Lucene search
+L
PrionMost viewed

213680 matches found

Prion
Prion
•added 2023/09/04 1:15 a.m.•37 views

Information disclosure

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS9.5AI score0.00988EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/09/03 12:15 p.m.•37 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Realwebcare WRC Pricing Tables plugin = 2.3.7 versions...

4.3CVSS4.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/09/01 7:15 p.m.•37 views

Design/Logic Flaw

Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap sandbox after the snap exits. Graphical terminal emulators like xterm, gnome-terminal and others...

7.5CVSS9.5AI score0.01447EPSS
SaveExploits1References4Affected Software2
Prion
Prion
•added 2023/08/30 5:15 p.m.•37 views

Design/Logic Flaw

In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function. The attacker can use this internal function to insert code into the Splunk platform installation directory. From there, a user can execute arbitrary code ...

6.5CVSS8.8AI score0.00845EPSS
SaveExploits0References2Affected Software2
Prion
Prion
•added 2023/08/30 5:15 p.m.•37 views

Buffer overflow

Tengda AC6 USAC6V1.0BRV15.03.05.16multiTD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler."...

7.5CVSS9.4AI score0.00682EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/08/30 4:15 p.m.•37 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in XootiX Side Cart Woocommerce Ajax plugin = 2.2 versions...

4.3CVSS4.8AI score0.00506EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/08/24 7:15 a.m.•37 views

Input validation

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

5CVSS5.3AI score0.00686EPSS
SaveExploits0References1Affected Software9
Prion
Prion
•added 2023/08/22 9:15 p.m.•37 views

Design/Logic Flaw

IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive...

5CVSS7.2AI score0.0117EPSS
SaveExploits0References4Affected Software2
Prion
Prion
•added 2023/08/22 7:16 p.m.•37 views

Design/Logic Flaw

An issue was discovered in comparedigest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.comparedigest...

2.6CVSS5.8AI score0.01301EPSS
SaveExploits1References4Affected Software2
Prion
Prion
•added 2023/08/22 7:16 p.m.•37 views

Memory corruption

GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function findabstractinstance in dwarf2.c...

1.9CVSS5.4AI score0.00636EPSS
SaveExploits1References5Affected Software2
Prion
Prion
•added 2023/08/22 7:16 p.m.•37 views

Buffer overflow

Buffer Overflow vulnerability in fmtentry function in progs/dumpentry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

4.3CVSS6.4AI score0.01738EPSS
SaveExploits1References8Affected Software1
Prion
Prion
•added 2023/08/17 11:15 p.m.•37 views

Default credentials

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users...

4CVSS6.4AI score0.07899EPSS
SaveExploits4References3Affected Software1
Prion
Prion
•added 2023/08/16 8:15 p.m.•37 views

Authentication flaw

Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to modify a security-critical UEFI variable without knowledge of the BIOS administrator...

1.4CVSS4.3AI score0.00238EPSS
SaveExploits0References1Affected Software111
Prion
Prion
•added 2023/08/15 5:15 p.m.•37 views

Buffer overflow

Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the stcoin function in mp4read.c...

1.9CVSS6.4AI score0.0059EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/08/15 4:15 p.m.•37 views

Path traversal

fs.mkdtemp and fs.mkdtempSync can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp API and the impact is a malicious actor could create an arbitrary directory. This vulnerability affects all users using the...

5CVSS6.9AI score0.0117EPSS
SaveExploits0References4Affected Software2
Prion
Prion
•added 2023/08/14 8:15 p.m.•37 views

Sql injection

The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks...

7.5CVSS9.8AI score0.01006EPSS
SaveExploits2References1Affected Software1
Prion
Prion
•added 2023/08/12 3:15 a.m.•37 views

Remote file inclusion

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wpabspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allowurlinclude is enabled. Local File...

7.5CVSS9.8AI score0.06958EPSS
SaveExploits7References3Affected Software1
Prion
Prion
•added 2023/08/11 8:15 p.m.•37 views

Hardcoded credentials

An issue was discovered in libacdes3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with access to backup or configuration files is able to decrypt encrypted values and retrieve sensitive information, e.g., the device root passwor...

5CVSS7.5AI score0.01357EPSS
SaveExploits2References4Affected Software6
Prion
Prion
•added 2023/08/11 7:15 a.m.•37 views

Code injection

GitPython before 3.1.32 does not block insecure non-multi options in clone and clonefrom. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439...

7.5CVSS9.4AI score0.05378EPSS
SaveExploits2References4Affected Software1
Prion
Prion
•added 2023/08/11 3:15 a.m.•37 views

Buffer overflow

Improper buffer restrictions in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

1.4CVSS4.4AI score0.00176EPSS
SaveExploits0References2
Prion
Prion
•added 2023/08/10 8:15 p.m.•37 views

Design/Logic Flaw

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

5.8CVSS9.5AI score0.99428EPSS
SaveExploits7References3Affected Software1
Prion
Prion
•added 2023/08/10 6:15 p.m.•37 views

Default credentials

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, a missing password confirmation allowed an attacker, after successfully steali...

4.4CVSS7.6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2023/08/08 7:15 p.m.•37 views

Stack overflow

TOTOLINK T10v2 5.9c.5061B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cstemodules/lan.so. Attackers can send crafted data in an MQTT packet, via the comment parameter, to control the return address and execute code...

7.5CVSS9.7AI score0.01547EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/08/08 6:15 p.m.•37 views

Privilege escalation

Windows System Assessment Tool Elevation of Privilege Vulnerability...

7.5CVSS9.2AI score0.01615EPSS
SaveExploits0References1Affected Software9
Prion
Prion
•added 2023/08/08 6:15 p.m.•37 views

Remote code execution

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

6CVSS6.8AI score0.00753EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/08/08 6:15 p.m.•37 views

Remote code execution

Microsoft Office Remote Code Execution Vulnerability...

4.4CVSS7.9AI score0.00985EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2023/08/08 6:15 p.m.•37 views

Remote code execution

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

4.6CVSS8.6AI score0.01463EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2023/08/08 6:15 p.m.•37 views

Remote code execution

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

7.5CVSS9.4AI score0.02465EPSS
SaveExploits0References1Affected Software9
Prion
Prion
•added 2023/08/08 6:15 p.m.•37 views

Remote code execution

Microsoft Excel Remote Code Execution Vulnerability...

4.4CVSS7.7AI score0.00985EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2023/08/08 11:15 a.m.•37 views

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Elegant themes Divi theme = 4.20.2 versions...

4.9CVSS5.2AI score0.00361EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/08/07 6:15 p.m.•37 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file catagorydata.php. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS7.9AI score0.00611EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/08/04 6:15 p.m.•37 views

Design/Logic Flaw

Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices...

7.5CVSS9.8AI score0.00826EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/08/04 12:15 p.m.•37 views

Information disclosure

VMware Horizon Server contains an information disclosure vulnerability. A malicious actor with network access may be able to access information relating to the internal network configuration...

5CVSS5AI score0.00489EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/08/03 4:15 p.m.•37 views

Privilege escalation

An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file...

5.8CVSS7.2AI score0.00544EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/08/03 1:15 p.m.•37 views

Design/Logic Flaw

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22317...

4.4CVSS7.9AI score0.00238EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/08/03 5:15 a.m.•37 views

Buffer overflow

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service DoS condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is...

7.5CVSS9.7AI score0.02095EPSS
SaveExploits0References3
Prion
Prion
•added 2023/08/03 1:15 a.m.•37 views

Design/Logic Flaw

An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service...

5CVSS7.4AI score0.00635EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/08/02 12:15 a.m.•37 views

Information disclosure

An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete menus created by the Administrator...

4CVSS4.6AI score0.00554EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/08/01 4:15 p.m.•37 views

Memory corruption

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 116, Firefox ESR...

7.5CVSS9.7AI score0.00888EPSS
SaveExploits0References4Affected Software2
Prion
Prion
•added 2023/07/31 4:15 p.m.•37 views

Design/Logic Flaw

In Zimbra Collaboration ZCS 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed...

5CVSS7.6AI score0.00868EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/07/26 6:15 p.m.•37 views

Input validation

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks...

5CVSS5.2AI score0.00201EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/07/26 2:15 p.m.•37 views

Design/Logic Flaw

Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked i.e., replaced with asterisks in the build log in some circumstances...

4CVSS6.4AI score0.00769EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/07/25 3:15 p.m.•37 views

Information disclosure

In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers...

5CVSS7.5AI score0.01693EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/07/24 4:15 p.m.•37 views

Design/Logic Flaw

A possible unauthorized memory access flaw was found in the Linux kernel's cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implement...

4.3CVSS6.2AI score0.00761EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/07/24 9:15 a.m.•37 views

Input validation

Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authenticated attacker with admin privileges local execution of Code.This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X before 8.0.35...

5.8CVSS6.9AI score0.00872EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/07/22 6:15 p.m.•37 views

Out-of-bounds

A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePointaddImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted upload. The attack can be initiated...

6.5CVSS9.6AI score0.7367EPSS
SaveExploits2References3Affected Software1
Prion
Prion
•added 2023/07/18 9:15 p.m.•37 views

Code injection

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are Prior to 9.2.7.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

5.8CVSS5.8AI score0.00374EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/07/18 12:15 a.m.•37 views

Design/Logic Flaw

An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read...

6.4CVSS8.7AI score0.02524EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2023/07/13 1:15 a.m.•37 views

Command injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to execute arbitrary code with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics:...

6.5CVSS9.5AI score0.86469EPSS
SaveExploits1References3Affected Software2
Prion
Prion
•added 2023/07/13 12:15 a.m.•37 views

Privilege escalation

In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS9AI score0.00772EPSS
SaveExploits0References4Affected Software1
Total number of security vulnerabilities5000