Lucene search
+L

156 matches found

NVD
NVD
added 2022/01/11 7:15 a.m.11 views

CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS0.00427EPSS
Exploits1References2
CVE
CVE
added 2022/01/11 6:45 a.m.137 views

CVE-2022-0144

CVE-2022-0144 affects the shelljs package. The vulnerability is described as an Improper Privilege Management issue that could enable a local attacker to gain elevated privileges via shelljs usage on a system where the component is present. The vulnerability is local in scope, with local/privileg...

7.1CVSS6.9AI score0.00427EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/01/11 6:45 a.m.36 views

CVE-2022-0144 Improper Privilege Management in shelljs/shelljs

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS7.1AI score0.00427EPSS
Exploits1References2
OSV
OSV
added 2022/01/11 6:45 a.m.15 views

CVE-2022-0144 Improper Privilege Management in shelljs/shelljs

shelljs is vulnerable to Improper Privilege Management...

7.1CVSS7.1AI score0.00427EPSS
Exploits1References4
Photon
Photon
added 2022/01/05 12:0 a.m.53 views

Critical Photon OS Security Update - PHSA-2022-0144

Updates of 'vim', 'python3-lxml', 'binutils' packages of Photon OS have been released...

6.8CVSS1.6AI score0.02456EPSS
Exploits3
Nvidia
Nvidia
added 2021/07/22 12:0 a.m.26 views

Security Bulletin: NVIDIA DGX-1 and NVIDIA DGX-2 Systems - July 2021

NVIDIA has released a firmware security update for NVIDIA DGX-1™ and NVIDIA DGX-2™systems. This update addresses an issue that may lead to denial of service, code execution, and data tampering. To protect your system, download and install this firmware update through the NVIDIA Enterprise Support...

7.2CVSS7.2AI score0.00327EPSS
Exploits0Affected Software1
CVE
CVE
added 2021/07/14 1:23 p.m.138 views

CVE-2021-0144

CVE-2021-0144 (Intel BSSA DFT) is triggered by insecure default variable initialization in the BIOS Shared SW Architecture Design for Test feature, enabling local privilege escalation for authenticated/privileged users. Public adapters include Intel’s advisory INTEL-SA-00525 and related vendor bu...

7.2CVSS6.5AI score0.00327EPSS
Exploits0References2Affected Software1064
Lenovo
Lenovo
added 2021/07/13 8:59 p.m.30 views

Intel BSSA DFT Advisory - Lenovo Support US

No description provided...

7.2CVSS6.5AI score0.00327EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2014:0623-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS7.2AI score0.03975EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2019:0144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.40804EPSS
Exploits2References4
Openbugbounty
Openbugbounty
added 2020/08/27 11:24 p.m.13 views

noorfes.com Cross Site Scripting vulnerability OBB-1281479

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Exploits0
Openbugbounty
Openbugbounty
added 2020/07/15 8:45 a.m.11 views

uzagorju.com Cross Site Scripting vulnerability OBB-1226358

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
Exploits0
CVE
CVE
added 2020/06/11 2:43 p.m.41 views

CVE-2020-0144

CVE-2020-0144 affects Android 10; issue is in btm_proc_sp_req_evt in btm_sec.cc where a missing bounds check allows an out-of-bounds read. This can lead to local information disclosure via compromised device firmware with System-level privileges required. User interaction is not needed for exploi...

4.4CVSS4.9AI score0.00147EPSS
Exploits0References1Affected Software1
Gitee
Gitee
added 2020/04/26 9:31 a.m.13 views

Exploit for CVE-2017-0144

PoC exploit for CVE-2017-0144 Eternalblue-Doublepulsar. The target product/service is Windows operating system, specifically the SMB Server Message Block protocol. The vulnerability class/vector is a remote code execution RCE vulnerability, which allows an attacker to execute arbitrary code on th...

9.3CVSS8.7AI score0.9923EPSS
Exploits56
Openbugbounty
Openbugbounty
added 2020/02/21 3:10 p.m.14 views

rch2000.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1099114 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting rch2000.com website and i...

0.2AI score
Exploits0
CVE
CVE
added 2020/02/11 2:13 a.m.115 views

CVE-2014-0144

CVE-2014-0144 affects QEMU before 2.0.0: block drivers for CLOOP, QCOW2 v2, and other image formats are vulnerable due to missing input validations that can cause memory corruption, integer/buffer overflows, or crashes. An attacker could potentially execute arbitrary code on the host with QEMU pr...

8.6CVSS7.2AI score0.01002EPSS
Exploits0References15Affected Software1
Openbugbounty
Openbugbounty
added 2020/02/08 2:46 p.m.18 views

url.hqhl.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1087920 Security Researcher g0bl1nsec Helped patch 3735 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting url.hqhl.net website and...

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2020/02/04 12:0 a.m.738 views

SMB DOUBLEPULSAR Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMB DOUBLEPULSAR Remote Code Execution', 'Description' = %q This module executes a Metasploit payload against the Equation Group's DOUBLEPULSAR...

9.3CVSS0.4AI score0.99693EPSS
Exploits95
0day.today
0day.today
added 2020/02/04 12:0 a.m.1218 views

SMB DOUBLEPULSAR Remote Code Execution Exploit

This Metasploit module executes a Metasploit payload against the Equation Group's DOUBLEPULSAR implant for SMB as popularly deployed by ETERNALBLUE. While this module primarily performs code execution against the implant, the "Neutralize implant" target allows you to disable the implant. This...

9.3CVSS7.8AI score0.99693EPSS
Exploits95
Metasploit
Metasploit
added 2020/02/03 5:16 p.m.183 views

SMB DOUBLEPULSAR Remote Code Execution

This module executes a Metasploit payload against the Equation Group's DOUBLEPULSAR implant for SMB as popularly deployed by ETERNALBLUE. While this module primarily performs code execution against the implant, the "Neutralize implant" target allows you to disable the implant. This module require...

8.8CVSS7.5AI score0.99693EPSS
Exploits95
Rows per page
Query Builder