Lucene search
+L

117 matches found

osv_cve
osv_cve
•added 2021/12/07 2:15 p.m.•29 views

CVE-2021-42127

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service...

9.8CVSS7.8AI score0.65833EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/07 2:15 p.m.•31 views

CVE-2021-42127

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service...

9.8CVSS0.65833EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/07 2:15 p.m.•31 views

Deserialization of untrusted data

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service...

7.5CVSS9.7AI score0.65833EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/07 1:13 p.m.•37 views

CVE-2021-42127

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service...

9.9AI score0.65833EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/07 1:13 p.m.•80 views

CVE-2021-42127

CVE-2021-42127 affects Ivanti Avalanche before 6.3.3, where deserialization of untrusted data via the Inforail Service (Data Repository Service) allows arbitrary code execution. The Red Hat/NVD/CVE pages corroborate the vulnerability description across multiple feeds. The issue manifests in the I...

9.8CVSS9.7AI score0.65833EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/07 12:00 a.m.•8 views

CVE-2021-42127: Deserialization of Untrusted Data

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service...

9.8CVSS6.3AI score0.65833EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/09/22 12:00 a.m.•8 views

PT-2021-5240

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.3.3 Description The issue is related to a deserialization of untrusted data vulnerability in the StatServer service of Ivanti Avalanche. This vulnerability can be exploited by a remote attacker to execute...

10CVSS0.65833EPSS
SaveExploits0References11
Circl
Circl
•added 2021/07/22 12:00 p.m.•44 views

CVE-2021-31969

creationtimestamp| type| source ---|---|--- 2021-07-22 12:00:07+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3893 2024-11-09 19:00:04+00:00| published-proof-of-concept| https://t.me/cKure/13875 2025-09-25 00:36:28+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...

7.8CVSS7.4AI score0.01218EPSS
SaveExploits2References5
Fedora
Fedora
•added 2020/02/16 1:30 a.m.•50 views

[SECURITY] Fedora 31 Update: ipmitool-1.8.18-19.fc31

This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...

8.8CVSS7.5AI score0.0329EPSS
SaveExploits1
Fedora
Fedora
•added 2020/02/16 1:09 a.m.•43 views

[SECURITY] Fedora 30 Update: ipmitool-1.8.18-19.fc30

This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...

8.8CVSS7.5AI score0.0329EPSS
SaveExploits1
Silent Robot Systems
Silent Robot Systems
•added 2014/08/19 4:00 a.m.•30 views

IPv6 DNS Guessing Notes

A hostname with an IPv6 address is stored as a AAAA resource record in DNS see AAAA record. There are many DNS hostname bruteforcing tools, personally I like Fierce. Suppose we have already run our hostname bruteforcing tool against a target domain e.g. facebook.com. Below we use dig to do a AAAA...

6.6AI score
SaveExploits0
Silent Robot Systems
Silent Robot Systems
•added 2014/08/19 4:00 a.m.•29 views

IPv6 DNS Guessing Notes

A hostname with an IPv6 address is stored as a AAAA resource record in DNS see AAAA record. There are many DNS hostname bruteforcing tools, personally I like Fierce. Suppose we have already run our hostname bruteforcing tool against a target domain e.g. facebook.com. Below we use dig to do a AAAA...

6.6AI score
SaveExploits0
Saint
Saint
•added 2012/05/31 12:00 a.m.•80 views

IBM Lotus Quickr QP2 ActiveX Overflow

Added: 05/31/2012 CVE: CVE-2012-2176 BID: 53678 OSVDB: 82166 Background IBM Lotus Quickr is a team collaboration solution that provides teams with a data repository, and interfaces with Lotus Notes, Sametime, Symphony, and more. Problem The Lotus Quickr client installs several ActiveX controls on...

9.3CVSS6.4AI score0.31603EPSS
SaveExploits10
Fedora
Fedora
•added 2012/01/02 9:56 p.m.•66 views

[SECURITY] Fedora 15 Update: ipmitool-1.8.11-7.fc15

This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...

3.6CVSS0.6AI score0.00425EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/09 12:00 a.m.•12 views

CVE-1999-1488: Undefined Security Weakness

sdrd daemon in IBM SP2 System Data Repository SDR allows remote attackers to read files without authentication...

5CVSS5.8AI score0.0365EPSS
SaveExploits2References1
NVD
NVD
•added 1999/12/31 5:00 a.m.•28 views

CVE-1999-1488

sdrd daemon in IBM SP2 System Data Repository SDR allows remote attackers to read files without authentication...

5CVSS6.4AI score0.0365EPSS
SaveExploits2References3
Exploit DB
Exploit DB
•added 1998/08/05 12:00 a.m.•47 views

IBM Scalable POWERparallel (SP) 2.0 - 'sdrd' File Read

/ source: https://www.securityfocus.com/bid/371/info There is a vulnerability in the System Data Repository SDR subsystem. The SDR subsystem is used in IBM SP multi-machine parallel processing environments typically associated with Super Computing. The SDR is deisgned to allow multiple machines t...

5CVSS5.8AI score0.0365EPSS
SaveExploits2
Rows per page
Query Builder