Lucene search
+L

1177 matches found

OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•12 views

Debian: Security Advisory (DLA-697-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.06762EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 4:27 a.m.•4 views

SUSE CVE-2018-10926

A flaw was found in RPC request using gfs3mknodreq supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node...

8.1CVSS8.8AI score0.02599EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2023/02/15 4:23 a.m.•16 views

SUSE CVE-2018-16874

In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces both '' and '' characters. Specifically, it is only vulnerable in GOPATH mode, but not in module mode th...

6.8CVSS7.8AI score0.05039EPSS
SaveExploits0References37
SUSE CVE
SUSE CVE
•added 2023/02/15 3:40 a.m.•9 views

SUSE CVE-2021-33033

The Linux kernel before 5.11.14 has a use-after-free in cipsov4genopt in net/ipv4/cipsoipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value...

6.7CVSS7AI score0.00571EPSS
SaveExploits1References29
SUSE CVE
SUSE CVE
•added 2023/02/15 3:40 a.m.•11 views

SUSE CVE-2021-33034

In the Linux kernel before 5.12.4, net/bluetooth/hcievent.c has a use-after-free when destroying an hcichan, aka CID-5c4c8c954409. This leads to writing an arbitrary value...

7.7CVSS6.8AI score0.00826EPSS
SaveExploits1References40
OSV
OSV
•added 2023/02/01 5:15 a.m.•12 views

CVE-2022-34400

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM...

7.1CVSS6.2AI score0.00208EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/02/01 4:24 a.m.•12 views

CVE-2022-34400

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM...

7.1CVSS7.1AI score0.00208EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/02/01 12:00 a.m.•17 views

PT-2023-13380 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM...

7.1CVSS7AI score0.00208EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/01 12:00 a.m.•4 views

CVE-2022-34400: Heap-based Buffer Overflow

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM...

7.1CVSS6.5AI score0.00208EPSS
SaveExploits0References3
OSV
OSV
•added 2023/01/13 9:28 p.m.•123 views

GHSA-5V8V-GWMW-QW97 org.neo4j.procedure:apoc Path Traversal Vulnerability

Impact A Path Traversal Vulnerability found in the apoc.export. procedures of apoc plugins in Neo4j Graph database. The issue allows a malicious actor to potentially break out of the expected directory. The vulnerability is such that files could only be created but not overwritten. For the...

7.1CVSS6.7AI score0.00658EPSS
SaveExploits0References4
Prion
Prion
•added 2023/01/09 5:15 p.m.•22 views

Path traversal

Path-Traversal in MKP storing in Tribe29 Checkmk =2.0.0p32 and = 2.1.0p18 allows an administrator to write mkp files to arbitrary locations via a malicious mkp file...

3.3CVSS5.1AI score0.00485EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/01/03 12:00 a.m.•18 views

PT-2023-13513

Name of the Vulnerable Software and Affected Versions SSZipArchive versions 2.5.3 and older Description The issue is related to an arbitrary file write vulnerability due to a lack of sanitization on paths that are symlinks. When SSZipArchive opens a malicious ZIP containing a symlink as the first...

8.1CVSS7.4AI score0.00912EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2022/12/05 11:34 p.m.•50 views

GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package

Summary Unsafe extracting using shutil.unpackarchive from a remotely retrieved tarball may lead to writing the extracted file to an unintended destination. Details Extracting files using shutil.unpackarchive from a potentially malicious tarball without validating that the destination file path is...

6.5CVSS0.6AI score0.00724EPSS
SaveExploits1References6Affected Software1
CNNVD
CNNVD
•added 2022/10/26 12:00 a.m.•17 views

Synology Presto File Server 路径遍历漏洞

Synology Presto File Server is a high-speed file transfer suite from China-based Synology Inc. A path traversal vulnerability exists in Synology Presto File Server versions prior to 2.1.2-1601, which stems from improperly restricting pathnames of restricted directories in the File Operations...

7.5CVSS7.6AI score0.0078EPSS
SaveExploits0References2
OSV
OSV
•added 2022/10/12 8:15 p.m.•15 views

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

7.8CVSS5.9AI score0.00161EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/12 8:15 p.m.•38 views

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

7.8CVSS0.00161EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/12 8:15 p.m.•31 views

Buffer overflow

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

4.3CVSS7.5AI score0.00161EPSS
SaveExploits0References1Affected Software290
Vulnrichment
Vulnrichment
•added 2022/10/12 7:25 p.m.•13 views

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

4.1CVSS7.5AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/10/12 7:25 p.m.•44 views

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

4.1CVSS7.7AI score0.00161EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/12 12:00 a.m.•4 views

CVE-2022-32491: Improper Restriction of Operations within the Bounds of a Memory Buffer

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

7.8CVSS7.5AI score0.00161EPSS
SaveExploits0References3
Rows per page
Query Builder