Lucene search
+L

2004 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 5:07 a.m.•26 views

CVE-2010-2331

Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via a long HEAD request...

9.3CVSS9.4AI score0.05586EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:36 a.m.•21 views

CVE-2010-2440

Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary code via a crafted SRT file with a long line after a time range. NOTE: some of these details are obtained from third party information...

9.3CVSS8.3AI score0.05586EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:19 a.m.•23 views

CVE-2019-13278

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated user to run arbitrary commands on the device. The vulnerability can be exercised on the local intranet or remotely if...

10CVSS8.6AI score0.08783EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/15 1:11 a.m.•38 views

CVE-2025-43000

Under certain conditions Promotion Management Wizard PMW allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application...

7.9CVSS6.9AI score0.00157EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/13 1:15 a.m.•32 views

CVE-2025-43000

Under certain conditions Promotion Management Wizard PMW allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application...

7.9CVSS0.00157EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/05/13 12:17 a.m.•51 views

CVE-2025-43000 Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW)

Under certain conditions Promotion Management Wizard PMW allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application...

7.9CVSS0.00157EPSS
SaveExploits0References2
CVE
CVE
•added 2025/05/13 12:17 a.m.•66 views

CVE-2025-43000

Summary: CVE-2025-43000 corresponds to an information-disclosure vulnerability in SAP Business Objects Business Intelligence Platform related to the Promotion Management Wizard (PMW). Based on connected records, the issue involves an access-control weakness that could allow an attacker to access ...

7.9CVSS5.8AI score0.00157EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/05/13 12:17 a.m.•14 views

CVE-2025-43000 Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW)

Under certain conditions Promotion Management Wizard PMW allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application...

7.9CVSS5.8AI score0.00157EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•12 views

CVE-2025-43000: Missing Authorization

Under certain conditions Promotion Management Wizard PMW allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application...

7.9CVSS5.8AI score0.00157EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•19 views

PT-2025-20813 · Unknown · Promotion Management Wizard

Name of the Vulnerable Software and Affected Versions: Promotion Management Wizard PMW affected versions not specified Description: The issue allows an attacker to access restricted information under certain conditions. This has a high impact on confidentiality, with a low impact on the integrity...

7.9CVSS6AI score0.00157EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2025/05/09 2:15 a.m.•20 views

CVE-2025-4452

A vulnerability was found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this issue is the function formSetWizard2. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure. Thi...

9.8CVSS8.2AI score0.03041EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/05/09 12:00 a.m.•20 views

D-Link DIR-619L security vulnerabilities

The D-Link DIR-619L is a cost-effective wireless router designed for home office Internet needs. The D-Link DIR-619L suffers from a buffer overflow vulnerability that stems from the formSetEasyWizard function mishandling the curTime parameter, which can be exploited by an attacker to submit a...

9.8CVSS8.3AI score0.03041EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/05/09 12:00 a.m.•19 views

D-Link DIR-619L security vulnerabilities

The D-Link DIR-619L is a cost-effective wireless router designed for home office Internet needs. The D-Link DIR-619L suffers from a buffer overflow vulnerability that stems from the improper handling of the wanconnected parameter in the formEasySetupWizard3 function, which can be exploited by an...

9.8CVSS8.5AI score0.03041EPSS
SaveExploits0References6
Citrix
Citrix
•added 2025/05/09 12:00 a.m.•36 views

Citrix Provisioning - Configuration Wizard fails after upgrade to 2503

PVS Configuration Wizard fails with errors after PVS upgrade to version 2503. ConfigWizard.log located in C:\ProgramData\Citrix\Provisioning Services\Log on the PVS Server shows: ERROR:SqlException caught, Number = 207, Message = Invalid column name 'isXsProxyConfigRequired'. Updating server...

7.7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/05/08 12:00 a.m.•16 views

PT-2025-20450 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.04B04 Description: A critical issue was found in the function formSetEasy Wizard, where the manipulation of the argument curTime leads to a buffer overflow. This issue can be exploited remotely. The vendor was notifi...

9.8CVSS8.2AI score0.03041EPSS
SaveExploits0References16
vulnersOsv
vulnersOsv
•added 2025/05/07 4:48 p.m.•3 views

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: SNYK:JAVA-ORGGRAYLOG2-10116752...

8CVSS5.8AI score0.00287EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/05/07 3:29 p.m.•3 views

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: MEND:CVE-2025-46827...

8CVSS5.8AI score0.00287EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/05/07 3:29 p.m.•6 views

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.1.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=1.0.0, <=6.0.0) +12 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=6.0.13)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2025-46827 Source advisory: MEND:CVE-2025-46827...

8CVSS5.8AI score0.00287EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/05/07 3:27 p.m.•3 views

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (6.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.0.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.0.0, <=6.0.13)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.13 Source cves: CVE-2025-46827 Source advisory: GHSA-76VF-MPMX-777J...

8CVSS5.8AI score0.00287EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/05/07 3:27 p.m.•3 views

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-46827 Source advisory: OSV:GHSA-76VF-MPMX-777J...

8CVSS5.8AI score0.00287EPSS
SaveExploits0
Rows per page
Query Builder