Lucene search
+L

5838 matches found

CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•15 views

Microsoft Windows Point-to-Point Tunneling Protocol 竞争条件问题漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A competitive conditions iss...

8.1CVSS8.2AI score0.01175EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•17 views

Microsoft Windows Point-to-Point Tunneling Protocol 竞争条件问题漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A competitive conditions iss...

8.1CVSS8.2AI score0.01175EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•15 views

Microsoft Windows Point-to-Point Tunneling Protocol 竞争条件问题漏洞

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A competitive conditions iss...

8.1CVSS8.2AI score0.01175EPSS
SaveExploits0References4
Ubuntu
Ubuntu
•added 2022/10/10 10:19 p.m.•59 views

USN-5669-1: Linux kernel vulnerabilities

It was discovered that the SUNRPC RDMA protocol implementation in the Linux kernel did not properly calculate the header size of a RPC message payload. A local attacker could use this to expose sensitive information kernel memory. CVE-2022-0812 Moshe Kol, Amit Klein and Yossi Gilad discovered tha...

8.2CVSS6.7AI score0.0386EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2022/10/10 12:00 a.m.•13 views

The vulnerability of the unmap_mapping_range function (include/asm-generic/tlb.h) in Linux operating system kernels allows a hacker to trigger a service failure.

The vulnerability of the unmapmappingrange function include/asm-generic/tlb.h in Linux operating system kernels is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause service failures...

6.8CVSS6.6AI score0.00225EPSS
SaveExploits0References47Affected Software5
OpenVAS
OpenVAS
•added 2022/10/05 12:00 a.m.•21 views

Ubuntu: Security Advisory (USN-5655-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.07626EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2022/10/04 6:27 p.m.•76 views

USN-5655-1: Linux kernel (Intel IoTG) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

7.8CVSS7.1AI score0.07626EPSS
SaveExploits1
Hacker One
Hacker One
•added 2022/10/03 4:14 p.m.•122 views

curl: CVE-2022-35260: .netrc parser out-of-bounds access

Summary: Curl expects the .netrc file to have space characters. So if there is no space character, it will do an out-of-bounds read and a 1-byte out-of-bounds write. This can happen multiple times depending on the state of the memory. Steps To Reproduce: curl --netrc-file .netrc test.local ".netr...

4.3CVSS7.8AI score0.01812EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/10/03 12:00 a.m.•13 views

Microsoft Edge 竞争条件问题漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge suffers from a competitive conditions issue vulnerability that stems from the presence of a Chromium-based spoofing vulnerability...

5.3CVSS7.3AI score0.01436EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/10/03 12:00 a.m.•20 views

Google Pixel 竞争条件问题漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a Competitive Conditions Issue vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

7CVSS6.5AI score0.00157EPSS
SaveExploits0References11
OpenVAS
OpenVAS
•added 2022/10/03 12:00 a.m.•31 views

Ubuntu: Security Advisory (USN-5650-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.07626EPSS
SaveExploits8References2
Ubuntu
Ubuntu
•added 2022/09/30 9:51 p.m.•93 views

USN-5650-1: Linux kernel vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 It was...

7.8CVSS6.8AI score0.07626EPSS
SaveExploits8
Tenable Nessus
Tenable Nessus
•added 2022/09/30 12:00 a.m.•46 views

Ubuntu 16.04 ESM : Linux kernel vulnerabilities (USN-5650-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5650-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

7.8CVSS7.1AI score0.07626EPSS
SaveExploits8References15
Huntr
Huntr
•added 2022/09/29 1:44 p.m.•8 views

Stored XSS in Django Admin Portal

Description Django-treebeard suffers from a stored XSS in the TreeAdmin class when certain preconditions are met. The XSS it's triggered when a privileged user visit a page in the django admin portal. In order to successfully exploit this vulnerable, three pre-conditions should occur: 1. 1 a Djan...

0.2AI score
SaveExploits0
Redos
Redos
•added 2022/09/29 12:00 a.m.•83 views

ROS-20220929-01

BIND DNS server vulnerability is related to boundary conditions when reusing HTTP connection when requesting statistics from a statistics channel. Exploitation of the vulnerability could allow an attacker, acting remotely, using a managed DNS server to cause a read error outside the boundary...

8.2CVSS7.2AI score0.03151EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/09/27 6:08 p.m.•87 views

USN-5644-1: Linux kernel (GCP) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

7.8CVSS7.1AI score0.07626EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2022/09/26 3:47 p.m.•104 views

USN-5640-1: Linux kernel (Oracle) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

7.8CVSS7.1AI score0.07626EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2022/09/23 3:03 p.m.•80 views

USN-5635-1: Linux kernel (GKE) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

7.8CVSS7.1AI score0.07626EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2022/09/22 5:27 p.m.•95 views

USN-5633-1: Linux kernel vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Duoming...

7.8CVSS7.1AI score0.07626EPSS
SaveExploits1
Oracle linux
Oracle linux
•added 2022/09/19 12:00 a.m.•70 views

kernel security update

2.6.32-754.35.1.0.7.OL6 - bluetooth: eliminate the potential race condition when removing the HCI controller Lin Ma CVE-2021-32399 Orabug: 33763116 - RDMA/ucma: Put a lock around every call to the rdmacm layer Jason Gunthorpe Orabug: 33763116 - RDMA/cma: Add missing locking to rdmaaccept Leon...

7.8CVSS1.9AI score0.01476EPSS
SaveExploits1
Rows per page
Query Builder