Lucene search
+L

5566 matches found

BDU FSTEC
BDU FSTEC
added 2024/08/05 12:0 a.m.9 views

The vulnerability of the microprogramming software of TP-Link TL-SG1016DE switches stems from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of TP-Link TL-SG1016DE switch’s microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.00317EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/01 12:0 a.m.9 views

The vulnerability of the Zohocorp ManageEngine Exchange Reporter Plus software, which is related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

8.7CVSS5.9AI score0.03052EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/08/01 12:0 a.m.7 views

The vulnerability of the Dashboard component of the software control panel allows for the insertion of arbitrary HTML code by attackers, enabling them to implement applications through IBM App Connect Enterprise.

The vulnerability of the Dashboard component of the software platform for integrating IBM App Connect Enterprise applications exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code remotely...

5.5CVSS5.6AI score0.0033EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2024/07/31 9:19 a.m.29 views

CVE-2024-42115

In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2freeinode During the stress testing of the jffs2 file system,the following abnormal printouts were found: 2430.649000 Unable to handle kernel paging request at virtual address...

5.5CVSS7.1AI score0.0025EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/07/31 12:0 a.m.6 views

The vulnerability of the Archer Platform’s system for creating and managing business applications lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Archer Platform system for creating and managing business applications is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to execute arbitrary HTML or JavaScript code...

8.5CVSS5.8AI score0.00327EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/31 12:0 a.m.11 views

The vulnerability of the Archer Platform’s system for creating and managing business applications lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Archer Platform system for creating and managing business applications is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to execute arbitrary HTML or JavaScript code...

7.1CVSS5.8AI score0.00294EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/31 12:0 a.m.11 views

The vulnerability of the 1Panel Linux server control panel, related to the lack of security measures for SQL query structures, allows attackers to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the 1Panel Linux server’s control panel is related to the lack of measures taken to protect the SQL query structure when processing the orderBy parameter. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information and execute arbitra...

10CVSS6AI score0.29396EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2024/07/30 7:46 a.m.44 views

CVE-2024-42156

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Wipe copies of clear-key structures on failure Wipe all sensitive data from stack for all IOCTLs, which convert a clear-key into a protected- or secure-key...

4.1CVSS5AI score0.00214EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/07/30 7:46 a.m.34 views

CVE-2024-42111 btrfs: always do the basic checks for btrfs_qgroup_inherit structure

In the Linux kernel, the following vulnerability has been resolved: btrfs: always do the basic checks for btrfsqgroupinherit structure BUG Syzbot reports the following regression detected by KASAN: BUG: KASAN: slab-out-of-bounds in btrfsqgroupinherit+0x42e/0x2e20 fs/btrfs/qgroup.c:3277 Read of si...

0.00206EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/07/30 7:46 a.m.38 views

CVE-2024-42111

In the Linux kernel, the following vulnerability has been resolved: btrfs: always do the basic checks for btrfsqgroupinherit structure BUG Syzbot reports the following regression detected by KASAN: BUG: KASAN: slab-out-of-bounds in btrfsqgroupinherit+0x42e/0x2e20 fs/btrfs/qgroup.c:3277 Read of si...

6.3CVSS5.5AI score0.00206EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/07/30 12:0 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an invalid pointer dereference in the clk:sunxi-ng module when sunxiccuprobe calls hwtoccucommon,...

5.5CVSS6.4AI score0.00239EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/07/29 12:0 a.m.12 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by sending a specially crafted CSV file...

6.4CVSS6.2AI score0.00506EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/07/26 12:0 a.m.9 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.7CVSS5.9AI score0.00341EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/25 12:0 a.m.13 views

The vulnerability of the setgeneral.php file in the Tailoring Management System (TMS) allows a hacker to execute arbitrary SQL code, gain unauthorized access to read, modify, or delete data, or cause service interruptions.

The vulnerability of the setgeneral.php file in the Tailoring Management System TMS involves a lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code, gain unauthorized access to read, modify, or delete data, or cause ...

6.5CVSS7AI score0.00591EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/25 12:0 a.m.10 views

The vulnerability of the Cacti network monitoring software lies in the lack of security measures taken to protect the structure of the web page. This allows attackers to execute cross-site scripting attacks.

The vulnerability of the Cacti network monitoring software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting using a specially crafted page...

8.7CVSS7.6AI score0.00913EPSS
SaveExploits1References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/25 12:0 a.m.25 views

The vulnerability of the Sidekiq framework for handling background tasks in web applications relates to the lack of security measures for protecting the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Sidekiq framework for handling background tasks in web applications is related to the lack of security measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.5CVSS5.8AI score0.00594EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2024/07/24 12:0 a.m.6 views

Matter 安全漏洞

Matter is a unified open source application layer connectivity standard open sourced by the Connectivity Standards Alliance. Designed to enable developers and device manufacturers to connect and build reliable, secure ecosystems and improve compatibility between connected home devices. A security...

3.5CVSS6.5AI score0.00208EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/24 12:0 a.m.12 views

The vulnerability of the Arfa-CMS content management system lies in the lack of measures taken to protect the SQL query structure, allowing for the execution of arbitrary SQL queries.

The vulnerability of the Arfa-CMS content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

8.5CVSS5.9AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/23 12:0 a.m.8 views

The vulnerability of the HTTP traffic filtering module in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) allows attackers to enhance their privileges and execute cross-site scripting attacks.

The vulnerability of the HTTP traffic filtering module in Trend Micro InterScan Web Security Virtual Appliance IWSVA is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and carry out...

5.5CVSS5.8AI score0.00375EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/07/23 12:0 a.m.11 views

The vulnerability of the TinyMCE formatted text editor arises from the lack of measures taken to protect the structure of web pages. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the TinyMCE formatted text editor exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.4CVSS6.6AI score0.00529EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder