Lucene search
+L

4444 matches found

OSV
OSV
•added 2024/03/12 5:15 p.m.•9 views

CVE-2024-26159

Microsoft ODBC Driver Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.01947EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/12 12:00 a.m.•13 views

Microsoft ODBC Driver Security Vulnerability

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft WDAC ODBC Driver. The following products and versions are affected: Windows 1...

8.8CVSS7.2AI score0.01947EPSS
SaveExploits0References3
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•35 views

[SECURITY] Fedora 40 Update: mysql-connector-java-8.0.30-6.fc40

MySQL Connector/J is a native Java driver that converts JDBC Java Database Connectivity calls into the network protocol used by the MySQL database. It lets developers working with the Java programming language easily build programs and applets that interact with MySQL and connect all corporate...

8.8CVSS6.8AI score0.02578EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
•added 2024/03/05 12:00 a.m.•17 views

The vulnerability of the JDBC URL Handler component of the Apache InLong data integration platform allows a attacker to execute arbitrary code.

The vulnerability of the JDBC URL Handler component of the Apache InLong data integration platform relates to the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.01228EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2024/03/01 6:15 a.m.•17 views

CVE-2024-25386

Directory Traversal vulnerability in DICOM® Connectivity Framework by laurelbridge before v.2.7.6b allows a remote attacker to execute arbitrary code via the formatlogfile.pl file...

8.8CVSS7.5AI score0.01731EPSS
SaveExploits0References3
Prion
Prion
•added 2024/03/01 6:15 a.m.•25 views

Directory traversal

Directory Traversal vulnerability in DICOM® Connectivity Framework by laurelbridge before v.2.7.6b allows a remote attacker to execute arbitrary code via the formatlogfile.pl file...

8.1AI score0.01731EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/01 12:00 a.m.•16 views

DICOM Connectivity Framework Security Vulnerability

The DICOM Connectivity Framework is an advanced, object-oriented collection of native software components that implements the DICOM protocol for medical imaging systems. A security vulnerability exists in DICOM Connectivity Framework prior to version v.2.7.6b, which stems from a directory travers...

8.8CVSS7.8AI score0.01731EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/01 12:00 a.m.•11 views

CVE-2024-25386

Directory Traversal vulnerability in DICOM® Connectivity Framework by laurelbridge before v.2.7.6b allows a remote attacker to execute arbitrary code via the formatlogfile.pl file...

8.8AI score0.01731EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/01 12:00 a.m.•17 views

PT-2024-20911 · Unknown · Dicom Connectivity Framework

Name of the Vulnerable Software and Affected Versions: DICOM Connectivity Framework versions prior to 2.7.6b Description: The issue allows a remote attacker to execute arbitrary code via the format logfile.pl file. This is a Directory Traversal vulnerability, which can be exploited to access file...

8.8CVSS8.2AI score0.01731EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2024/03/01 12:00 a.m.•29 views

CVE-2024-25386

Directory Traversal vulnerability in DICOM® Connectivity Framework by laurelbridge before v.2.7.6b allows a remote attacker to execute arbitrary code via the formatlogfile.pl file...

7.7AI score0.01731EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/01 12:00 a.m.•91 views

CVE-2024-25386

The DICOM® Connectivity Framework by laurelbridge is vulnerable to a Directory Traversal vulnerability in versions prior to v.2.7.6b . A remote attacker can exploit this flaw via the format_logfile.pl file to execute arbitrary code and access files or directories outside of the intended scope. To...

8.8CVSS7.7AI score0.01731EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/01 12:00 a.m.•4 views

CVE-2024-25386: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in DICOM® Connectivity Framework by laurelbridge before v.2.7.6b allows a remote attacker to execute arbitrary code via the formatlogfile.pl file...

8.8CVSS6.6AI score0.01731EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/19 12:00 a.m.•20 views

eProsima Fast DDS Access Control Error Vulnerability

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. An access control error vulnerability exists in eProsima Fast DDS versions prior to 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, which stems from a security issue in the RTP...

9.6CVSS6.6AI score0.00478EPSS
SaveExploits0References6
OSV
OSV
•added 2024/02/13 6:15 p.m.•8 views

CVE-2024-21347

Microsoft ODBC Driver Remote Code Execution Vulnerability...

7.5CVSS7.4AI score0.01372EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/06 1:15 a.m.•22 views

CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

9.8CVSS10AI score0.87608EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2024/02/06 1:15 a.m.•26 views

CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

9.8CVSS6.1AI score0.87608EPSS
SaveExploits2References4
Prion
Prion
•added 2024/02/06 1:15 a.m.•21 views

Command injection

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

7.5CVSS8.7AI score0.87608EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2024/02/06 12:00 a.m.•38 views

CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

10AI score0.87608EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/06 12:00 a.m.•3 views

CVE-2023-46359: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

9.8CVSS6.5AI score0.87608EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/02/06 12:00 a.m.•19 views

CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

8.4AI score0.87608EPSS
SaveExploits1References1
Rows per page
Query Builder