Lucene search
K

2120 matches found

Microsoft CVE
Microsoft CVE
added 2024/11/09 8:0 a.m.2 views

PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

...

5.5CVSS7AI score0.00021EPSS
Exploits0
CVE
CVE
added 2024/10/28 7:53 p.m.45 views

CVE-2024-50436

CVE-2024-50436 is a Local File Inclusion vulnerability in the WordPress Theme Clean Retina (Theme Horse)

8.8CVSS5.9AI score0.02261EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/24 12:0 a.m.1 views

The vulnerability of the Manage Bank Statement Handler component of the SAP S/4HANA software platform allows a malicious individual to gain access to modify or delete files.

The vulnerability of the Manage Bank Statement Handler component in the SAP S/4HANA software platform is related to the absence of a mechanism to prevent unintended modifications to resources during request processing. Exploiting this vulnerability could allow an attacker to gain access to modify...

4.3CVSS5.5AI score0.00265EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/10/23 4:15 p.m.2 views

CVE-2024-49701

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Theme Horse Mags.This issue affects Mags: from n/a through 1.1.6...

8.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/10/23 2:15 a.m.17 views

CVE-2024-31880

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user...

6.5CVSS0.00256EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/10/23 1:9 a.m.20 views

CVE-2024-31880 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user...

5.3CVSS0.00256EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/23 12:0 a.m.0 views

WordPress plugin Qi Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS6.6AI score0.02637EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/22 12:0 a.m.2 views

PT-2024-24264 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue is related to a denial of service under specific configurations, where the server may crash when using a specially crafted SQ...

6.5CVSS7.8AI score0.00256EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2024/10/21 2:14 p.m.11 views

CVE-2024-47756

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in kspciequirk This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition...

5.5CVSS7AI score0.00021EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/10/21 12:14 p.m.10 views

CVE-2024-47756 PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in kspciequirk This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition...

7AI score0.00021EPSS
Exploits0References8
OSV
OSV
added 2024/10/21 12:14 p.m.10 views

CVE-2024-47756 PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in kspciequirk This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition...

5.5CVSS6.2AI score0.00021EPSS
Exploits0References13
Debian CVE
Debian CVE
added 2024/10/21 12:14 p.m.7 views

CVE-2024-47756

In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in kspciequirk This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition...

5.5CVSS5.7AI score0.00021EPSS
Exploits0
OSV
OSV
added 2024/10/18 10:15 a.m.3 views

CVE-2024-49243

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Jon Vincent Mendoza Dynamic Elementor Addons allows PHP Local File Inclusion.This issue affects Dynamic Elementor Addons: from n/a through 1.0.0...

8.8CVSS5.8AI score0.03008EPSS
Exploits0References1
OSV
OSV
added 2024/10/17 10:15 p.m.0 views

UBUNTU-CVE-2023-26785

MariaDB v10.5 was discovered to contain a remote code execution RCE vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed...

9.8CVSS6.4AI score0.63023EPSS
Exploits2References3
Vulnrichment
Vulnrichment
added 2024/10/15 12:0 a.m.9 views

CVE-2024-35584

SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1 to 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to...

8.7AI score0.85174EPSS
Exploits2References3
OSV
OSV
added 2024/10/08 4:15 a.m.4 views

CVE-2024-45282

Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications leading to integrity violations...

5.3CVSS5.8AI score0.00265EPSS
Exploits0References2
NVD
NVD
added 2024/10/08 4:15 a.m.12 views

CVE-2024-45282

Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications leading to integrity violations...

5.3CVSS0.00265EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/07 12:0 a.m.4 views

PT-2024-7173 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA affected versions not specified Description: The issue is related to the Manage Bank Statement Handler component of the SAP S/4HANA platform. It is caused by the lack of a mechanism to prevent unintended changes to resources when...

5.3CVSS6.8AI score0.00265EPSS
Exploits0References9
Schneier on Security
Schneier on Security
added 2024/10/01 11:7 a.m.7 views

Hacking ChatGPT by Planting False Memories into Its Data

This vulnerability hacks a feature that allows ChatGPT to have long-term memory, where it uses information from past conversations to inform future conversations with that same user. A researcher found that he could use that feature to plant "false memories" into that context window that could...

6.7AI score
Exploits0
ICS
ICS
added 2024/10/01 6:0 a.m.27 views

Optigo Networks ONS-S8 - Spectra Aggregation Switch

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Optigo Networks Equipment: ONS-S8 - Spectra Aggregation Switch Vulnerabilities: Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion', Weak...

9.8CVSS10AI score0.00134EPSS
Exploits0References10
Rows per page
Query Builder