Lucene search
+L
PrionMost viewed

213680 matches found

Prion
Prion
•added 2024/02/28 1:15 a.m.•41 views

Cross site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 273333...

5.8CVSS6.2AI score0.00394EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/26 4:27 p.m.•41 views

Null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in ofsysconregister kasprintf returns a pointer to dynamically allocated memory which can be NULL upon failure...

7.1AI score0.00278EPSS
SaveExploits0References6
Prion
Prion
•added 2024/02/23 11:15 a.m.•41 views

Cross site request forgery (csrf)

The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. This is due to missing or incorrect nonce validation on the cpshortcoderefresh function. This makes it possible for unauthenticated attackers to execute arbitra...

4.3CVSS5AI score0.00212EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/13 6:15 p.m.•41 views

Privilege escalation

Windows Kernel Elevation of Privilege Vulnerability...

3.5CVSS7AI score0.10884EPSS
SaveExploits0References1Affected Software13
Prion
Prion
•added 2024/02/13 6:15 p.m.•41 views

Remote code execution

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

6.8CVSS8.2AI score0.01549EPSS
SaveExploits0References1Affected Software14
Prion
Prion
•added 2024/02/05 6:15 a.m.•41 views

Input validation

In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

5CVSS7.3AI score0.01205EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/22 9:15 p.m.•41 views

Code injection

In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file...

5CVSS7AI score0.00395EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2024/01/19 9:15 p.m.•41 views

Design/Logic Flaw

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

5CVSS7AI score0.00912EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2024/01/16 4:15 p.m.•41 views

Sql injection

The WordPress Database Administrator WordPress plugin through 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

7.5CVSS7.9AI score0.01046EPSS
SaveExploits2References1Affected Software1
Prion
Prion
•added 2024/01/12 1:15 a.m.•41 views

Cross site scripting

An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS, or Remote Code Execution RCE and obtain root privileges on the device. This issue is caused by use of an...

7.5CVSS8.1AI score0.17668EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2024/01/09 6:15 p.m.•41 views

Privilege escalation

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability...

4.3CVSS7AI score0.11509EPSS
SaveExploits0References1Affected Software8
Prion
Prion
•added 2023/12/14 5:15 p.m.•41 views

Buffer overflow

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow starting in commit f57bd745b4cbed577ea654fad4701bea4d38b44c. A malicious game streaming server could exploit a buffer overflow vulnerability to crash a...

6.8CVSS7.5AI score0.00793EPSS
SaveExploits1References4Affected Software7
Prion
Prion
•added 2023/12/14 5:15 a.m.•41 views

Design/Logic Flaw

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect agains...

6.5CVSS7.1AI score0.0104EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2023/12/04 11:15 p.m.•41 views

Design/Logic Flaw

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

5CVSS6.9AI score0.04777EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2023/11/16 6:15 p.m.•41 views

Null pointer dereference

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their...

1CVSS6.8AI score0.00251EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2023/11/14 7:15 p.m.•41 views

Race condition

A race condition in System Management Mode SMM code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation...

5.1CVSS7.3AI score0.18842EPSS
SaveExploits9References1Affected Software71
Prion
Prion
•added 2023/11/02 3:15 p.m.•41 views

Sql injection

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

7.5CVSS9.9AI score0.007EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/10/27 11:15 p.m.•41 views

Buffer overflow

Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file...

4.4CVSS7.7AI score0.00204EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/25 6:17 p.m.•41 views

Design/Logic Flaw

RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making it vulnerable for denial of service DoS attacks with very large messages. An authenticated user with sufficient credentials can publish a very large messages over the HTTP API...

3.3CVSS4.9AI score0.01077EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2023/09/27 6:15 p.m.•41 views

Design/Logic Flaw

A vulnerability in the memory buffer of Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause memory leaks that could eventually lead to a device reboot. This vulnerability is due to memory leaks caused by multiple clients connecting under...

1.8CVSS5.4AI score0.00231EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/25 8:15 p.m.•41 views

Input validation

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverab...

5CVSS7.3AI score0.0104EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/08/23 5:15 p.m.•41 views

Design/Logic Flaw

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file such as an ordinary .JPG file and also a folder that has the same name as the benign file, and the...

4.4CVSS7.9AI score0.97811EPSS
SaveExploits49References5Affected Software1
Prion
Prion
•added 2023/08/11 3:15 a.m.•41 views

Improper access control

Improper access control in the IntelR Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

7.5CVSS9.6AI score0.00978EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2023/08/10 5:15 p.m.•41 views

Design/Logic Flaw in Fedoraproject - Fedora

A use-after-free flaw was found in net/sched/clsfw.c in classifiers clsfw, clsu32, and clsroute in the Linux Kernel. This flaw allows a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue...

4.3CVSS7.3AI score
SaveExploits0References23Affected Software3
Prion
Prion
•added 2023/08/09 7:15 a.m.•41 views

Hardcoded credentials

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing to decrypt an encrypted web application login password...

3.3CVSS5.1AI score0.00339EPSS
SaveExploits0References1Affected Software6
Prion
Prion
•added 2023/08/08 9:15 a.m.•41 views

Privilege escalation

In MongoDB Ops Manager v5.0 prior to 5.0.22 and v6.0 prior to 6.0.17 it is possible for an authenticated user with project owner or project user admin access to generate an API key with the privileges of org owner resulting in privilege escalation...

5.8CVSS6.9AI score0.00614EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2023/07/24 4:15 p.m.•41 views

Race condition

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

0.8CVSS5.5AI score0.00343EPSS
SaveExploits0References6Affected Software4
Prion
Prion
•added 2023/07/21 8:15 p.m.•41 views

Remote code execution

vm2 is an open source vm/sandbox for Node.js. In vm2 for versions up to and including 3.9.19, Node.js custom inspect function allows attackers to escape the sandbox and run arbitrary code. This may result in Remote Code Execution, assuming the attacker has arbitrary code execution primitive insid...

7.5CVSS9.8AI score0.04215EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/07/18 9:15 p.m.•41 views

Code injection

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

3.3CVSS4.6AI score0.01372EPSS
SaveExploits0References5Affected Software2
Prion
Prion
•added 2023/07/14 12:15 a.m.•41 views

Remote code execution

vm2 is an advanced vm/sandbox for Node.js. The library contains critical security issues and should not be used for production. The maintenance of the project has been discontinued. In vm2 for versions up to 3.9.19, Promise handler sanitization can be bypassed with the @@species accessor property...

7.5CVSS9.9AI score0.03867EPSS
SaveExploits4References1Affected Software1
Prion
Prion
•added 2023/07/13 3:15 a.m.•41 views

Authentication flaw

SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

7.5CVSS9.6AI score0.0101EPSS
SaveExploits0References2Affected Software2
Prion
Prion
•added 2023/06/26 7:15 p.m.•41 views

Cross site scripting

Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the element...

5.8CVSS6.5AI score
SaveExploits5References3Affected Software1
Prion
Prion
•added 2023/06/23 6:15 p.m.•41 views

Type confusion

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this...

6.8CVSS8.6AI score0.23788EPSS
SaveExploits0References7Affected Software4
Prion
Prion
•added 2023/06/07 8:15 p.m.•41 views

Remote code execution

SABnzbd is an open source automated Usenet download tool. A design flaw was discovered in SABnzbd that could allow remote code execution. Manipulating the Parameters setting in the Notification Script functionality allows code execution with the privileges of the SABnzbd process. Exploiting the...

7.5CVSS10AI score0.01731EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2023/06/02 5:15 p.m.•41 views

Design/Logic Flaw

Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by this bug. This vulnerability affects Thunderbird 102.7.1...

4.3CVSS6AI score0.00372EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/05/30 4:15 a.m.•41 views

Input validation

CodeIgniter is a PHP full-stack web framework. This vulnerability allows attackers to execute arbitrary code when you use Validation Placeholders. The vulnerability exists in the Validation library, and validation methods in the controller and in-model validation are also vulnerable because they...

7.5CVSS9.6AI score0.01126EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/05/29 9:15 p.m.•41 views

Remote code execution

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

6.5CVSS8.9AI score0.79335EPSS
SaveExploits16References3Affected Software1
Prion
Prion
•added 2023/05/09 6:15 p.m.•41 views

Security feature bypass

Secure Boot Security Feature Bypass Vulnerability...

4CVSS7.9AI score0.10561EPSS
SaveExploits0References1Affected Software10
Prion
Prion
•added 2023/05/08 9:15 p.m.•41 views

Cross site scripting

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. An uncaught exception vulnerability was introduced in version 5.1.0 and included in version 4.1.0 of the socket.io parent package. Older versions are not impacted. A...

4CVSS6.4AI score0.01327EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2023/04/18 8:15 p.m.•41 views

Code injection

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogi...

5CVSS7AI score0.82262EPSS
SaveExploits3References2Affected Software1
Prion
Prion
•added 2023/04/13 11:15 p.m.•41 views

Privilege escalation

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...

4.3CVSS7.7AI score0.01051EPSS
SaveExploits4References2Affected Software2
Prion
Prion
•added 2023/04/12 9:15 p.m.•41 views

Design/Logic Flaw

RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file...

5CVSS7.3AI score0.0462EPSS
SaveExploits1References9Affected Software3
Prion
Prion
•added 2023/03/28 7:15 p.m.•41 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getdirparams method. The issue results from the lack of proper validation of...

7.5CVSS9.2AI score0.03848EPSS
SaveExploits0References6Affected Software2
Prion
Prion
•added 2023/03/06 9:15 p.m.•42 views

Design/Logic Flaw

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file...

5.8CVSS6.7AI score0.00649EPSS
SaveExploits0References6Affected Software2
Prion
Prion
•added 2023/02/20 4:15 p.m.•41 views

Default credentials

Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option...

5CVSS7.7AI score0.46836EPSS
SaveExploits1References5Affected Software2
Prion
Prion
•added 2023/02/14 8:15 p.m.•41 views

Remote code execution

Microsoft Exchange Server Remote Code Execution Vulnerability...

6.5CVSS8.8AI score0.04058EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/02/11 1:23 a.m.•41 views

Design/Logic Flaw

DataHub is an open-source metadata platform. The DataHub frontend acts as a proxy able to forward any REST or GraphQL requests to the backend. The goal of this proxy is to perform authentication if needed and forward HTTP requests to the DataHub Metadata Store GMS. It has been discovered that the...

6.4CVSS9.2AI score0.00684EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/02/01 8:15 p.m.•41 views

Cross site scripting

kkFileView v4.1.0 was discovered to contain a cross-site scripting XSS vulnerability via the url parameter at /controller/OnlinePreviewController.java...

5.8CVSS6AI score0.01084EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/01/27 11:15 p.m.•41 views

Open redirect

Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapshot and arbitrarily choose the originalUrl parameter by editing the query, thanks to a web proxy. When another user opens the URL of the snapshot, they will be...

3.5CVSS5.9AI score0.00828EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2022/12/13 5:15 p.m.•42 views

Server side request forgery (ssrf)

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...

7.5CVSS9.2AI score0.02053EPSS
SaveExploits6References1Affected Software1
Total number of security vulnerabilities5000