Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:53 a.m.5 views

CVE-2020-10211

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive...

9.8CVSS8.5AI score0.01677EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:36 a.m.7 views

CVE-2020-12498

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

7.8CVSS7.8AI score0.00682EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.3 views

Apple macOS Tahoe 安全漏洞

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from a Symbolic Link Validation Insufficiency vulnerability that can be exploited by an attacke...

5.5CVSS6.5AI score0.00026EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/05 12:0 a.m.2 views

2N Access Commander 安全漏洞

2N Access Commander is an access control solution from 2N. A security vulnerability exists in 2N Access Commander version 3.1.1.2 and prior versions, which stems from the presence of a Data Authenticity Validation Insufficiency vulnerability that allows an attacker to elevate its privileges and...

7.2CVSS6.7AI score0.00226EPSS
Exploits0References1
CNVD
CNVD
added 2024/08/22 12:0 a.m.2 views

Google Chrome Insufficient Data Validation Vulnerability

Google Chrome is a free web browser developed by Google. It is the world's largest browser in terms of market share due to its speed, security, simplicity, multi-platform support and built-in privacy protection. Google Chrome suffers from a Data Validation Insufficiency vulnerability, which can b...

8.8CVSS6.9AI score0.00694EPSS
Exploits0References1
Veracode
Veracode
added 2022/10/11 5:10 p.m.26 views

Arbitrary Code Execution

kitty is vulnerable to arbitrary code execution. The vulnerability exists due to insufficient validation in the desktop notification escape sequence which allows an attacker to execute arbitrary codes in the system...

7.8CVSS8.3AI score0.01325EPSS
Exploits1References10Affected Software1
CNNVD
CNNVD
added 2022/08/02 12:0 a.m.1 views

National Health Insurance 缓冲区错误漏洞

National Health Insurance NHI is a health insurance program health insurance card in Taiwan, China. A security vulnerability exists in National Health Insurance that stems from insufficient validation of network packet header lengths and a stack-based buffer overflow, which could be exploited by ...

7.8CVSS8AI score0.00067EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/06/11 12:0 a.m.0 views

Intel Core Processors 输入验证错误漏洞

Intel Core Processors is an Intel Core family of central processing units CPUs from Intel Corporation. A security vulnerability exists in Intel Core Processors, which stems from a Pointer Validation Insufficiency vulnerability in AMD Graphics Driver for Windows 10, which could lead to the executi...

7.8CVSS7.8AI score0.00239EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/01/07 12:0 a.m.2 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A data validation insufficiency vulnerability exists in networking in versions prior to Google Chrome 87.0.4280.141. No detailed vulnerability details are provided at this time...

8.8CVSS7.5AI score0.00373EPSS
Exploits0References11
CNVD
CNVD
added 2020/09/22 12:0 a.m.2 views

Google Chrome Extension Policy Validation Insufficiency Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An insufficient extension policy validation vulnerability exists in versions of Google Chrome prior to 85.0.4183.121. An attacker can exploit this vulnerability by...

9.6CVSS9.1AI score0.01352EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2019/10/07 12:0 a.m.2 views

PT-2019-5143 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.12 Description: The issue allows x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux. This is related to an...

9.8CVSS7.9AI score0.06468EPSS
Exploits8References186
Cvelist
Cvelist
added 2019/05/15 6:45 p.m.18 views

CVE-2019-1735 Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI...

4.4CVSS7.9AI score0.00095EPSS
Exploits0References2
Rows per page
Query Builder