Lucene search
+L

899 matches found

CNVD
CNVD
added 2022/04/13 12:0 a.m.47 views

Siemens SCALANCE W-1700 (11ac) Series Denial of Service Vulnerability

The SCALANCE W-1700 products are IEEE 802.11 compliant wireless communication devices. a denial of service vulnerability exists in the Siemens SCALANCE W-1700 11ac series, which can be exploited by attackers to trigger a denial of service condition...

7.8CVSS4.5AI score0.0091EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.6 views

Siemens SCALANCE 输入验证错误漏洞

The SCALANCE W-1700 products are IEEE 802.11 compliant wireless communication devices. a denial of service vulnerability exists in the Siemens SCALANCE W-1700 11ac series, which can be exploited by attackers to trigger a denial of service condition...

7.8CVSS7.3AI score0.0091EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.46 views

Siemens SCALANCE竞争条件问题漏洞

The SCALANCE W-1700 products are IEEE 802.11 compliant wireless communication devices. a denial of service vulnerability exists in the Siemens SCALANCE W-1700 11ac series, which can be exploited by an attacker to cause the entire device to crash for competing conditions...

5.7CVSS5.8AI score0.00227EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.7 views

Siemens SCALANCE输入验证错误漏洞

The SCALANCE W-1700 products are IEEE 802.11 compliant wireless communication devices. a denial of service vulnerability exists in the Siemens SCALANCE W-1700 11ac series that could be exploited by an attacker to cause a denial of service condition affecting only the port...

6.5CVSS6.5AI score0.00354EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2022/04/04 12:0 a.m.12 views

WordPress Weblizar Pin It Button On Image Hover And Post plugin <= 3.2 - Arbitrary Settings Update vulnerability

Arbitrary Settings Update vulnerability discovered by Jan w Oleju in WordPress Weblizar Pin It Button On Image Hover And Post plugin versions = 3.2. Solution Update the WordPress Weblizar Pin It Button On Image Hover And Post plugin to the latest available version at least 3.4...

2.2AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/03/21 12:0 a.m.10 views

WordPress Easy Social Icons plugin <= 3.2.0 - Unauthenticated Arbitrary Icon Deletion vulnerability

Unauthenticated Arbitrary Icon Deletion vulnerability discovered by Jan w Oleju in WordPress Easy Social Icons versions plugin = 3.2.0. Solution Update the WordPress Easy Social Icons plugin to the latest available version at least 3.2.1...

4AI score
SaveExploits0References2Affected Software1
zdt
zdt
added 2022/02/28 12:0 a.m.5439 views

Hikvision IP Camera Unauthenticated Command Injection Exploit

This Metasploit module exploits an unauthenticated command injection in a variety of Hikvision IP cameras CVE-2021-36260. The module inserts a command into an XML payload used with an HTTP PUT request sent to the /SDK/webLanguage endpoint, resulting in command execution as the root user. This...

9.8CVSS0.99869EPSS
SaveExploits24
Metasploit
Metasploit
added 2022/02/26 5:42 p.m.680 views

Hikvision IP Camera Unauthenticated Command Injection

This module exploits an unauthenticated command injection in a variety of Hikvision IP cameras CVE-2021-36260. The module inserts a command into an XML payload used with an HTTP PUT request sent to the /SDK/webLanguage endpoint, resulting in command execution as the root user. This module...

9.8CVSS9.4AI score0.99869EPSS
SaveExploits24
Patchstack
Patchstack
added 2022/02/15 12:0 a.m.20 views

WordPress Relevanssi – A Better Search plugin <= 4.14.5 - Unauthorized AJAX Calls vulnerability

Unauthorized AJAX Calls vulnerability discovered by Jan w Oleju in WordPress Relevanssi – A Better Search plugin versions = 4.14.5. Solution Update the WordPress Relevanssi – A Better Search plugin to the latest available version at least 4.14.6...

2.9AI score
SaveExploits0References2Affected Software1
HackRead
HackRead
added 2022/02/14 4:50 p.m.18 views

Team Xecuter hacker gets 40 months in prison for Nintendo Switch hacks

By Waqas Gary W. Bowser, aka GaryOPA 52 was arrested for his role in creating/selling illegal devices and software that… This is a post from HackRead.com Read the original post: Team Xecuter hacker gets 40 months in prison for Nintendo Switch hacks...

2.5AI score
SaveExploits0
OSV
OSV
added 2022/02/02 12:1 a.m.16 views

GHSA-FR6Q-JV7J-35G3 Path Traversal in w-zip

Path Traversal in NPM w-zip prior to 1.0.12...

9.8CVSS9.3AI score0.01623EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/02/02 12:1 a.m.27 views

Path Traversal in w-zip

Path Traversal in NPM w-zip prior to 1.0.12...

9.8CVSS3.1AI score0.01623EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2022/02/01 1:15 p.m.23 views

CVE-2022-0401

Path Traversal in NPM w-zip prior to 1.0.12...

9.8CVSS0.01623EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/02/01 1:15 p.m.8 views

CVE-2022-0401

Path Traversal in NPM w-zip prior to 1.0.12...

9.8CVSS7.8AI score0.01623EPSS
SaveExploits1References3
Prion
Prion
added 2022/02/01 1:15 p.m.21 views

Path traversal

Path Traversal in NPM w-zip prior to 1.0.12...

7.5CVSS9.3AI score0.01623EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/02/01 12:28 p.m.67 views

CVE-2022-0401

CVE-2022-0401 affects the npm package w-zip : a path traversal flaw during archive extraction exists in versions prior to 1.0.12. Root cause: improper handling of extraction paths enables directory traversal. Impact: as described in the entry, path traversal could lead to unauthorized file access...

9.8CVSS9.4AI score0.01623EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/02/01 12:28 p.m.32 views

CVE-2022-0401 Path Traversal in yuda-lyu/w-zip

Path Traversal in NPM w-zip prior to 1.0.12...

9.4CVSS9.6AI score0.01623EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/01 12:28 p.m.23 views

CVE-2022-0401 Path Traversal in yuda-lyu/w-zip

Path Traversal in NPM w-zip prior to 1.0.12...

9.4CVSS9.2AI score0.01623EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/02/01 12:0 a.m.6 views

W-Zip 路径遍历漏洞

W-Zip is a Zip and 7Z compression utility. A path traversal vulnerability exists in w-zip that stems from path traversal in NPM w-zip before 1.0.12...

9.8CVSS8.3AI score0.01623EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2022/01/31 12:0 a.m.13 views

WordPress EasyJobs plugin <= 1.4.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Jan w Oleju in WordPress EasyJobs plugin versions = 1.4.7. Solution Update the WordPress EasyJobs plugin to the latest available version at least 1.4.8...

1.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder