Lucene search
K

213 matches found

CNNVD
CNNVD
added 2025/07/20 12:0 a.m.1 views

D-Link DIR-513 安全漏洞

The D-Link DIR-513 is a wireless router device manufactured by D-Link. The D-Link DIR-513 version 1.10 suffers from a buffer overflow vulnerability that originates from improper handling of the curTime parameter in the sprintf function in the Boa Webserver component/goform/formSetWanNonLogin file...

9CVSS8AI score0.01985EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/06/27 12:19 p.m.3 views

CVE-2025-40910 Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses

Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally usi...

7.2AI score0.00258EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.1 views

Net::IP::LPM 安全漏洞

Net::IP::LPM is a Perl module by Tomas Podermanski, a personal developer, that implements the Longest Prefix Matching LPM algorithm. A security vulnerability exists in Net::IP::LPM version 1.10 that stems from not properly handling IP address leading zeros, which could lead to an access control...

6.5CVSS6.6AI score0.00258EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 9:37 a.m.2 views

CVE-2024-24798

Cross-Site Request Forgery CSRF vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10...

8.8CVSS6.3AI score0.0007EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:42 p.m.3 views

CVE-2022-27080

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

10CVSS8.3AI score0.12846EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:43 p.m.3 views

CVE-2021-40656

libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867...

8.8CVSS6.8AI score0.00352EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 5:2 p.m.5 views

CVE-2020-29593

An issue was discovered in Orchard before 1.10. The Media Settings Allowed File Types list field allows an attacker to add a XSS payload that will execute when users attempt to upload a disallowed file type, causing the error to display...

5.4CVSS6.1AI score0.00185EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 4:2 p.m.5 views

CVE-2020-17999

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

6.1CVSS6.9AI score0.01993EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 7:48 a.m.7 views

CVE-2019-13340

In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, CVE-2018-20520, and CVE-2019-13186...

6.1CVSS5.6AI score0.0024EPSS
Exploits4References1
RedhatCVE
RedhatCVE
added 2025/04/03 9:42 p.m.4 views

CVE-2025-30580

Improper Control of Generation of Code 'Code Injection' vulnerability in kellydiek DigiWidgets Image Editor digiwidgets-image-editor allows Remote Code Inclusion.This issue affects DigiWidgets Image Editor: from n/a through = 1.10...

10CVSS7.3AI score0.00502EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.1 views

WordPress plugin DigiWidgets Image Editor 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

10CVSS8.7AI score0.00502EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.1 views

D-Link DAP-1562 安全漏洞

The D-Link DAP-1562 is a wireless bridge from China's AUO D-Link. A security vulnerability exists in the D-Link DAP-1562 version 1.10, which stems from a stack buffer overflow in the HTTP Header Handler, which could lead to a remote attack. An attacker can exploit the vulnerability to execute...

9.8CVSS8.1AI score0.01397EPSS
Exploits1References7
NVD
NVD
added 2025/02/24 3:15 p.m.3 views

CVE-2025-27303

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themelogger Contact Form 7 Star Rating contact-form-7-star-rating allows Stored XSS.This issue affects Contact Form 7 Star Rating: from n/a through = 1.10...

5.9CVSS0.00078EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/14 12:44 p.m.13 views

CVE-2025-23788 WordPress Easy Filter Plugin <= 1.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roni Saha Easy Filter easy-filter allows Reflected XSS.This issue affects Easy Filter: from n/a through = 1.10...

7.1CVSS0.00131EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.1 views

WordPress Easy Filter Plugin <= 1.10 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Easy Filter versions = 1.10...

7.1CVSS6.1AI score0.00131EPSS
Exploits0Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/20 12:28 p.m.7 views

CVE-2024-11495 Buffer overflow in OllyDbg

Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due to lack of proper bounds checking...

7.5CVSS7.8AI score0.00068EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/20 12:0 a.m.2 views

Microsoft OllyDBG 缓冲区错误漏洞

Microsoft OllyDBG is an application from Microsoft Corporation USA. Microsoft's 32-bit assembly debugger. A buffer error vulnerability exists in Microsoft OllyDBG version 1.10 that stems from a lack of proper boundary checking. An attacker exploiting this vulnerability could execute arbitrary cod...

7.8CVSS7.3AI score0.00068EPSS
Exploits0References1
OSV
OSV
added 2024/09/13 12:1 p.m.24 views

RHSA-2017:2538 Red Hat Security Advisory: rh-nginx110-nginx security update

Bulletin has no description...

5.3CVSS7.5AI score0.91959EPSS
Exploits6References8
OSV
OSV
added 2024/07/30 8:15 p.m.1 views

CVE-2024-41611

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

9.8CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/07/30 12:0 a.m.1 views

PT-2024-29462 · D Link · Dir-860L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L REVA FIRMWARE versions 1.10 through 1.10.B04 Description: The issue concerns hardcoded credentials in the Telnet service, allowing remote login and execution of arbitrary commands. Recommendations: For versions 1.10 through...

9.8CVSS9.7AI score0.0047EPSS
Exploits0References4
Rows per page
Query Builder