In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID:...
4.7CVSS
4.6AI Score
0.001EPSS
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is...
5.9CVSS
6.1AI Score
0.01EPSS
In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\1\1|t1|\2537)+' in...
7.5CVSS
5.2AI Score
0.006EPSS
In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression...
7.5CVSS
6.9AI Score
0.005EPSS
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression...
9.8CVSS
9.3AI Score
0.004EPSS
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under...
5.3CVSS
6.3AI Score
0.005EPSS
An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. This defect could be deliberately exercised by an attacker who is permitted to cause a vulnerable...
5.3CVSS
5.7AI Score
0.005EPSS
A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...
7.5CVSS
7.1AI Score
0.01EPSS
In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client...
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port...
4.7CVSS
5.6AI Score
0.001EPSS
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL...
5.9CVSS
6AI Score
0.003EPSS
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected...
5.9CVSS
5.7AI Score
0.004EPSS
snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of...
7.5CVSS
7.2AI Score
0.004EPSS
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of...
6.5CVSS
6.2AI Score
0.004EPSS
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, by setting the Iomega cookie to a known value before logging into the NAS's web application, the NAS will not provide the user a new cookie value. This allows an attacker who knows the cookie's value to compromise...
5.9CVSS
6.6AI Score
0.001EPSS
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file name used for assets accessible through the Content Viewer application are vulnerable to self cross-site scripting self-XSS. As a result, adversaries can add files to shares accessible from the Content...
4.7CVSS
5.6AI Score
0.001EPSS
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model (DOM) of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the.....
9.8CVSS
8.1AI Score
0.002EPSS
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the password changing functionality available to authenticated users does not require the user's current password to set a new one. As a result, attackers with access to the user's session tokens can change their...
8.8CVSS
8AI Score
0.001EPSS
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does.....
8.8CVSS
7.9AI Score
0.002EPSS
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "``" characters in the name parameter. As a result, arbitrary commands may be executed as the root user. The attack....
8.1CVSS
8.4AI Score
0.002EPSS
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injection payload using backtick "``" characters in the client:password parameter. As a result, arbitrary commands may be executed as the root...
8.1CVSS
8.4AI Score
0.002EPSS
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root...
6.5CVSS
7.1AI Score
0.001EPSS
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "``" characters in the share : name parameter. As a result, arbitrary commands may be executed as the root user....
8.1CVSS
8.4AI Score
0.002EPSS
Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or...
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and...
5.3CVSS
5.8AI Score
0.024EPSS
By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be used to DoS the server. Fixed in Apache HTTP Server 2.4.34 (Affected...
7.5CVSS
7.2AI Score
0.949EPSS
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...
5.9CVSS
6.2AI Score
0.003EPSS
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...
8.3CVSS
8.6AI Score
0.005EPSS
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via.....
4.3CVSS
4.2AI Score
0.003EPSS
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the....
9CVSS
6.8AI Score
0.003EPSS
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u181, 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE....
8.3CVSS
8.5AI Score
0.004EPSS
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affected are Java SE: 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...
8.3CVSS
8.3AI Score
0.003EPSS
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated...
3.7CVSS
4AI Score
0.002EPSS
By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected...
7.5CVSS
6.2AI Score
0.067EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of...
8.8CVSS
9.2AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of...
8.8CVSS
9.2AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of...
8.8CVSS
9.2AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of...
8.8CVSS
9.2AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of...
8.8CVSS
9.3AI Score
0.002EPSS
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 42 of...
7.2CVSS
7.8AI Score
0.002EPSS