Lucene search
+L

2873 matches found

BDU FSTEC
BDU FSTEC
•added 2021/10/21 12:00 a.m.•18 views

The vulnerability of the AVEVA System Platform, a software for managing production processes; AVEVA WorkTasks, software for decision-making support on mobile devices; AVEVA Mobile Operator, a system for operational production management; AVEVA Manufacturing Execution System, software for integrated production management; AVEVA Batch Management, software for batch-based production control; AVEVA Enterprise Data Management, a software platform for enterprise data management. This vulnerability is related to an uncontrolled element in the search process, allowing attackers to escalate their privileges.

The vulnerabilities of the AVEVA System Platform, which is used for dispatching control applications; AVEVA WorkTasks, which is software for managing production processes; AVEVA Mobile Operator, which is software for supporting decision-making on mobile devices; AVEVA Manufacturing Execution...

7.3CVSS5.6AI score
SaveExploits0References1Affected Software4
RedHat Linux
RedHat Linux
•added 2021/10/20 9:54 a.m.•63 views

Moderate: Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.19

An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base...

8.7CVSS6.3AI score0.0066EPSS
SaveExploits1References3
NVD
NVD
•added 2021/10/20 7:15 a.m.•29 views

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

8.4CVSS0.00165EPSS
SaveExploits0References1
Prion
Prion
•added 2021/10/20 7:15 a.m.•32 views

Integer overflow

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

7.2CVSS7.7AI score0.00165EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/10/20 7:15 a.m.•12 views

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

8.4CVSS7.6AI score0.00165EPSS
SaveExploits0References2
CVE
CVE
•added 2021/10/20 6:31 a.m.•76 views

CVE-2021-1949

This CVE (CVE-2021-1949) concerns an integer overflow in Qualcomm Snapdragon components when sanitizer is enabled, stemming from an improper check of the batch count value. Affected products include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Voice & Music, and Wearables...

8.4CVSS7.7AI score0.00165EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/20 12:00 a.m.•4 views

CVE-2021-1949: Integer Overflow or Wraparound

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

8.4CVSS5.8AI score0.00165EPSS
SaveExploits0References2
OSV
OSV
•added 2021/10/18 2:15 p.m.•15 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS7.3AI score0.01757EPSS
SaveExploits0References2
NVD
NVD
•added 2021/10/18 2:15 p.m.•21 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS0.01757EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/18 2:15 p.m.•31 views

Design/Logic Flaw

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

6.5CVSS8.7AI score0.01757EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/10/18 2:15 p.m.•11 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS7.3AI score0.01757EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/10/18 1:22 p.m.•34 views

CVE-2021-42098

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

9AI score0.01757EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/18 12:00 a.m.•6 views

CVE-2021-42098: Incorrect Default Permissions

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell...

8.8CVSS5.8AI score0.01757EPSS
SaveExploits0References2
Atlassian
Atlassian
•added 2021/10/13 6:33 a.m.•52 views

Privilege escalation leads unauthorized user to edit email batch configurations - CVE-2021-41313

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....

4.3CVSS6.8AI score0.0087EPSS
SaveExploits0
Patchstack
Patchstack
•added 2021/10/05 12:00 a.m.•39 views

WordPress Batch Cat plugin <= 0.3 - Arbitrary Categories Add/Set/Delete to Posts vulnerability

Arbitrary Categories Add/Set/Delete to Posts vulnerability discovered by Quentin VILLAIN 3wsec in WordPress Batch Cat plugin versions = 0.3. Solution Deactivate and delete. This plugin has been closed as of September 24, 2021 and is not available for download. This closure is temporary, pending a...

6.5CVSS3.7AI score0.00901EPSS
SaveExploits2References3Affected Software1
wpexploit
wpexploit
•added 2021/10/05 12:00 a.m.•811 views

Batch Cat <= 0.3 - Subscriber+ Arbitrary Categories Add/Set/Delete to Posts

The plugin defines 3 custom AJAX actions, which both require authentication but are available for all roles. As a result, any authenticated user including simple subscribers can add/set/delete arbitrary categories to posts. Set the category 107 to the post 1537: POST /wp-admin/admin-ajax.php...

6.5CVSS0.6AI score0.00901EPSS
SaveExploits2
CNNVD
CNNVD
•added 2021/10/04 12:00 a.m.•12 views

Redis Labs Redis 安全漏洞

Redis Labs Redis is an open source, ANSI C, web-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis Labs, Inc. that provides APIs in multiple languages. A security vulnerability exists in Redis, which stems from the command-line tools redis-cli and the...

9CVSS6AI score0.02558EPSS
SaveExploits0References17
OpenVAS
OpenVAS
•added 2021/09/24 12:00 a.m.•42 views

Fedora: Security Advisory for gifsicle (FEDORA-2021-c351011066)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.01605EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/09/24 12:00 a.m.•34 views

Fedora: Security Advisory for gifsicle (FEDORA-2021-b349650e52)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.01605EPSS
SaveExploits1References2
OSV
OSV
•added 2021/09/17 2:15 a.m.•14 views

CVE-2021-20828

Cross-site scripting vulnerability in Order Status Batch Change Plug-in for EC-CUBE 3.0 series all versions allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.1CVSS6.5AI score0.00773EPSS
SaveExploits0References2
Rows per page
Query Builder