Lucene search
+L

14407 matches found

OSV
OSV
•added 2022/01/20 10:15 p.m.•15 views

CVE-2021-46330

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...

5.5CVSS5.8AI score0.00717EPSS
SaveExploits1References1
OSV
OSV
•added 2022/01/20 10:15 p.m.•14 views

CVE-2021-46332

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter...

7.8CVSS7.1AI score0.00953EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/01/17 12:00 a.m.•82 views

Checkmk Cross-Site Scripting Vulnerability (CNVD-2022-21235)

Checkmk is an editor. A security vulnerability exists in Checkmk, which can be exploited by remote, authenticated attackers to inject arbitrary JavaScript into view headers via the javascript: URL...

5.4CVSS3.6AI score0.01078EPSS
SaveExploits1References1
OSV
OSV
•added 2022/01/15 5:15 p.m.•44 views

CVE-2020-28919

A stored cross site scripting XSS vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title...

5.4CVSS5.2AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2022/01/15 4:34 p.m.•49 views

CVE-2020-28919

A stored cross site scripting XSS vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title...

5.1AI score0.01078EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/15 12:00 a.m.•6 views

CVE-2020-28919: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title...

5.4CVSS5.2AI score0.01078EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/15 12:00 a.m.•19 views

PT-2022-8911 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 1.6.0x prior to 1.6.0p19 Description: A stored cross site scripting XSS issue allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title. Recommendations: For Checkmk versions...

5.4CVSS5.8AI score0.01078EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2022/01/15 12:00 a.m.•22 views

Checkmk跨站脚本漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk, which can be exploited by remote, authenticated attackers to inject arbitrary JavaScript into view headers via the javascript: URL...

5.4CVSS5.8AI score0.01078EPSS
SaveExploits1References6
OSV
OSV
•added 2022/01/14 6:15 p.m.•13 views

CVE-2021-24046

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0...

5.3CVSS5.8AI score0.00698EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/14 6:15 p.m.•8 views

CVE-2021-24046

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0...

5.3CVSS6AI score0.00698EPSS
SaveExploits0References2
NVD
NVD
•added 2022/01/14 6:15 p.m.•26 views

CVE-2021-24046

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0...

5.3CVSS0.00698EPSS
SaveExploits0References1
Prion
Prion
•added 2022/01/14 6:15 p.m.•22 views

Code injection

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0...

5CVSS5.2AI score0.00698EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
•added 2022/01/14 6:10 p.m.•33 views

CVE-2021-24046

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0...

5.5AI score0.00698EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/14 6:10 p.m.•56 views

CVE-2021-24046

CVE-2021-24046 describes a logic flaw in Ray-Ban Stories device software that allows certain parameters, notably the video capture duration limit, to be modified through the Facebook View application. Affected are device software versions prior to 2107460.6810.0. The connected sources consistentl...

5.3CVSS5.2AI score0.00698EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/14 12:00 a.m.•3 views

CVE-2021-24046: Modification of Assumed-Immutable Data (MAID)

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0...

5.3CVSS5.7AI score0.00698EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/01/14 12:00 a.m.•15 views

Ray-Ban Stories安全漏洞

Ray-Ban Stories is a smart glasses from ray-ban. A security vulnerability exists in Ray-Ban Stories that allows some parameters, such as video capture duration limits, to be modified via the Facebook View application. This issue affects device software versions prior to 2107460.6810.0...

5.3CVSS5.7AI score0.00698EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/01/14 12:00 a.m.•18 views

SAP NetWeaver AS 安全漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. A security vulnerability exists in SAP NetWeaver AS that originates from an attacker authenticating as a regular user in SAP NetWeaver AS for ABAP and...

4.3CVSS5.2AI score0.00631EPSS
SaveExploits0References3
OSV
OSV
•added 2022/01/13 10:15 p.m.•15 views

CVE-2021-34937

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score0.01937EPSS
SaveExploits0References2
NVD
NVD
•added 2022/01/13 10:15 p.m.•40 views

CVE-2021-34938

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS0.01937EPSS
SaveExploits0References2
NVD
NVD
•added 2022/01/13 10:15 p.m.•42 views

CVE-2021-34941

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS0.02041EPSS
SaveExploits0References2
Rows per page
Query Builder