Lucene search
+L

10112 matches found

Cvelist
Cvelist
•added 2021/12/23 7:48 p.m.•50 views

CVE-2021-44453 mySCADA myPRO

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...

10CVSS9.5AI score0.01421EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/23 7:48 p.m.•83 views

CVE-2021-44453

Affected product: mySCADA myPRO (versions 8.20.0 and prior). Vulnerability: OS command injection via a vulnerable debug interface that includes a ping utility, allowing an attacker to inject arbitrary operating system commands through the interface. Impact (as stated): Remote code execution with ...

10CVSS9.5AI score0.01421EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/23 12:00 a.m.•2 views

CVE-2021-44453: Improper Neutralization of Special Elements used in an OS Command

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...

10CVSS5.9AI score0.01421EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2021/12/22 8:15 p.m.•31 views

MTN Group: Information disclosure through django debug mode

Summary: Your domain https://szezvzorilla.mtn.co.sz was disclosing information throught django debug mode enable. Steps To Reproduce: Visit https://szezvzorilla.mtn.co.sz/NONEXISTINGPATH/ You will the information of debugging Supporting Material/References: F1555934 attachment / reference Impact...

6.7AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/12/21 5:26 p.m.•13 views

CVE-2021-44453

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...

10CVSS7.4AI score0.01421EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/17 9:15 p.m.•10 views

DEBIAN-CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS7.4AI score0.01401EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/17 9:15 p.m.•15 views

UBUNTU-CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS5.8AI score0.01401EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/12/15 7:15 p.m.•8 views

CVE-2021-39653

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

7.8CVSS7.2AI score0.00119EPSS
SaveExploits0References3
NVD
NVD
•added 2021/12/15 7:15 p.m.•31 views

CVE-2021-39653

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

7.8CVSS0.00119EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/15 7:15 p.m.•24 views

Privilege escalation

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

4.6CVSS7.6AI score0.00119EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/15 6:06 p.m.•109 views

CVE-2021-39653

CVE-2021-39653 describes a local elevation of privilege in the Android boot path, enabling boot with a hidden debug policy due to a missing user warning. The vulnerability is associated with the Android kernel/Bootloader surface (as reflected in Pixel bulletin categorization), and iled by the des...

7.8CVSS7.7AI score0.00119EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/15 6:06 p.m.•39 views

CVE-2021-39653

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

8AI score0.00119EPSS
SaveExploits0References1
Citrix
Citrix
•added 2021/12/15 12:00 a.m.•17 views

Diagnostic data to collect for Citrix Tech Support when a Citrix Browser App fails to launch

To find out what is going wrong when a Citrix browser app fails to launch, tech support needs: Decrypted Fiddler traces, the output from the terminal window, and Citrix Browser debug logs...

7AI score
SaveExploits0
CNVD
CNVD
•added 2021/12/15 12:00 a.m.•54 views

Rizin buffer overflow vulnerability

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a command-line hex editor that can open disk files that can be scripted, etc. Rizin 0.3.1 and earlier versions have a...

7.8CVSS1.7AI score0.00846EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•3 views

CVE-2021-39653: Undefined Security Weakness

In TBD of TBD, there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, with no additional execution privileges needed. Use...

7.8CVSS5.9AI score0.00119EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/13 8:15 p.m.•30 views

CVE-2021-43814

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parsedie when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a victim user, Rizin ma...

7.8CVSS0.00846EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/12/13 8:15 p.m.•10 views

CVE-2021-43814

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parsedie when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a victim user, Rizin ma...

7.8CVSS7.1AI score0.00846EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2021/12/13 12:00 a.m.•15 views

Rizin 缓冲区错误漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a command-line hex editor that can open disk files that can be scripted, etc. Rizin 0.3.1 and earlier versions have a...

7.8CVSS6.1AI score0.00846EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•1 views

CVE-2021-43814: Out-of-bounds Write

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parsedie when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a victim user, Rizin ma...

7.8CVSS5.7AI score0.00846EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/09 7:54 p.m.•14 views

GHSA-4M6Q-RXHM-675W OS Command Injection in adb-driver

adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command function...

9.8CVSS6.2AI score0.04358EPSS
SaveExploits1References3
Rows per page
Query Builder