Lucene search
K

15 matches found

NVD
NVD
added 2025/11/10 2:15 a.m.5 views

CVE-2025-12925

A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. Impacted is the function getAll/addDic/getAllDic/deleteDic of the file src/main/java/com/rymcu/forest/lucene/api/UserDicController.java. The manipulation results in missing authorization. The attac...

9.8CVSS0.0007EPSS
Exploits1References5
OSV
OSV
added 2025/11/10 2:15 a.m.1 views

CVE-2025-12925

A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. Impacted is the function getAll/addDic/getAllDic/deleteDic of the file src/main/java/com/rymcu/forest/lucene/api/UserDicController.java. The manipulation results in missing authorization. The attac...

9.8CVSS5.5AI score
Exploits0References5
EUVD
EUVD
added 2025/11/10 1:32 a.m.2 views

EUVD-2025-38727

A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. Impacted is the function getAll/addDic/getAllDic/deleteDic of the file src/main/java/com/rymcu/forest/lucene/api/UserDicController.java. The manipulation results in missing authorization. The attac...

7.5CVSS6.3AI score0.0007EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/10 12:0 a.m.3 views

PT-2025-45587

Name of the Vulnerable Software and Affected Versions rymcu forest affected versions not specified Description A security flaw exists due to missing authorization. The issue affects the getAll/addDic/getAllDic/deleteDic function within the...

7.5CVSS7.2AI score0.0007EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/05/22 3:56 p.m.6 views

CVE-2020-0017

In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8...

4.4CVSS6.3AI score0.00034EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:2 a.m.2 views

CVE-2018-9375

In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.9AI score0.00041EPSS
Exploits0References1
OSV
OSV
added 2025/01/17 11:15 p.m.1 views

CVE-2018-9375

In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00041EPSS
Exploits0References1
NVD
NVD
added 2025/01/17 11:15 p.m.8 views

CVE-2018-9375

In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00041EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/17 11:7 p.m.8 views

CVE-2018-9375

In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00041EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/17 12:0 a.m.2 views

PT-2025-1332 · Unknown · Userdictionaryprovider

Name of the Vulnerable Software and Affected Versions: UserDictionaryProvider affected versions not specified Description: The issue is related to multiple functions in UserDictionaryProvider.java, where a confused subordinate could potentially allow adding and removing words from the user...

7.8CVSS8.9AI score0.00041EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/09/18 12:0 a.m.1 views

CIRCUTOR Q-SMT 安全漏洞

CIRCUTOR Q-SMT is an industrial hardware device from CIRCUTOR, Inc. A security vulnerability exists in CIRCUTOR Q-SMT version 1.0.4, which stems from an attacker's ability to construct a dictionary of potential users and inspect server responses without knowing the current user in the web...

5.3CVSS6.7AI score0.00239EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2021/12/16 12:0 a.m.2 views

Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument on the command line; a long (2) WNSEARCHDIR (3) WNHOME or (4) WNDBVERSION environment variable; or (5) a user-supplied dictionary (aka data file). NOTE: since WordNet itself does not run with special privileges this issue only crosses privilege boundaries when WordNet is invoked as a third party component.

...

10CVSS6.7AI score0.02927EPSS
Exploits0
myhack58
myhack58
added 2009/05/10 12:0 a.m.13 views

Video chat rooms password cracking techniques-vulnerability warning-the black bar safety net

Reprint when you didn't see the picture, we only will look at. Because the working relationship, and I qq every Monday to Friday online, but very few people add me as a friend, is probably the old bar, after all, are 2 4, online Dating that period of burning passion had left me far away. But that...

6.8AI score
Exploits0
OSV
OSV
added 2008/09/04 5:41 p.m.1 views

DEBIAN-CVE-2008-3908

Multiple buffer overflows in Princeton WordNet wn 3.0 allow context-dependent attackers to execute arbitrary code via 1 a long argument on the command line; a long 2 WNSEARCHDIR, 3 WNHOME, or 4 WNDBVERSION environment variable; or 5 a user-supplied dictionary aka data file. NOTE: since WordNet...

10CVSS8.2AI score0.02927EPSS
Exploits0References1
OSV
OSV
added 2008/09/04 5:41 p.m.2 views

AZL-7423 CVE-2008-3908 affecting package wordnet for versions less than 3.0-38

Multiple buffer overflows in Princeton WordNet wn 3.0 allow context-dependent attackers to execute arbitrary code via 1 a long argument on the command line; a long 2 WNSEARCHDIR, 3 WNHOME, or 4 WNDBVERSION environment variable; or 5 a user-supplied dictionary aka data file. NOTE: since WordNet...

10CVSS6.3AI score0.02927EPSS
Exploits0References1
Rows per page
Query Builder