Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
steve vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2018-20302
An XSS issue exists in Steve Pallen Xain prior to 0.6.2 via the order parameter.
Emetrotel Xain
NA
CVE-2023-30874
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin <= 5.1.4 versions.
Stpetedesign Gps Plotter
NA
CVE-2024-25407
SteVe v3.6.0 exists to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow malicious users to cause a Denial of Service (DoS) by using the predicted transaction ID's to terminate other transactions.
5.8
CVSSv2
CVE-2022-21947
A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.
Suse Rancher Desktop
7.5
CVSSv2
CVE-2008-3359
SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and previous versions allows remote malicious users to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; ...
Owl Intranet Knowledgebase 0.94
Owl Intranet Knowledgebase
4
CVSSv2
CVE-2018-20301
An issue exists in Steve Pallen Coherence prior to 0.5.2 that is similar to a Mass Assignment vulnerability. In particular, "registration" endpoints (e.g., creating, editing, updating) allow users to update any coherence_fields data. For example, users can automatically...
Coherence Project Coherence
4.3
CVSSv2
CVE-2008-3100
Cross-site scripting (XSS) vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register...
Owl Intranet Knowledgebase
Owl Intranet Knowledgebase 0.94
1 EDB exploit
6.8
CVSSv2
CVE-2011-4352
Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x prior to 0.5.7, 0.6.x prior to 0.6.4, 0.7.x prior to 0.7.9, and 0.8.x prior to 0.8.8; and in Libav 0.5.x prior to 0.5.6, 0.6.x prior to 0.6.4, and 0.7.x prior to 0.7.3 allows rem...
Libav Libav 0.7
Libav Libav 0.5.3
Libav Libav 0.6.2
Libav Libav 0.5
Libav Libav 0.7.1
Libav Libav 0.5.2
Libav Libav 0.5.5
Libav Libav 0.6.3
Libav Libav 0.5.4
Libav Libav 0.6.1
Libav Libav 0.6
Libav Libav 0.5.1
Ffmpeg Ffmpeg 0.7.7
Ffmpeg Ffmpeg 0.7.1
Ffmpeg Ffmpeg 0.7.6
Ffmpeg Ffmpeg 0.8.6
Ffmpeg Ffmpeg 0.6.1
Ffmpeg Ffmpeg 0.7.5
Ffmpeg Ffmpeg 0.5.4.6
Ffmpeg Ffmpeg 0.5
Ffmpeg Ffmpeg 0.5.4
Ffmpeg Ffmpeg 0.8.5.4
4.6
CVSSv2
CVE-2008-1694
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Gnu Emacs 21.3
Gnu Emacs 21.4
Gnu Sccs
Gnu Emacs 20.7
Gnu Emacs 21.1
Gnu Emacs 21.2
4.6
CVSSv2
CVE-2004-0149
Multiple buffer overflows in xboing prior to 2.4 allow local users to gain privileges.
Xboing Xboing 2.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »