Lucene search
K

6 matches found

Cvelist
Cvelist
added 2026/05/29 12:11 p.m.28 views

CVE-2026-9509 Uncaught exception vulnerability in Suprema's BioStar

An unhandled exception in Suprema BioStar 2 Server, versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service DoS by sending HTTP POST requests to the ‘/api/migration’ endpoint. This request triggers a failure that halts critical processes,...

8.7CVSS0.00351EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/08/26 12:0 a.m.3 views

WordPress plugin WP User Manager 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6.5AI score0.00174EPSS
Exploits0References2
OSV
OSV
added 2024/04/12 11:7 a.m.2 views

OESA-2024-1413 libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

7.5CVSS6.9AI score0.01972EPSS
Exploits1References2
vulnersOsv
vulnersOsv
added 2023/08/24 3:31 p.m.2 views

cn.aradin:aradin-spring-actuator-starter (>=1.0.1 <=1.0.3), cn.fscode.common:common-kafka-spring-boot-starter (=0.0.1) +422 more potentially affected by CVE-2023-34040 via org.springframework.kafka:spring-kafka (>=2.8.1 <=2.9.10)

org.springframework.kafka:spring-kafka MAVEN version =2.8.1, =1.0.1, =0.0.2, =2.7.7.5, =2.7.0.0, =1.1.0, =1.0.3, =1.0.3, =3.16.2, =0.0.1, =0.0.8 - com.argusoft:medplatlms =0.0.1 - com.brihaspathee.zeus:account-processor =0.0.1 - com.brihaspathee.zeus:data-transform-service =0.0.1 and more Source...

7.8CVSS7.2AI score0.02162EPSS
Exploits2
OSV
OSV
added 2022/07/05 10:15 a.m.4 views

AZL-10059 CVE-2022-2309 affecting package python-lxml for versions less than 4.9.1-1

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.5AI score0.01972EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/07/05 12:0 a.m.2 views

lxml 和 libxml2 代码问题漏洞

lxml is lxml personal developer can interact with Python for locating elements in Html software . libxml2 is an open source library for parsing XML documents . It is written in C, and can be called for a variety of languages, such as C, C++, XSH. A code issue vulnerability exists in lxml and...

7.5CVSS6.5AI score0.01972EPSS
Exploits1References15
Rows per page
Query Builder