Lucene search
+L

2726 matches found

Positive Technologies
Positive Technologies
added 2020/03/19 12:00 a.m.9 views

PT-2020-12267 · Denx +2 · Das U-Boot +2

Name of the Vulnerable Software and Affected Versions: Das U-Boot versions through 2020.01 Description: The issue allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

10CVSS8.1AI score0.03601EPSS
SaveExploits1References98
NVD
NVD
added 2020/03/18 7:15 p.m.27 views

CVE-2019-12769

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

8.8CVSS8.8AI score0.00767EPSS
SaveExploits0References2
OSV
OSV
added 2020/03/18 7:15 p.m.8 views

CVE-2019-12769

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

8.8CVSS7.3AI score0.00767EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/03/18 5:38 p.m.30 views

CVE-2019-12769

SolarWinds Serv-U Managed File Transfer MFT Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters...

8.8AI score0.00767EPSS
SaveExploits0References2
CVE
CVE
added 2020/03/18 5:38 p.m.68 views

CVE-2019-12769

CVE-2019-12769 affects SolarWinds Serv-U Managed File Transfer (MFT) Web client prior to 15.1.6 Hotfix 2. The vulnerability is a Cross-Site Request Forgery in the file upload function exercised via ?Command=Upload with Dir and File parameters. Public sources indicate an attacker could exploit thi...

8.8CVSS8.6AI score0.00767EPSS
SaveExploits0References2Affected Software1
Hewlett-Packard
Hewlett-Packard
added 2020/03/09 12:00 a.m.48 views

HPSBHF03659 rev. 4 - Intel® Smart Sound Technology March 2020 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a security vulnerability in the Intel® Smart Sound Technology which may allow an authenticated user to potentially enable escalati...

8.6CVSS1.4AI score0.00368EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2020/03/01 12:00 a.m.52 views

Solarwinds Serv-U Ftp Server Cross-Site Scripting (CVE-2019-13182)

A cross-site scripting vulnerability exists in Solarwinds Serv-U Ftp server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

3.5CVSS5.2AI score0.06397EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2020/02/25 12:00 a.m.28 views

EulerOS 2.0 SP8 : libidn2 (EulerOS-SA-2020-1161)

According to the version of the libidn2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it...

7.5CVSS7.2AI score0.02985EPSS
SaveExploits0References2
OSV
OSV
added 2020/01/29 7:15 p.m.33 views

CVE-2020-8432

In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c dorenamegptparts function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified...

9.8CVSS7.3AI score
SaveExploits0References3
OSV
OSV
added 2020/01/29 7:15 p.m.3 views

DEBIAN-CVE-2020-8432

In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c dorenamegptparts function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified...

9.8CVSS8.6AI score0.03601EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/29 7:15 p.m.21 views

CVE-2020-8432

In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c dorenamegptparts function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified...

10CVSS9.7AI score0.03601EPSS
SaveExploits0References3
Prion
Prion
added 2020/01/29 7:15 p.m.22 views

Double free

In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c dorenamegptparts function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified...

10CVSS9.6AI score0.03601EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2020/01/29 7:15 p.m.29 views

CVE-2020-8432

In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c dorenamegptparts function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified...

10CVSS7.3AI score0.03601EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2020/01/29 6:33 p.m.51 views

CVE-2020-8432

In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c dorenamegptparts function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified...

10CVSS9.7AI score0.03601EPSS
SaveExploits0
CVE
CVE
added 2020/01/29 6:33 p.m.217 views

CVE-2020-8432

CVE-2020-8432 affects Das U-Boot up to 2020.01, with a double free in the cmd/gpt.c do_rename_gpt_parts() function. The double free can lead to a write-what-where condition and remote code execution. The issue was introduced during a memory-leak fix identified by static analysis. Publicly referen...

10CVSS9.4AI score0.03601EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/01/29 6:33 p.m.35 views

CVE-2020-8432

In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c dorenamegptparts function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified...

9.6AI score0.03601EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2020/01/10 2:22 p.m.17 views

u-povara.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1064892 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

0.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/01/09 12:00 a.m.28 views

openSUSE: Security Advisory for u-boot (openSUSE-SU-2019:2233-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.3CVSS7.8AI score0.01756EPSS
SaveExploits0References2
zdt
zdt
added 2020/01/04 12:00 a.m.252 views

Serv-U Remote (Directory Traversal) 0day Exploit

Tested and affected versions for Windows: Serv-U v15.1, v15.0, v14.0, v11.1, v11.0, v10.5, v10.0...

4.1AI score
SaveExploits0
NVD
NVD
added 2019/12/18 6:15 p.m.22 views

CVE-2019-19829

A cross-site scripting XSS vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182...

5.4CVSS4.9AI score0.02269EPSS
SaveExploits3References1
Rows per page
Query Builder