Lucene search
+L

31362 matches found

BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.13 views

The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to escalate their privileges within the system.

The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges within the system...

7.8CVSS7.2AI score0.00638EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.12 views

The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to the disclosure of information. Exploiting this vulnerability could allow a attacker to disclose the protected information...

5.5CVSS6.3AI score0.00872EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.14 views

The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.2AI score0.00557EPSS
SaveExploits0References3
Veracode
Veracode
added 2021/12/12 11:34 p.m.33 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference flaw was found in the Linux kernels IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection...

5.5CVSS5.7AI score0.00272EPSS
SaveExploits0References6Affected Software5
OSV
OSV
added 2021/12/10 4:33 p.m.4 views

SUSE-SU-2021:3997-1 Security update for glib-networking

This update for glib-networking fixes the following issues: - CVE-2020-13645: Fixed a connection failure when the server identity is unset bsc1172460...

6.5CVSS6.7AI score0.0197EPSS
SaveExploits1References3
OSV
OSV
added 2021/12/10 9:49 a.m.4 views

OPENSUSE-SU-2021:1554-1 Security update for glib-networking

This update for glib-networking fixes the following issues: Update to version 2.62.4: - CVE-2020-13645: Fixed a connection failure when the server identity is unset bsc1172460. This update was imported from the SUSE:SLE-15-SP2:Update update project...

6.5CVSS6.4AI score0.0197EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
added 2021/12/10 12:00 a.m.42 views

Security update for glib-networking (important)

openSUSE Security Update: Security update for glib-networking Announcement ID: openSUSE-SU-2021:1554-1 Rating: important References: 1172460 Cross-References: CVE-2020-13645 CVSS scores: CVE-2020-13645 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2020-13645 SUSE: 6.5...

6.5CVSS6.7AI score0.0197EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2021/12/10 12:00 a.m.373 views

Free School Management Software 1.0 Cross Site Scripting

Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: fuzzyap1 Date: 7-12-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15073/free-school-management-software.html Software Link:...

SaveExploits0
OSV
OSV
added 2021/12/09 7:16 p.m.11 views

GHSA-F9XH-2QGP-CQ57 Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource...

8.1CVSS7.1AI score0.10911EPSS
SaveExploits1References13
OSV
OSV
added 2021/12/09 7:16 p.m.14 views

GHSA-CVM9-FJM9-3572 Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS...

8.1CVSS6.9AI score0.05041EPSS
SaveExploits2References13
OSV
OSV
added 2021/12/09 7:15 p.m.19 views

GHSA-5R5R-6HPJ-8GG9 Serialization gadget exploit in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl...

8.1CVSS7.1AI score0.12504EPSS
SaveExploits0References13
RedHat Linux
RedHat Linux
added 2021/12/08 6:31 p.m.14 views

kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free

An issue was discovered in the Linux kernels Userspace Connection Manager Access for RDMA. This could allow a local attacker to crash the system, corrupt memory or escalate privileges...

7.8CVSS6.7AI score0.01476EPSS
SaveExploits0References4
Veracode
Veracode
added 2021/12/07 3:48 p.m.49 views

Remote Code Execution (RCE)

nss is vulnerable to remote code execution. The vulnerability exists due to a flaw in the way NSS verifies certificates allowing an attacker to pose as an SSL/TLS server to trigger this issue in a client application compiled with NSS when it tries to initiate an SSL/TLS connection...

9.8CVSS5.5AI score0.17563EPSS
SaveExploits0References13Affected Software4
RedHat Linux
RedHat Linux
added 2021/12/07 8:41 a.m.18 views

kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free

An issue was discovered in the Linux kernels Userspace Connection Manager Access for RDMA. This could allow a local attacker to crash the system, corrupt memory or escalate privileges...

7.8CVSS6.7AI score0.01476EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/12/07 12:00 a.m.41 views

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3933-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3933-1 advisory. The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: ...

7.5CVSS6.8AI score0.06846EPSS
SaveExploits1References40
CNNVD
CNNVD
added 2021/12/07 12:00 a.m.12 views

Solar-Log 500 访问控制错误漏洞

Solar-Log is a data logger for monitoring PV plants from Solar-Log GmbH in Germany. Solar-Log 500 has a security vulnerability that could be exploited by an attacker to gain administrative privileges by connecting to the server...

7.5CVSS5.6AI score0.02934EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2021/12/07 12:00 a.m.43 views

SUSE: Security Advisory (SUSE-SU-2021:3944-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.0197EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:00 a.m.12 views

The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to escalate their privileges within the system.

The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges within the system...

7.8CVSS7.2AI score0.00601EPSS
SaveExploits0References3
OSV
OSV
added 2021/12/06 1:56 p.m.6 views

SUSE-SU-2021:3944-1 Security update for glib-networking

This update for glib-networking fixes the following issues: Update to version 2.62.4: - CVE-2020-13645: Fixed a connection failure when the server identity is unset bsc1172460...

6.5CVSS6.7AI score0.0197EPSS
SaveExploits1References3
OSV
OSV
added 2021/12/06 1:56 p.m.5 views

OPENSUSE-SU-2021:3944-1 Security update for glib-networking

This update for glib-networking fixes the following issues: Update to version 2.62.4: - CVE-2020-13645: Fixed a connection failure when the server identity is unset bsc1172460...

6.5CVSS6.4AI score0.0197EPSS
SaveExploits1References3
Rows per page
Query Builder