Lucene search
+L

128 matches found

OSV
OSV
•added 2021/12/01 10:15 a.m.•33 views

CVE-2021-4019

vim is vulnerable to Heap-based Buffer Overflow...

7.8CVSS3.9AI score
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2021/12/01 10:15 a.m.•36 views

CVE-2021-4019

vim is vulnerable to Heap-based Buffer Overflow...

7.8CVSS7.1AI score0.01927EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/12/01 12:00 a.m.•37 views

CVE-2021-4019 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

7.1CVSS8AI score0.01927EPSS
SaveExploits1References8
CVE
CVE
•added 2021/12/01 12:00 a.m.•360 views

CVE-2021-4019

CVE-2021-4019 affects Vim. The vulnerability is described as a heap-based buffer overflow in Vim, with advisories noting exploitation could crash or potentially enable code execution when processing crafted input files. Public documents indicate vulnerable versions are legacy Vim builds prior to ...

7.8CVSS7.3AI score0.01927EPSS
SaveExploits1References9Affected Software1
Debian CVE
Debian CVE
•added 2021/12/01 12:00 a.m.•42 views

CVE-2021-4019

vim is vulnerable to Heap-based Buffer Overflow...

7.8CVSS3.9AI score0.01927EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2021/02/02 12:00 a.m.•55 views

pfSense 2.4.x < 2.4.4-p1 Multiple Vulnerabilities (SA-18_09)

According to its self-reported version number, the remote pfSense install is a version 2.4.x prior to 2.4.4-p1. It is, therefore, affected by multiple vulnerabilities, including the following: - An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE...

7.2CVSS6.5AI score0.7221EPSS
SaveExploits3References8
CVE
CVE
•added 2020/06/01 6:35 a.m.•76 views

CVE-2020-4019

CVE-2020-4019 affects the Atlassian Companion App prior to version 1.0.0. The issue is an untrusted search path vulnerability that allows a local attacker to cause the app to execute a different executable in place of cmd.exe. This is a local, user-interaction-free vector per the NVD entry, with ...

7.8CVSS7.4AI score0.00354EPSS
SaveExploits0References1Affected Software1
Atlassian
Atlassian
•added 2020/04/16 9:16 p.m.•65 views

Untrusted Search Path in Content - Edit Files / Companion - CVE-2020-4019

The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability. h5. Acknowledgements Credit for finding this vulnerability goes to Johannes...

7.8CVSS7.1AI score0.00354EPSS
SaveExploits0
CVE
CVE
•added 2020/02/20 5:27 p.m.•119 views

CVE-2014-4019

The ZTE ZXV10 W300 router, running firmware W300V1.0.0a_ZRD_LK , is vulnerable to a sensitive information disclosure flaw. Due to insufficient access control under the web root, remote attackers can perform a direct GET request to download the rom-0 backup file without any authentication. This fi...

7.5CVSS7.2AI score0.12669EPSS
SaveIn wildExploits6References4Affected Software1
Circl
Circl
•added 2018/12/06 5:58 p.m.•22 views

CVE-2018-4019

creationtimestamp| type| source ---|---|--- 2018-12-06 17:58:41+00:00| seen| MISP/5c096266-ed20-42e5-a389-515d0a021402 2022-01-28 05:51:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/125...

7.2CVSS7.1AI score0.48721EPSS
SaveExploits1References1
CVE
CVE
•added 2018/12/03 10:00 p.m.•77 views

CVE-2018-4019

Netgate pfSense CE 2.4.4-RELEASE is affected by three remote command-injection vulnerabilities in the POST handling of system_advanced_misc.php (powerd_normal_mode, powerd_ac_mode, powerd_battery_mode). An attacker must authenticate to the pfSense web admin interface to exploit these via crafted ...

7.2CVSS7.4AI score0.48721EPSS
SaveExploits1References1Affected Software1
Talos
Talos
•added 2018/12/03 12:00 a.m.•93 views

Netgate pfSense system_advanced_misc.php multiple remote command injection vulnerabilities

Summary Three exploitable command injection vulnerabilities exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send...

7.2CVSS7.7AI score0.7221EPSS
SaveExploits3
CVE
CVE
•added 2018/03/16 2:04 p.m.•33 views

CVE-2017-4019

CVE-2017-4019 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2018/01/23 12:00 a.m.•70 views

Oracle Linux 6 : microcode_ctl (ELSA-2018-4019) (Spectre)

Description of changes: 1:1.17-25.4.0.2 - Revert: early microcode load to allow updating Broadwell model 79 - Revert: Make sure 'modprobe microcode' is not executed on Broadwell model 79 - Revert: Run dracut upon microcode update - Revert updated Intel 20180108 microcode for CPUIDs: CVE-2017-5715...

5.6CVSS7.2AI score0.74041EPSS
SaveExploits10References2
OpenVAS
OpenVAS
•added 2017/11/04 12:00 a.m.•52 views

Debian: Security Advisory (DSA-4019-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.03823EPSS
SaveExploits9References3
NVD
NVD
•added 2017/01/18 10:59 p.m.•25 views

CVE-2016-4019

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477...

7.5CVSS7.5AI score0.02025EPSS
SaveExploits0References3
CVE
CVE
•added 2017/01/18 10:00 p.m.•66 views

CVE-2016-4019

Technical details about CVE-2016-4019 are not publicly available in the provided documents; no affected components, root cause, or fixes are specified. Monitor for updates from Zimbra advisories and related references.

7.5CVSS7.5AI score0.02025EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•47 views

Oracle: Security Advisory (ELSA-2010-0109)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7AI score0.16263EPSS
SaveExploits8References2
Openbugbounty
Openbugbounty
•added 2015/09/18 8:24 p.m.•12 views

macworld.co.uk XSS vulnerability

Vulnerable URL: http://www.macworld.co.uk/login/?originurl=http://www.macworld.co.uk/\x" Details: Description| Value ---|--- Patched:| Yes, at 29.09.2016 Latest check for patch:| 29.09.2016 19:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4019 Google...

6.4AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
•added 2015/03/28 12:00 a.m.•16 views

VulnCheck KEV: CVE-2014-4019

ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direct request for rom-0...

7.5CVSS7.1AI score0.12669EPSS
SaveIn wildExploits6References2
Rows per page
Query Builder