Lucene search
+L

72 matches found

Cvelist
Cvelist
added 2023/05/24 4:39 a.m.56 views

CVE-2023-1424 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service DoS condition or execute malicious code on ...

10CVSS9.8AI score0.0344EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/05/24 4:39 a.m.10 views

CVE-2023-1424 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service DoS condition or execute malicious code on ...

10CVSS8AI score0.0344EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:08 a.m.8 views

SUSE CVE-2008-1424

unknown...

7AI score
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.20 views

Ubuntu: Security Advisory (USN-2413-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS6.8AI score0.0157EPSS
SaveExploits0References2
Circl
Circl
added 2022/06/08 2:46 p.m.12 views

CVE-2022-1424

creationtimestamp| type| source ---|---|--- 2022-06-08 14:46:02+00:00| seen| https://t.me/cibsecurity/44010...

6.5CVSS6.3AI score0.00534EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/06 8:51 a.m.99 views

CVE-2022-1424

The CVE-2022-1424 entry concerns the WordPress Ask Me theme, specifically versions before 6.8.2, where AJAX actions omit CSRF checks. This flaw permits a logged-in attacker to perform actions on behalf of a user without CSRF protection. Documents from multiple sources (NVD, Red Hat, CNVD, CVE Lis...

6.5CVSS6.4AI score0.00534EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/08/31 12:00 a.m.55 views

Amazon Linux AMI : samba (ALAS-2020-1424)

The version of samba installed on the remote host is prior to 4.10.4-11.51. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1424 advisory. A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when...

9.1CVSS7.1AI score0.03515EPSS
SaveExploits0References5
NVD
NVD
added 2020/07/14 11:15 p.m.28 views

CVE-2020-1424

An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'...

7.8CVSS0.01323EPSS
SaveExploits0References1
CVE
CVE
added 2020/07/14 10:54 p.m.104 views

CVE-2020-1424

CVE-2020-1424 affects the Windows Update Stack, described as an elevation-of-privilege in memory handling of objects. This vulnerability enables local attackers to run code with kernel-level privileges, with no user interaction required per the description. The provided documents do not specify a...

7.8CVSS8.4AI score0.01323EPSS
SaveExploits0References1Affected Software3
VulnCheck KEV
VulnCheck KEV
added 2020/05/01 12:00 a.m.10 views

VulnCheck KEV: CVE-2010-1424

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government 2006 through 2010 allows user-assisted remote attackers to execute arbitrary code via a crafted font file...

9.3CVSS6.2AI score0.04036EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/11/13 12:00 a.m.91 views

Microsoft Windows Multiple Vulnerabilities (KB4523205)

This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.9CVSS7.1AI score0.75859EPSS
SaveExploits38References3
OpenVAS
OpenVAS
added 2019/11/13 12:00 a.m.57 views

Microsoft Windows Multiple Vulnerabilities (KB4525237)

This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.9CVSS7.1AI score0.75859EPSS
SaveExploits38References3
CVE
CVE
added 2019/11/12 6:53 p.m.110 views

CVE-2019-1424

CVE-2019-1424 is a Windows Netlogon security feature bypass vulnerability. Public data describe a vulnerability in how the Netlogon secure channel is handled, with a CVSS v3.1 base score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) and a NETWORK attack vector, no user interaction required. No exp...

8.1CVSS8.6AI score0.02865EPSS
SaveExploits0References1Affected Software8
Tenable Nessus
Tenable Nessus
added 2019/11/12 12:00 a.m.58 views

KB4525241: Windows 10 Version 1709 November 2019 Security Update

The remote Windows host is missing security update 4525241. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel. An attacker who successfully exploited the vulnerability...

9.9CVSS8.2AI score0.75859EPSS
SaveExploits38References53
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 7:07 a.m.22 views

Security Bulletin: HTML injection vulnerability in IBM Business Process Manager (BPM) - CVE-2017-1424

Summary IBM BPM allows users to interact with one another without fully removing HTML markup. This might allow controlling parts of the user interface, possibly script injection. Vulnerability Details CVEID: CVE-2017-1424 DESCRIPTION: IBM Business Process Manager is vulnerable to cross-site...

5.4CVSS0.4AI score0.00729EPSS
SaveExploits0Affected Software3
Tenable Nessus
Tenable Nessus
added 2016/06/22 12:00 a.m.33 views

Cisco IOS LLDP Packet Handling Remote DoS (cisco-sa-20160616-ios)

According to its self-reported IOS version, the remote device is affected by a denial of service vulnerability in the Link Layer Discovery Protocol LLDP packet processing code due to improper handling of malformed LLDP packets. An unauthenticated, adjacent attacker can exploit this, via specially...

6.5CVSS6.7AI score0.00574EPSS
SaveExploits0References2
OSV
OSV
added 2016/06/19 1:59 a.m.12 views

CVE-2016-1424

Cisco IOS 15.21T1.11 and 15.22TST allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun63132...

6.5CVSS5.8AI score0.00574EPSS
SaveExploits0References1
CVE
CVE
added 2016/06/19 1:00 a.m.69 views

CVE-2016-1424

Cisco IOS LLDP Packet Handling Remote DoS (CVE-2016-1424) affects Cisco IOS 15.2(1)T1.11 and 15.2(2)TST. Root cause: improper handling of crafted LLDP packets in LLDP packet processing code, allowing an unauthenticated, adjacent attacker to crash the device and cause a DoS. Exploitation status in...

6.5CVSS6.3AI score0.00574EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2016/06/19 1:00 a.m.32 views

CVE-2016-1424

Cisco IOS 15.21T1.11 and 15.22TST allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun63132...

6.3AI score0.00574EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/10/06 12:00 a.m.51 views

Oracle: Security Advisory (ELSA-2011-1424)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.4AI score0.13054EPSS
SaveExploits3References2
Rows per page
Query Builder