Lucene search
+L

886 matches found

Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.20 views

PT-2022-27221 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.2 Description: The issue is related to a buffer overflow vulnerability due to insufficient input validation in the appspawn and nwebspawn services. This could allow an unprivileged malicious application to ga...

7.8CVSS8.3AI score0.00207EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/07 7:15 p.m.6 views

CVE-2022-45550

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

9.8CVSS5.9AI score0.01473EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/12/07 12:0 a.m.12 views

PT-2022-27573 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue concerns Remote Code Execution RCE, allowing for potentially malicious code to be executed remotely. Recommendations: For AyaCMS version 3.1.2, at the moment, there is no information about a newer...

9.8CVSS9.6AI score0.01473EPSS
SaveExploits1References5
CVE
CVE
added 2022/12/07 12:0 a.m.64 views

CVE-2022-45550

CVE-2022-45550 affects AyaCMS 3.1.2 and is described as a Remote Code Execution (RCE) vulnerability. The NVD/CVSS data show a high-severity impact (CVSS v3.1: 9.8, Network attack vector, no user interaction required, high confidentiality/integrity/availability impact). The provided documents do n...

9.8CVSS9.6AI score0.01473EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/12/07 12:0 a.m.7 views

AyaCMS 注入漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS version 3.1.2, which stems from vulnerability to Remote Code Execution RCE attacks...

9.8CVSS8.6AI score0.01473EPSS
SaveExploits1References3
OSV
OSV
added 2022/12/06 7:15 p.m.4 views

CVE-2022-45548

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability...

8.8CVSS5.8AI score0.00786EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/12/06 12:0 a.m.8 views

AyaCMS和Upload 代码问题漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS v3.1.2. An attacker can use this vulnerability to upload arbitrary files...

8.8CVSS8.2AI score0.00786EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/12/06 12:0 a.m.27 views

CVE-2022-45548

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability...

8.9AI score0.00786EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/12/06 12:0 a.m.23 views

PT-2022-27571 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue is related to an Arbitrary File Upload problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

8.8CVSS8.4AI score0.00786EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/11/03 12:0 a.m.5 views

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.2, which originates from an arbitrary file read via downloadserver, and can be exploited by an attacker to instal...

6.2CVSS6AI score0.00173EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/10/10 12:0 a.m.31 views

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2022-2536)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.04267EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.9 views

fhir-works-on-aws-authz-smart 信息泄露漏洞

fhir-works-on-aws-authz-smart is a SMART implementation on FHIR v1.0.0 of the FHIR Works on AWS framework open-sourced by Amazon Web Services Labs. Designed to leverage the OAuth2/OIDC authorization server to authorize requests. An information disclosure vulnerability exists in...

6.5CVSS6.4AI score0.0063EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2022/09/21 12:0 a.m.36 views

Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of Service

A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability allows malicious unauthenticated clients to allocate large amounts of memory on brokers. This can lead to brokers hitting OutOfMemoryException and causing denial of service. Exampl...

7.5CVSS7.4AI score0.01308EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2022/09/20 8:35 a.m.27 views

CVE-2022-34917 Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers

A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability allows malicious unauthenticated clients to allocate large amounts of memory on brokers. This can lead to brokers hitting OutOfMemoryException and causing denial of service. Exampl...

7.7AI score0.01308EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/09 3:15 p.m.5 views

CVE-2022-38701

OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information...

3.3CVSS5.8AI score0.00187EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/09/09 12:0 a.m.11 views

PT-2022-24536 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.2 Description: The issue is a heap overflow vulnerability that can be triggered by local attackers, allowing them to obtain network sensitive information. Recommendations: For OpenHarmony versions prior to...

6.2CVSS7AI score0.00187EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/09/09 12:0 a.m.15 views

PT-2022-24192 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.2 Description: The issue allows LAN attackers to bypass distributed permission control, but to exploit this, attackers need another vulnerability to obtain system access. Recommendations: For OpenHarmony...

6.2CVSS5.4AI score0.00183EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/09 12:0 a.m.4 views

OpenHarmony 授权问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.2 version and earlier versions, which can be exploited by LAN attackers to bypass distributed privilege control...

6.2CVSS5.9AI score0.00183EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/09/09 12:0 a.m.10 views

PT-2022-23361 · Unknown +1 · Openharmony +1

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.2 Description: The issue is caused by an incorrect configuration of the cJSON library, leading to a stack overflow vulnerability during recursive parsing. This allows LAN attackers to launch a Denial of Servi...

7.4CVSS7.5AI score0.00314EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/08/30 9:15 p.m.4 views

CVE-2022-36563

Incorrect access control in the install directory C:\RailsInstaller of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory...

8.8CVSS7.7AI score0.00814EPSS
SaveExploits0References2
Rows per page
Query Builder