Lucene search
K

1238 matches found

CNVD
CNVD
added 2021/06/10 12:0 a.m.10 views

Vembu BDR Suite Code Issue Vulnerability

Vembu BDR Suite is a virtual machine management system. A code issue vulnerability exists in Vembu BDR Suite that stems from allowing unauthenticated SSRF via a GET request that specifies a hostname and port number.No detailed vulnerability details are available at this time...

8.8CVSS7.1AI score0.00234EPSS
Exploits0References1
CNVD
CNVD
added 2021/06/09 12:0 a.m.8 views

Open Design Alliance Drawings SDK Code Issue Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to .dwg and .dgn data through a convenient, object-oriented API, a C++ API, support for repairing files, and support for . A code issue...

7.8CVSS7AI score0.0033EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.3 views

Vembu BDR Suite 代码问题漏洞

Vembu BDR Suite is a virtual machine management system. A code issue vulnerability exists in Vembu BDR Suite, which can be exploited by an attacker to write an unauthenticated file via a GET request that specifies the name and content of the file...

9.8CVSS5.7AI score0.00743EPSS
Exploits0References5
CNVD
CNVD
added 2021/06/04 12:0 a.m.5 views

Mcafee Database Security Server Code Issue Vulnerability (CNVD-2021-39504)

Mcafee Database Security Server is a database security software from Mcafee USA. The software provides users with a holistic view of the database and the corresponding security status, protecting business-critical databases from external, internal and insider database threats in real time. A code...

10CVSS7AI score0.04277EPSS
Exploits0References1
CNVD
CNVD
added 2021/06/04 12:0 a.m.27 views

PHPMailer code issue vulnerability

PHPMailer is a PHP class library for sending emails. PHPMailer is vulnerable to a code issue that allows object injection via addAttachment with a UNC pathname via Phar deserialization. No details of the vulnerability are currently available...

9.8CVSS3.5AI score0.00304EPSS
Exploits0References1
CNVD
CNVD
added 2021/06/04 12:0 a.m.5 views

Mcafee Database Security Server Code Issue Vulnerability

Mcafee Database Security Server is a database security software from Mcafee USA. The software provides users with a holistic view of the database and the corresponding security status, protecting business-critical databases from external, internal and insider database threats in real time. A code...

9CVSS6.9AI score0.01214EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/02 12:0 a.m.2 views

Apache EasyApache 代码问题漏洞

EasyApache is a powerful and easy-to-use tool from the Apache USA Foundation, built into WHM/cPanel, that can be used to update and configure the Apache web server. A code issue vulnerability exists in Apache EasyApache that stems from pointing NULL pointers to MODHTTP2, MODSESSION, and...

7.5CVSS7.5AI score0.11001EPSS
Exploits0References32
CNVD
CNVD
added 2021/05/31 12:0 a.m.6 views

QEMU code issue vulnerability (CNVD-2021-41093)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A code issue vulnerability exists in QEMU versions prior to 6.0.0 for SCSI Emulation Support. An attacker could exploit this...

6CVSS6.5AI score0.00117EPSS
Exploits0References1
CNVD
CNVD
added 2021/05/28 12:0 a.m.7 views

Checkbox Survey Code Issue Vulnerability

Checkbox Survey is an ASP.NET application from Checkbox Survey. A code issue vulnerability exists in Untrusted Data in CheckboxWeb.dll in versions prior to Checkbox Survey 7. The vulnerability allows an unauthenticated, remote attacker to execute arbitrary code...

9.8CVSS7.5AI score0.25548EPSS
Exploits0References1
CNVD
CNVD
added 2021/05/28 12:0 a.m.3 views

Red Hat Ansible Code Issue Vulnerability (CNVD-2021-39042)

Red Hat Ansible is a computer system configuration manager from Red Hat. The product can be used to publish, manage, and orchestrate computer systems.Ansible Tower is one of the mission control applications that provides a user interface UI, dashboards, and a REST API. A code issue vulnerability...

5.5CVSS6.9AI score0.00039EPSS
Exploits0References1
CNVD
CNVD
added 2021/05/28 12:0 a.m.6 views

Google TensorFlow code issue vulnerability (CNVD-2021-48868)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A code issue vulnerability exists in Google TensorFlow 2.4.2, 2.3.3, 2.2.3, 2.1.4, which stems from tf.rawops.FusedBatchNorm demonstrating undefined behavior by dereferencing null pointers to...

7.8CVSS6.6AI score0.00012EPSS
Exploits1References1
CNVD
CNVD
added 2021/05/28 12:0 a.m.7 views

Red Hat Ansible Code Issue Vulnerability

Red Hat Ansible is a computer system configuration manager from Red Hat. The product can be used to publish, manage, and orchestrate computer systems.Ansible Tower is one of the mission control applications that provides a user interface UI, dashboards, and a REST API. A code issue vulnerability...

3.3CVSS6.9AI score0.00035EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/05/25 12:0 a.m.2 views

IBM DB2 代码问题漏洞

IBM DB2 is a set of relational database management system from IBM in the United States. The system is executed on UNIX, Linux, IBMi, z/OS, and Windows server versions. A code issue vulnerability exists in IBM DB2 that allows local users to execute arbitrary code and conduct DLL hijacking attacks...

7.8CVSS7.9AI score0.00116EPSS
Exploits0References7
CNNVD
CNNVD
added 2021/05/25 12:0 a.m.2 views

Apple Safari 代码问题漏洞

Apple Safari is a web browser from Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A code issue vulnerability exists in Apple Safari. A remote attacker could cause a denial of service...

7.5CVSS6.9AI score0.00469EPSS
Exploits0References10
CNVD
CNVD
added 2021/05/21 12:0 a.m.5 views

Emerson Rosemount X-STREAM Gas Analyzer Code Issue Vulnerability

The Emerson Rosemount X-STREAM Gas Analyzer is an Emerson gas analyzer for industrial environments. The device supports up to five component gas analyzers and features NDIR/UV/VIS photometry, paramagnetic and electrochemical O2, thermal conductivity and humidity sensors. The Emerson Rosemount...

9.8CVSS7.8AI score0.00695EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/05/20 12:0 a.m.1 views

Red Hat Keycloak代码问题漏洞

Red Hat Keycloak is a suite of software from Red Hat USA that provides authentication and management capabilities for modern applications and services. A code issue vulnerability exists in Red Hat Keycloak Code Issue Vulnerability. No information about this vulnerability is available at this time...

7.1CVSS7.2AI score0.00052EPSS
Exploits0References7
CNNVD
CNNVD
added 2021/05/17 12:0 a.m.3 views

Travis Ralston matrix-react-sdk 代码问题漏洞

Travis Ralston matrix-react-sdk is an open source application by Travis Ralston. Used to insert the Matrix chat/voice client into a web page. A code issue vulnerability exists in Matrix-React-SDK that arises from an improperly designed or implemented code development process for a web system or...

7.8CVSS7.4AI score0.00174EPSS
Exploits0References4
CNVD
CNVD
added 2021/05/17 12:0 a.m.8 views

Juniper Networks Junos OS Code Issue Vulnerability (CNVD-2021-37736)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS has a code issue vulnerability, and no details of the vulnerability are provided at this time...

5.8CVSS7.1AI score0.00187EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/05/11 12:0 a.m.4 views

Microsoft Exchange Server 代码问题漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. A code issue vulnerability exists in Microsoft Exchange Server. The following...

6.6CVSS8AI score0.93835EPSS
Exploits11References8
CNNVD
CNNVD
added 2021/05/10 12:0 a.m.2 views

InvoicePlane 代码问题漏洞

InvoicePlane is a software application. Provides a self-hosted open source application for managing your quotes, invoices, customers and payments. A code issue vulnerability exists in InvoicePlane version 1.5.11. The vulnerability allows an attacker to obtain the full path to the file upload...

5.3CVSS5.9AI score0.00232EPSS
Exploits1References1
Rows per page
Query Builder