Lucene search
+L

159 matches found

CVE
CVE
added 2023/01/31 9:31 a.m.74 views

CVE-2023-0593

CVE-2023-0593 affects the yaffshiv YAFFS filesystem extractor. A crafted YAFFS file can trigger a path traversal, causing writes outside the extraction directory. Affected versions: up to 0.1 included. The available documents do not provide a patch version or concrete remediation steps. Exploitat...

5.5CVSS5.5AI score0.00354EPSS
SaveExploits1References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.15 views

Security Bulletin: IBM SPSS SamplePower olch2x32 ActiveX control vulnerability (CVE-2013-0593)

Abstract There is a security vulnerability with the olch2x32 ActiveX control shipped by IBM SPSS SamplePower Version 3. The vulnerability allows remote attackers to execute arbitrary code on installations of SamplePower when the control is invoked as ActiveX by Microsoft Internet Explorer. Conten...

9.3CVSS6.8AI score0.03081EPSS
SaveExploits0Affected Software1
Circl
Circl
added 2022/03/14 5:18 p.m.14 views

CVE-2022-0593

creationtimestamp| type| source ---|---|--- 2022-03-14 17:18:22+00:00| seen| https://t.me/cibsecurity/38868...

6.5CVSS6.6AI score0.01442EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/03/14 3:15 p.m.7 views

CVE-2022-0593

The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks placed in the plugin directory, allowing unauthenticated user to remotely delete the plugin files leading to a potential Denial of Service situation...

6.5CVSS6.5AI score0.01442EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2022/03/14 2:41 p.m.30 views

CVE-2022-0593 Login with phone number < 1.3.7 - Unauthenticated remote plugin deletion

The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks placed in the plugin directory, allowing unauthenticated user to remotely delete the plugin files leading to a potential Denial of Service situation...

6.8AI score0.01442EPSS
SaveExploits2References2
CVE
CVE
added 2022/03/14 2:41 p.m.98 views

CVE-2022-0593

The CVE-2022-0593 is linked to the WordPress plugin “Login with phone number” prior to version 1.3.7, where delete.php contains no authentication/authorization checks. This allows an unauthenticated remote attacker to delete plugin files, potentially causing DoS. Affected component: delete.php in...

6.5CVSS6.6AI score0.01442EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2021/08/17 6:28 p.m.148 views

CVE-2021-0593

Technical details about CVE-2021-0593 are not publicly provided in the connected documents. Available references confirm the issue and affected Android versions, but no specific exploit vectors, affected builds, or mitigations are included here. Monitor for updates.

7.8CVSS7.6AI score0.00118EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2015:0593-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.5AI score0.03681EPSS
SaveExploits0References4
NVD
NVD
added 2020/11/12 6:15 p.m.17 views

CVE-2020-0593

Improper buffer restrictions in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

6.7CVSS6.8AI score0.00351EPSS
SaveExploits0References2
CVE
CVE
added 2020/11/12 5:55 p.m.92 views

CVE-2020-0593

CVE-2020-0593 concerns Intel BIOS firmware: improper buffer restrictions in the BIOS for various Intel processors may allow a local attacker to escalate privileges. The public details describe a local-privilege escalation impact with partial confidentiality/integrity/availability effects (CVSS 2....

6.7CVSS7.2AI score0.00351EPSS
SaveExploits0References2Affected Software1
Intel
Intel
added 2020/11/10 12:00 a.m.63 views

2020.2 IPU – BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0590 Description: Improper input...

7.8CVSS7.5AI score0.00424EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/02/26 12:00 a.m.48 views

RHEL 7 : systemd (RHSA-2020:0593)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0593 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides...

7.8CVSS7.1AI score0.02261EPSS
SaveExploits7References7
CVE
CVE
added 2019/03/06 12:00 a.m.114 views

CVE-2019-0593

Technical details about CVE-2019-0593 are not provided in the connected documents. The EUVD entries mention malware but do not specify vulnerability details. Monitor for updates.

7.6CVSS7.7AI score0.19296EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/03/05 11:29 p.m.24 views

CVE-2019-0593

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-064...

7.6CVSS7.6AI score0.19296EPSS
SaveExploits0References2
Prion
Prion
added 2019/03/05 11:29 p.m.22 views

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-061...

7.6CVSS7.5AI score0.19296EPSS
SaveExploits0References2Affected Software1
Circl
Circl
added 2019/02/13 2:35 p.m.12 views

CVE-2019-0593

creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:52+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...

7.6CVSS7.5AI score0.19296EPSS
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2019/02/12 12:00 a.m.26 views

Microsoft Edge Scripting Engine Memory Corruption (CVE-2019-0593)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.6CVSS5AI score0.19296EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2019/02/12 12:00 a.m.89 views

KLA11422 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A memory...

8.1CVSS8.8AI score0.19296EPSS
SaveExploits0References38
Cvelist
Cvelist
added 2018/06/26 2:00 p.m.27 views

CVE-2018-0593

Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

7.7AI score0.04378EPSS
SaveExploits0References3
CVE
CVE
added 2018/06/26 2:00 p.m.58 views

CVE-2018-0593

The CVE-2018-0593 entry affects the Microsoft OneDrive installer, which has an untrusted search path vulnerability (DLL planting) that can allow privilege escalation by placing a Trojan DLL in the installer’s directory. Root cause: insecure DLL search order in the installer. Impact described: arb...

7.8CVSS7.6AI score0.04378EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder