Lucene search
+L

2013 matches found

ATTACKERKB
ATTACKERKB
added 2021/03/04 9:15 p.m.9 views

CVE-2021-25333

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code...

3.2CVSS4.8AI score0.00256EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/04 12:00 a.m.6 views

Samsung Internet 安全漏洞

Samsung Internet is a cell phone application from Samsung South Korea. It provides a browser function. A security vulnerability exists in Samsung Internet versions prior to 13.0.1.60, which stems from allowing access to internally stored files. No details of the vulnerability are provided at this...

2.4CVSS5.5AI score0.00259EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/03 12:00 a.m.9 views

Datadog API 安全漏洞

Github datadog-api-client-java is Github an open source application . Provides a JAVA API interface. Datadog API before version 1.0.0-beta.9 A security vulnerability exists in the Datadog API before version 1.0.0-beta.9, which stems from a local disclosure of sensitive information downloaded...

4.3CVSS4.9AI score0.00563EPSS
SaveExploits0References3
OSV
OSV
added 2021/02/24 4:15 p.m.7 views

CVE-2020-7846

Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page...

8.8CVSS7.4AI score0.01027EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/17 2:15 p.m.14 views

CVE-2020-24492

Insufficient access control in the firmware for the IntelR 722 Ethernet Controllers before version 1.5 may allow a privileged user to potentially enable a denial of service via local access...

4.4CVSS5.8AI score0.00294EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/17 2:15 p.m.6 views

CVE-2020-12367

Integer overflow in some IntelR Graphics Drivers before version 26.20.100.8476 may allow a privileged user to potentially enable an escalation of privilege via local access...

7.8CVSS7.1AI score0.00264EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/02/17 2:15 p.m.6 views

CVE-2020-24458

Incomplete cleanup in some IntelR PROSet/Wireless WiFi and Killer TM drivers before version 22.0 may allow a privileged user to potentially enable information disclosure and denial of service via adjacent access...

5.2CVSS5.6AI score0.00379EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/02/17 12:00 a.m.12 views

Das U-Boot 安全漏洞

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A security vulnerability exists in versions prior to Das U-Boot 2021.04-rc2 that stems from the bootload...

7.8CVSS7.1AI score0.01095EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/02/16 12:00 a.m.18 views

Zscaler Client Connector Security Vulnerability

A security vulnerability exists in the Zscaler Client Connector prior to 3.1.0 that allows local users to execute code with system privileges or perform limited actions for which they do not have privileges...

7.8CVSS7.3AI score0.00429EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/11 6:15 p.m.9 views

CVE-2020-13185

Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials...

6.5CVSS6.7AI score0.0097EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/02/11 12:00 a.m.12 views

Teradici Cloud Access Connector Security Vulnerability

A security vulnerability exists in Teradici Cloud Access Connector prior to v18, which stems from the fact that certain web application pages can be accessed without specifying an authentication token, which can be exploited by an attacker to execute sensitive functions without credentials...

6.5CVSS6.7AI score0.0097EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/02/10 12:00 a.m.15 views

迈克菲 McAfee Total Protection 后置链接漏洞

McAfee Total Protection MTP is a one-stop security suite. An elevation of privilege vulnerability exists in McAfee Total Protection prior to version 16.0.30. A local attacker can exploit this vulnerability to elevate privileges and perform arbitrary file deletions with SYSTEM user privileges, whi...

7.8CVSS6.5AI score0.00654EPSS
SaveExploits0References3
OSV
OSV
added 2021/02/09 11:15 p.m.9 views

CVE-2021-26953

An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via a user-provided Read implementation...

7.5CVSS5.8AI score0.01489EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/09 5:15 p.m.10 views

CVE-2020-26998

A vulnerability has been identified in JT2Go All versions V13.1.0.2, Teamcenter Visualization All versions V13.1.0.2. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker...

5.5CVSS6AI score0.00646EPSS
SaveExploits0References4
OSV
OSV
added 2021/02/09 2:15 p.m.14 views

UBUNTU-CVE-2021-21125

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

8.1CVSS7.3AI score0.08084EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/02/09 12:00 a.m.15 views

Rust 信息泄露漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. An information disclosure vulnerability exists in versions of Rust prior to 0.14.0, which can be exploited by an attacker to obtain sensitive information from uninitialized memory locations via a user-supplied...

7.5CVSS7.1AI score0.01489EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/02/09 12:00 a.m.20 views

Intel Graphics Drivers 安全漏洞

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Intel® Graphics Drivers Multi-Generation Processor Privilege Escalation Vulnerability, Inadequate control flow management in some IntelR kernel-mode drivers for graphics...

7.8CVSS7.1AI score0.00264EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/02/08 12:00 a.m.18 views

marked 资源管理错误漏洞

marked is the United States Christopher Jeffrey personal developer of a Markdown parser and compiler written in JavaScript . A resource management error vulnerability exists in Marked versions 1.1.1 and prior to 2.0.0, which can affect any user who runs user-generated code through Marked. No...

7.5CVSS7.2AI score0.02462EPSS
SaveExploits0References7
OSV
OSV
added 2021/02/03 4:15 p.m.10 views

CVE-2020-28001

SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS...

5.4CVSS6.1AI score0.03789EPSS
SaveExploits2References4
ATTACKERKB
ATTACKERKB
added 2021/02/03 4:15 p.m.4 views

CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

5.3CVSS5.7AI score0.00809EPSS
SaveExploits0References3
Rows per page
Query Builder