Lucene search
+L

4197 matches found

osv_alpine
osv_alpine
•added 2021/02/09 8:15 p.m.•16 views

ALPINE-CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

9.8CVSS7.5AI score0.09256EPSS
SaveExploits1References1
Prion
Prion
•added 2021/02/09 8:15 p.m.•34 views

Command injection

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

7.5CVSS9.4AI score0.09256EPSS
SaveExploits1References9Affected Software3
Debian CVE
Debian CVE
•added 2021/02/09 7:35 p.m.•35 views

CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

9.8CVSS8AI score0.09256EPSS
SaveExploits1
Mend
Mend
•added 2021/02/09 7:35 p.m.•9 views

CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

9.8CVSS0.09256EPSS
SaveExploits1References16
CVE
CVE
•added 2021/02/09 7:35 p.m.•640 views

CVE-2021-26937

CVE-2021-26937 affects the GNU Screen utility. The vulnerability exists in encoding.c when handling combining characters/UTF-8 sequences, and can enable a remote attacker to cause a denial of service (invalid write access and crash) or, in some advisories, potentially arbitrary code execution. Af...

9.8CVSS9.6AI score0.09256EPSS
SaveExploits1References10Affected Software1
AlpineLinux
AlpineLinux
•added 2021/02/09 7:35 p.m.•80 views

CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

9.8CVSS9.9AI score0.09256EPSS
SaveExploits1
osv_cve
osv_cve
•added 2021/02/09 6:15 p.m.•21 views

CVE-2020-28388

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus ReadyStart V3 All...

5.3CVSS6AI score0.01367EPSS
SaveExploits0References4
Prion
Prion
•added 2021/02/09 6:15 p.m.•53 views

Buffer overflow

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus ReadyStart V3 All...

5CVSS5.5AI score0.01367EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
•added 2021/02/09 1:00 p.m.•48 views

CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

9.8CVSS6.9AI score0.09256EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2021/02/09 12:00 a.m.•25 views

PT-2021-7763 · Unknown · Nucleus Net +7

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Compact BACnet versions prior to V3.5.5 APOGEE PXC Compact P2 Ethernet versions prior to V2.8.20 APOGEE PXC Modular BACnet versions prior to V3.5.5 APOGEE PXC Modular P2 Ethernet versions prior to V2.8.20 Nucleus NET versions prior...

6.5CVSS5.4AI score0.01367EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2021/02/09 12:00 a.m.•18 views

CVE-2020-28388

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus ReadyStart V3 All...

6.5CVSS6AI score0.01367EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/09 12:00 a.m.•8 views

CVE-2021-26937: Improper Neutralization of Argument Delimiters in a Command

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...

9.8CVSS7.3AI score0.09256EPSS
SaveExploits1References2
CVE
CVE
•added 2021/02/09 12:00 a.m.•114 views

CVE-2020-28388

The CVE-2020-28388 issue affects Siemens APOGEE PXC and TALON TC series, Nucleus NET/ReadyStart/Source Code, PLUSCONTROL, and related products. Root cause: Initial Sequence Numbers (ISNs) for TCP connections are derived from an insufficiently random source, making current and future ISNs predicta...

6.5CVSS5.2AI score0.01367EPSS
SaveExploits0References4Affected Software4
Exploit DB
Exploit DB
•added 2021/02/02 12:00 a.m.•278 views

Solaris 10 (Intel) - 'dtprintinfo' Local Privilege Escalation (3)

Exploit Title: Solaris 10 1/13 Intel - 'dtprintinfo' Local Privilege Escalation 3 Date: 2021-02-01 Exploit Author: Marco Ivaldi Vendor Homepage: https://www.oracle.com/solaris/solaris10/ Version: Solaris 10 Tested on: Solaris 10 1/13 Intel / raptordtprintcheckdirintel2.c - Solaris/Intel FMT LPE...

5.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•25 views

IBM Content Navigator path traversal vulnerability

IBM Content Navigator is a Web client that provides users with a console that enables them to access, manage, and use corporate content anytime, anywhere, from any location in the organization on virtually any mobile device. A directory traversal vulnerability exists in IBM Content Navigator...

6.4CVSS6.5AI score0.01844EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2021/02/01 12:00 a.m.•28 views

Qualcomm Wlan Firmware Information Disclosure Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Wlan Firmware that allows RTT frames to be attached to non-randomized MAC addresses by comparing the sequence numbers can lead to information disclosure...

7.5CVSS7.1AI score0.00692EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/02/01 12:00 a.m.•31 views

Qualcomm Wlan Firmware Information Disclosure Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Wlan Firmware that allows RTT frames to be attached to non-randomized MAC addresses by comparing the sequence numbers can lead to information disclosure...

7.5CVSS7.1AI score0.00692EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/01/27 12:00 a.m.•19 views

GNU C Library security vulnerabilities

The GNU C Library glibc is an open-source, free, easy-to-download C compiler released under the LGPL license. A denial of service vulnerability exists in GNU C Library version 2.32 and earlier. The vulnerability stems from the iconv function in the GNU C Library failing to assert and aborting a...

7.5CVSS6.9AI score0.03825EPSS
SaveExploits0References46
CNNVD
CNNVD
•added 2020/12/31 12:00 a.m.•25 views

Medialize urijs input validation error vulnerability

urijs is a Javascript URL mutation library. An input validation error vulnerability exists in urijs that stems from allowing hostname spoofing through the use of a backslash character followed by an at @ character. If a hostname is used in a security decision, the decision may be incorrect...

6.5CVSS5.8AI score0.0171EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2020/12/15 12:00 a.m.•53 views

EulerOS 2.0 SP5 : nss (EulerOS-SA-2020-2572)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages,...

7.5CVSS6.7AI score0.03505EPSS
SaveExploits1References3
Rows per page
Query Builder