Lucene search
+L

397 matches found

Microsoft CVE
Microsoft CVE
•added 2022/02/08 8:00 a.m.•46 views

Microsoft Dynamics GP Spoofing Vulnerability

...

5.4CVSS6.5AI score0.01164EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/02/08 12:00 a.m.•9 views

PT-2022-1680 · Microsoft · Dynamics Gp

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Dynamics GP, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: ...

8.8CVSS8.6AI score0.02145EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/02/08 12:00 a.m.•10 views

PT-2022-1676 · Microsoft · Dynamics Gp

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Dynamics GP, which can lead to spoofing attacks. An attacker, acting...

7.5CVSS5.4AI score0.01164EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/02/08 12:00 a.m.•10 views

PT-2022-1707 · Microsoft · Dynamics Gp

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics GP affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics GP, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At th...

9CVSS7.7AI score0.0255EPSS
SaveExploits0References7
Kaspersky
Kaspersky
•added 2022/02/08 12:00 a.m.•44 views

KLA12452 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Dynamics GP can be...

9CVSS7.9AI score0.03755EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•13 views

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the operation beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the fact that operations may go beyond the buffer limits in memory during the syntax analysis of 3GP files. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created...

7.8CVSS7.8AI score0.003EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
•added 2021/09/15 12:00 a.m.•5 views

PT-2021-5516 · Adobe · Premiere Pro

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 22.0 and earlier Adobe Premiere Pro versions 15.4.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Premiere Pro when parsing 3GP files. This could allow an attacker to...

7.8CVSS7.5AI score0.003EPSS
SaveExploits0References9
NVD
NVD
•added 2021/09/02 5:15 p.m.•30 views

CVE-2021-22775

A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software...

7.8CVSS0.00328EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/09/02 5:15 p.m.•10 views

CVE-2021-22775

A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software...

7.8CVSS7.5AI score0.00328EPSS
SaveExploits0References2
Prion
Prion
•added 2021/09/02 5:15 p.m.•18 views

Path traversal

A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software...

4.4CVSS7.7AI score0.00328EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/09/02 4:52 p.m.•54 views

CVE-2021-22775

GP-Pro EX, V4.09.250 and earlier, are affected by CWE-427: Uncontrolled Search Path Element. The issue stems from failure to properly filter special elements in the software’s search path, potentially enabling local code execution with elevated privileges during installation. Impact: local code e...

7.8CVSS7.7AI score0.00328EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/09/02 4:52 p.m.•38 views

CVE-2021-22775

A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software...

8AI score0.00328EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/02 12:00 a.m.•6 views

CVE-2021-22775: Uncontrolled Search Path Element

A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software...

7.8CVSS6.1AI score0.00328EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/09/02 12:00 a.m.•14 views

Schneider Electric GP-Pro EX 代码问题漏洞

Schneider Electric GP-Pro EX is a suite of HMI interface editing and logic programming software from Schneider Electric France. A code issue vulnerability exists in Schneider Electric GP-Pro EX, which arises from the product's failure to properly filter special elements in the search path. The...

7.8CVSS7.6AI score0.00328EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/31 1:15 a.m.•5 views

DEBIAN-CVE-2020-12658

gssproxy aka gss-proxy before 0.8.3 does not unlock condmutex before pthread exit in gpworkermain in gpworkers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional...

9.8CVSS8.2AI score0.01771EPSS
SaveExploits0References1
Veracode
Veracode
•added 2020/09/24 10:39 a.m.•41 views

Denial Of Service (DoS)

xen is vulnerable to denial of service DoS. An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and...

5.5CVSS2.6AI score0.00512EPSS
SaveExploits0References10Affected Software1
OSV
OSV
•added 2020/09/23 10:15 p.m.•23 views

UBUNTU-CVE-2020-25602

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...

6CVSS6.5AI score0.00324EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2020/09/23 9:16 p.m.•47 views

CVE-2020-25602

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...

6.5AI score0.00324EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/23 12:00 a.m.•4 views

CVE-2020-25602: Improper Handling of Exceptional Conditions

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSRMISCENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the...

6CVSS5.4AI score0.00324EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/23 12:00 a.m.•2 views

CVE-2020-25596: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest...

5.5CVSS5.4AI score0.00512EPSS
SaveExploits0References2
Rows per page
Query Builder