Lucene search
+L

20993 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/17 12:00 a.m.•6 views

CVE-2020-15591: Improper Control of Generation of Code

fexsrv in FEX aka Frams' Fast File EXchange before fex-201609192 allows eval injection for unauthenticated remote code execution...

9.8CVSS8.4AI score0.04058EPSS
SaveExploits1References2
NCSC
NCSC
•added 2022/03/11 12:00 a.m.•17 views

Vulnerability fixed in F-Secure products

A vulnerability has been fixed in the F-Secure Support tool, which is is used in Business Suite and consumer products. A authenticated malicious person could potentially exploit it to execute arbitrary code under higher privileges. F-Secure has made available an update that fixes the described...

8.5CVSS7.7AI score0.00742EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/03/10 5:44 p.m.•14 views

CVE-2021-44750

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands...

8.5CVSS7.7AI score0.00742EPSS
SaveExploits0References3
Prion
Prion
•added 2022/03/10 5:44 p.m.•28 views

Remote code execution

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands...

8.5CVSS7.5AI score0.00742EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•24 views

F-Secure 多款产品安全漏洞

F-Secure Elements Agent and others are products of F-Secure Finland.F-Secure Elements Agent is a cloud-native endpoint protection system.F-Secure MDR is a managed network security service.F-Secure Client Security is a client security F-Secure Client Security is a client-side security solution. A...

8.5CVSS7.4AI score0.00742EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/03/09 11:38 a.m.•50 views

CVE-2021-44750 Arbitrary Code Execution

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands...

6.4CVSS7.7AI score0.00742EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/09 11:38 a.m.•91 views

CVE-2021-44750

CVE-2021-44750 affects F-Secure products and concerns an arbitrary code execution via the F-Secure Support Tool. The issue allows a standard user to craft a special configuration file which, when executed by an administrator, can run arbitrary commands. Affected components include the F-Secure Su...

8.5CVSS7.1AI score0.00742EPSS
SaveExploits0References2Affected Software5
Positive Technologies
Positive Technologies
•added 2022/03/09 12:00 a.m.•5 views

PT-2022-12221

Name of the Vulnerable Software and Affected Versions F-Secure Support Tool affected versions not specified Description An arbitrary code execution issue was found in the F-Secure Support Tool. A standard user can create a special configuration file that, when executed by an administrator, can ru...

8.5CVSS0.00742EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/09 12:00 a.m.•12 views

CVE-2021-44750: Undefined Security Weakness

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands...

8.5CVSS7.7AI score0.00742EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/08 12:00 a.m.•31 views

F-Secure SAFE Browser for Android跨站脚本漏洞

F-Secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure.F-Secure SAFE Browser for Android is vulnerable to cross-site scripting, which can be exploited by attackers to remotely execute JavaScript and trigger generic cross-site scripting through the brows...

6.1CVSS5.4AI score0.00546EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/08 12:00 a.m.•29 views

F-Secure SAFE Browser for Android Cross-Site Scripting Vulnerability (CNVD-2022-23492)

F-Secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure.F-Secure SAFE Browser for Android is vulnerable to a cross-site scripting vulnerability that can be exploited by attackers to cause arbitrary code execution...

9.6CVSS5.4AI score0.00817EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/06 8:15 p.m.•26 views

CVE-2021-44748

A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required...

6.1CVSS0.00546EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/06 8:15 p.m.•37 views

CVE-2021-44749

A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to...

9.6CVSS0.00817EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/06 8:15 p.m.•17 views

CVE-2021-44748

A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required...

6.1CVSS5.8AI score0.00546EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/06 8:15 p.m.•19 views

CVE-2021-44749

A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to...

9.6CVSS7.4AI score0.00817EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/06 8:15 p.m.•33 views

Cross site scripting

A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to...

4.3CVSS8.7AI score0.00817EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/03/06 8:15 p.m.•28 views

Cross site scripting

A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required...

4.3CVSS6AI score0.00546EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/03/06 7:05 p.m.•119 views

CVE-2021-44749

F-Secure SAFE Browser Protection for Android is reported vulnerable to universal cross-site scripting due to improper URL handling in the SAFE browser protection module. The vulnerability could allow arbitrary code execution; user interaction is required for exploitation. Connected sources refere...

9.6CVSS7.5AI score0.00817EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/06 7:05 p.m.•41 views

CVE-2021-44749 Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser Protection for Android

A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to...

5.5CVSS9.1AI score0.00817EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/03/06 7:05 p.m.•43 views

CVE-2021-44748 Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser for Android

A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required...

5.5CVSS6.2AI score0.00546EPSS
SaveExploits0References1
Rows per page
Query Builder