Lucene search
+L

3007 matches found

NVD
NVD
added 2021/11/01 10:15 p.m.25 views

CVE-2021-43058

An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site...

6.1CVSS0.00581EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/01 10:15 p.m.18 views

Open redirect

An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site...

5.8CVSS6.1AI score0.00581EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/01 10:15 p.m.6 views

CVE-2021-43058

An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site...

6.1CVSS6.4AI score0.00581EPSS
SaveExploits0References2
CVE
CVE
added 2021/11/01 9:03 p.m.50 views

CVE-2021-43058

CVE-2021-43058 is an open redirect in Replicated Classic before 2.53.1, where a crafted URL can spoof users by redirecting them to an untrusted site. Root cause: improper URL handling enabling redirects. Impact: spoofing via user interaction (clicking the malicious link) with partial confidential...

6.1CVSS6.1AI score0.00581EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/01 9:03 p.m.33 views

CVE-2021-43058

An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site...

6.3AI score0.00581EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/11/01 12:00 a.m.9 views

Replicated 输入验证错误漏洞

Replicated is a management software from Replicated, Inc. in the United States. It provides software vendors with a container-based platform for rapidly deploying cloud-native applications in customer environments to provide greater security and control. A security vulnerability exists in...

6.1CVSS6.3AI score0.00581EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/10/29 12:00 a.m.30 views

Adobe Lightroom Classic < 10.4 Privilege escalation (APSB21-97)

The version of Adobe Lightroom Classic installed on the remote Windows host is prior to 10.4. It is, therefore, affected by a vulnerability as referenced in the APSB21-97 advisory. - Adobe Lightroom Classic 10.3 and earlier are affected by a privilege escalation vulnerability in the Offline...

6.6CVSS6.8AI score0.0052EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/10/27 12:00 a.m.10 views

Adobe Lightroom Classic 安全漏洞

Adobe Lightroom Classic is a suite of graphics processing software from Adobe.Adobe Lightroom Classic 10.3 and earlier versions contain an elevation of privilege vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

6.6CVSS6.2AI score0.0052EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/10/26 12:00 a.m.12 views

PT-2021-4769 · Adobe · Lightroom Classic

Name of the Vulnerable Software and Affected Versions: Adobe Lightroom Classic versions 10.3 and earlier Description: The issue is related to a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate...

9.3CVSS6.4AI score0.0052EPSS
SaveExploits0References4
Adobe
Adobe
added 2021/10/26 12:00 a.m.293 views

APSB21-97: Security update available for Adobe Lightroom Classic

Adobe has released updates for Adobe Lightroom Classic for Windows and macOS. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

6.6CVSS7.1AI score0.0052EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2021/10/14 12:00 a.m.19 views

Adobe Reader Classic 2020 Security Update (APSB21-104) - Mac OS X

Adobe Acrobat Reader is prone to multiple code execution and privilege escalation vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.8CVSS7.3AI score0.54627EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/14 12:00 a.m.13 views

Adobe Campaign Classic 跨站脚本漏洞

Adobe Campaign Classic ACC is a suite of cross-channel customer experience marketing platforms from the American company Audobee Adobe. The platform features real-time interaction management, Adobe Experience Cloud integration, data management and integration. A cross-site scripting vulnerability...

5.3AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:00 a.m.20 views

The vulnerability of the Bluetooth Classic platform for software development, developed by Zhuhai Jieli AC6366C BT SDK, stems from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the Bluetooth Classic platform used for software development by Zhuhai Jieli AC6366C BT SDK exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure through the created LMP packe...

6.5CVSS6.6AI score0.00688EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:00 a.m.18 views

The vulnerability of the Bluetooth Classic environment for developing IoT applications allows a intruder to trigger a service failure.

The vulnerability in the Bluetooth Classic environment for IoT application development, espressif esp-idf, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted LMP package...

6.5CVSS5.7AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:00 a.m.27 views

The vulnerability of the Bluetooth Classic microprogramming device implementations of Zhuhai Jieli ATS2815 and ATS2819 arises due to insufficient verification of input data. This allows a perpetrator to trigger a service failure.

The vulnerability of the Bluetooth Classic microprogramming device implementations of Zhuhai Jieli ATS2815 and ATS2819 exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through the created LMP...

6.5CVSS6.6AI score0.00443EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:00 a.m.20 views

The vulnerability of the Bluetooth Classic microprogramming device implementation for CC256xCQFN-EM devices allows a intruder to cause a service failure.

The vulnerability of the Bluetooth Classic microprogramming device implementation for CC256xCQFN-EM devices is related to overflow errors in dynamic memory buffers. Exploiting this vulnerability can allow a remote attacker to cause the device to fail to perform its functions...

6.5CVSS6.6AI score0.00581EPSS
SaveExploits0References3
OSV
OSV
added 2021/10/12 6:15 p.m.15 views

CVE-2021-40618

An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1 ADDRCONTUSRN, 2 ADDRCONTPSWD, 3 SECNCONTUSRN or 4 SECNCONTPSWD parameters in HoldAddressFields.php...

9.8CVSS8.1AI score
SaveExploits0References1
NVD
NVD
added 2021/10/12 6:15 p.m.23 views

CVE-2021-40618

An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1 ADDRCONTUSRN, 2 ADDRCONTPSWD, 3 SECNCONTUSRN or 4 SECNCONTPSWD parameters in HoldAddressFields.php...

9.8CVSS0.01419EPSS
SaveExploits1References1
Prion
Prion
added 2021/10/12 6:15 p.m.21 views

Sql injection

An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1 ADDRCONTUSRN, 2 ADDRCONTPSWD, 3 SECNCONTUSRN or 4 SECNCONTPSWD parameters in HoldAddressFields.php...

7.5CVSS9.8AI score0.01419EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/12 6:15 p.m.7 views

CVE-2021-40618

An SQL Injection vulnerability exists in openSIS Classic 8.0 via the 1 ADDRCONTUSRN, 2 ADDRCONTPSWD, 3 SECNCONTUSRN or 4 SECNCONTPSWD parameters in HoldAddressFields.php...

9.8CVSS7.4AI score0.01419EPSS
SaveExploits1References2
Rows per page
Query Builder