Lucene search
+L

7326 matches found

CNNVD
CNNVD
added 2020/12/17 12:00 a.m.14 views

Flexmonster Pivot Table & Charts Cross-Site Scripting Vulnerability

Flexmonster Pivot Table & Charts is a Javascript-based codebase for viewing, analyzing, and managing multidimensional data online from Flexmonster. A cross-site scripting vulnerability exists in Flexmonster Pivot Table & Charts 2.7.17, which originates in the "To Remote CSV" component under the...

6.1CVSS6.2AI score0.02088EPSS
SaveExploits3References4
RedHat Linux
RedHat Linux
added 2020/12/16 12:42 p.m.11 views

Mozilla: Heap buffer overflow in WebGL

The Mozilla Foundation Security Advisory describes this flaw as: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers...

8.8CVSS7.5AI score0.01876EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/12/16 9:47 a.m.22 views

Mozilla: Heap buffer overflow in WebGL

The Mozilla Foundation Security Advisory describes this flaw as: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers...

8.8CVSS7.5AI score0.01876EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/12/16 8:16 a.m.9 views

Mozilla: Heap buffer overflow in WebGL

The Mozilla Foundation Security Advisory describes this flaw as: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers...

8.8CVSS7.5AI score0.01876EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/12/16 7:57 a.m.10 views

Mozilla: Heap buffer overflow in WebGL

The Mozilla Foundation Security Advisory describes this flaw as: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers...

8.8CVSS7.5AI score0.01876EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/12/16 7:55 a.m.11 views

Mozilla: Heap buffer overflow in WebGL

The Mozilla Foundation Security Advisory describes this flaw as: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers...

8.8CVSS7.5AI score0.01876EPSS
SaveExploits0References5
Prion
Prion
added 2020/12/15 3:15 p.m.24 views

Design/Logic Flaw

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to encuntrustedcreatewaitqueue that uses a pointer queue that relies on UntrustedLocalMemcpy, which fails to validate where the pointer is located. This allows an attacker to write...

2.1CVSS4.2AI score0.00128EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/12/15 12:00 a.m.9 views

WordPress SabaiApps DirectoriesPro plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. Cross-site scripting vulnerability in WordPress SabaiApps DirectoriesPro plugin 1.3.45 and earlier...

6.1CVSS6.2AI score0.05483EPSS
SaveExploits3References1
OpenVAS
OpenVAS
added 2020/12/15 12:00 a.m.37 views

Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2020-2539)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.01369EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/15 12:00 a.m.13 views

UBUNTU-CVE-2020-26971

Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulnerability affects Firefox 84, Thunderbird 78.6, and Firefox ESR 78.6...

8.8CVSS7.5AI score0.01876EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2020/12/14 12:00 a.m.12 views

Craigrodway Classroombookings SQL Injection Vulnerability

Craigrodway Classroombookings is a Php, Mysql based school room booking system by Craigrodway Individual Developer. A SQL injection vulnerability exists in Craigrodway Classroombookings versions prior to 2.4.1, which originates from injecting SQL via the username field of a CSV file when adding a...

7.2CVSS7.1AI score0.01028EPSS
SaveExploits1References2
NVD
NVD
added 2020/12/11 5:15 a.m.22 views

CVE-2020-35132

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...

5.4CVSS5.2AI score0.01236EPSS
SaveExploits1References6
OSV
OSV
added 2020/12/11 5:15 a.m.31 views

CVE-2020-35132

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...

5.4CVSS5.7AI score
SaveExploits0References6
OSV
OSV
added 2020/12/11 5:15 a.m.1 views

DEBIAN-CVE-2020-35132

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...

5.4CVSS5.4AI score0.01236EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/11 5:15 a.m.10 views

UBUNTU-CVE-2020-35132

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...

5.4CVSS5.7AI score0.01236EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2020/12/11 5:15 a.m.33 views

CVE-2020-35132

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...

5.4CVSS5.9AI score0.01236EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2020/12/11 4:36 a.m.66 views

CVE-2020-35132

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...

5.4CVSS5.2AI score0.01236EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2020/12/11 4:36 a.m.82 views

CVE-2020-35132

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...

5.4CVSS5.2AI score0.01236EPSS
SaveExploits1
Veracode
Veracode
added 2020/12/11 3:15 a.m.29 views

Arbitrary Code Execution

tensorflow is vulnerable to arbitrary code execution. An attacker is able to execute arbitrary code on the host OS via a saved model by triggering the use of uninitialized values during code execution...

5.3CVSS5.1AI score0.00251EPSS
SaveExploits1References3Affected Software3
CNNVD
CNNVD
added 2020/12/11 12:00 a.m.14 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. Cross-site scripting vulnerability in WordPress SabaiApps DirectoriesPro plugin 1.3.45 and earlier...

6.1CVSS6.4AI score0.05483EPSS
SaveExploits3References6
Rows per page
Query Builder