Lucene search
+L

5629 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.8 views

The vulnerability of Hitachi Application Server lies in its inability to protect the structure of web pages, allowing attackers to execute arbitrary code.

The vulnerability of Hitachi Application Server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using uncertain vectors...

6.1CVSS6.8AI score0.00754EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2021/07/13 12:0 a.m.20 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00992EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.12 views

The vulnerability of the `translate` function in the Ruby on Rails software platform translation_helper.rb allows attackers to exploit it to compromise the integrity of web pages’ structures.

The vulnerability of the translate function in the Ruby on Rails software platform, translationhelper.rb, is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows an attacker to compromise data integrity...

6.1CVSS6.8AI score0.02372EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.8 views

The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to execute arbitrary code and disclose sensitive information.

The vulnerability in the web interface of the Cisco Identity Services Engine exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information...

6.4CVSS5.8AI score0.00594EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/07/13 12:0 a.m.52 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00975EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.7 views

The vulnerability of the Sulu content management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Sulu content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

8.4CVSS5.4AI score0.00665EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/07/12 12:0 a.m.83 views

Apple macOS ImageIO PICT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS5.2AI score0.01142EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/07/07 12:0 a.m.84 views

Siemens Simcenter Femap modfem File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score0.01336EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/07/01 12:0 a.m.14 views

Shanghai Topmind Information Technology Co., Ltd. ThinkPHP suffers from a deserialization vulnerability

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. ThinkPHP has a deserialization vulnerability that can be exploited by attackers to gain server control privileges...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/07/01 12:0 a.m.18 views

Unauthorized access vulnerability in the interlib library cluster management system (CNVD-2021-49125)

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. The...

6.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.9 views

The vulnerability of the get_topic_info() function (sys/CODOF/Forum/Topic.php) in the Codoforum forum creation software allows a violator to execute arbitrary code.

The vulnerability of the gettopicinfo function sys/CODOF/Forum/Topic.php in the Codoforum forum creation software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system remotely...

10CVSS8.3AI score0.04915EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.8 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken to protect the website structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser using ...

6.4CVSS6AI score0.01397EPSS
SaveExploits0References3Affected Software2
CNVD
CNVD
added 2021/06/28 12:0 a.m.28 views

SQL Injection Vulnerability in Guangzhou Tutron interlib Library Cluster Management System

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. There i...

7.5AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/06/25 12:0 a.m.44 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00952EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/25 12:0 a.m.82 views

Apple macOS AudioToolboxCore AAC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the AudioToolboxCore library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists with...

3.3CVSS4.1AI score0.00878EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/25 12:0 a.m.42 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00935EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/25 12:0 a.m.42 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.01168EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/25 12:0 a.m.45 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00952EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/25 12:0 a.m.45 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.009EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/25 12:0 a.m.53 views

Apple macOS ImageIO PCT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS3.6AI score0.01196EPSS
SaveExploits0References1
Rows per page
Query Builder