series network devices allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE operating systems for Cisco Catalyst 9000 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service...

7.4CVSS7.2AI score0.00639EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2020/10/01 2:15 p.m.18 views

CVE-2020-24860

CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit content and put persistent XSS payload in the affected text fields. The user can get cookies from every authenticated user who visits the website...

5.4CVSS0.01087EPSS
SaveExploits3References4
Prion
Prion
added 2020/10/01 2:15 p.m.22 views

Cross site scripting

CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit content and put persistent XSS payload in the affected text fields. The user can get cookies from every authenticated user who visits the website...

3.5CVSS5.1AI score0.01087EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
added 2020/10/01 1:55 p.m.28 views

CVE-2020-24860

CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit content and put persistent XSS payload in the affected text fields. The user can get cookies from every authenticated user who visits the website...

5.2AI score0.01087EPSS
SaveExploits3References4
CVE
CVE
added 2020/10/01 1:55 p.m.79 views

CVE-2020-24860

CVE-2020-24860 affects CMS Made Simple 2.2.14. An authenticated user with access to the Content Manager can edit content and inject a persistent XSS payload into affected text fields, potentially obtaining cookies from every authenticated visitor. The available connected documents confirm the vul...

5.4CVSS5.1AI score0.01087EPSS
SaveExploits3References4Affected Software1
Veracode
Veracode
added 2020/10/01 3:53 a.m.29 views

Buffer Over-read

Simple DirectMedia Layer SDL is heap-based buffer over-read. It is possible due to a flaw in IMAADPCMdecode in audio/SDLwave.c...

8.8CVSS3AI score0.02806EPSS
SaveExploits1References20Affected Software1
Veracode
Veracode
added 2020/10/01 3:53 a.m.35 views

Buffer Over-read

Simple DirectMedia Layer SDL is vulnerable to buffer over-read. It is possible due to a flaw in InitMSADPCM in audio/SDLwave.c...

8.8CVSS3.3AI score0.02959EPSS
SaveExploits1References20Affected Software1
Veracode
Veracode
added 2020/10/01 3:53 a.m.32 views

Buffer Over-read

Simple DirectMedia Layer SDL is heap-based buffer over-read. It is possible due to a flaw in IMAADPCMnibble in audio/SDLwave.c...

8.8CVSS3AI score0.02793EPSS
SaveExploits1References20Affected Software1
Packet Storm
Packet Storm
added 2020/10/01 12:00 a.m.230 views

CMS Made Simple 2.2.14 Cross Site Scripting

Exploit Title: CMS Made Simple 2.2.14 - Persistent Cross-Site Scripting Authenticated Google Dork: - Date: 2020-09-29 Exploit Author: Roel van Beurden Vendor Homepage: https://www.cmsmadesimple.org/ Software Link: http://s3.amazonaws.com/cmsms/downloads/14793/cmsms-2.2.14-install.zip Version:...

5.6AI score0.01087EPSS
SaveExploits3
Rows per page
Query Builder