Lucene search
K

9 matches found

NVD
NVD
added 2023/03/29 7:15 p.m.35 views

CVE-2022-2848

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lac...

9.1CVSS9.5AI score0.03366EPSS
Exploits0References2
Prion
Prion
added 2023/03/29 7:15 p.m.28 views

Heap overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lac...

6.4CVSS9.4AI score0.03366EPSS
Exploits0References2Affected Software7
CVE
CVE
added 2023/03/29 12:0 a.m.65 views

CVE-2022-2848

CVE-2022-2848 affects Kepware KEPServerEX 6.11.718.0. A heap-based buffer overflow occurs during handling of text encoding conversions due to improper length validation of user-supplied data, allowing remote code execution in the context of SYSTEM. The vulnerability is network-exploitable with no...

9.1CVSS9.4AI score0.03366EPSS
Exploits0References2Affected Software8
CVE
CVE
added 2019/03/05 8:0 p.m.23 views

CVE-2017-16486

CVE-2017-16486 entry is rejected/not used; this CVE ID does not represent an active vulnerability.

7.4AI score
Exploits0
Cvelist
Cvelist
added 2019/03/05 8:0 p.m.9 views

CVE-2017-16486

...

Exploits0
vulnersOsv
vulnersOsv
added 2019/02/07 6:16 p.m.5 views

3gtel-frontend-platform (=1.0.0), @achieve-all/v-element (=1.0.0) +406 more potentially affected by CVE-2018-16486 via defaults-deep (>=0.2.3 <=0.2.4)

defaults-deep NPM version =0.2.3, =0.1.1, =1.0.0, =1.0.0, =2.0.0, =2.0.7, =0.1.0, =1.0.0, =1.0.8, =0.1.2, =1.0.3, =1.0.0, =6.0.0-rc1, =7.4.3 and more Source cves: CVE-2018-16486 Source advisory: OSV:GHSA-PJXW-22XF-6PWC...

9.8CVSS7.2AI score0.01481EPSS
Exploits1
NVD
NVD
added 2019/02/01 6:29 p.m.26 views

CVE-2018-16486

A prototype pollution vulnerability was found in defaults-deep =0.2.4 that would allow a malicious user to inject properties onto Object.prototype...

9.8CVSS9.3AI score0.01481EPSS
Exploits1References1
Cvelist
Cvelist
added 2019/02/01 6:0 p.m.30 views

CVE-2018-16486

A prototype pollution vulnerability was found in defaults-deep =0.2.4 that would allow a malicious user to inject properties onto Object.prototype...

9.4AI score0.01481EPSS
Exploits1References1
CVE
CVE
added 2019/02/01 6:0 p.m.54 views

CVE-2018-16486

Summary: CVE-2018-16486 corresponds to a prototype pollution vulnerability in the npm package defaults-deep, affecting versions ≤ 0.2.4. The vulnerability allows an attacker to inject or modify properties on Object.prototype, which can affect all objects in the runtime. Several sources (OSV, GHSA...

9.8CVSS9.2AI score0.01481EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder