Lucene search
+L

806 matches found

ATTACKERKB
ATTACKERKB
added 2021/02/19 8:15 p.m.5 views

CVE-2021-20587

Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions...

9.8CVSS8.4AI score0.03886EPSS
SaveExploits0References7Affected Software34
Veracode
Veracode
added 2021/02/19 1:24 a.m.28 views

Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists due to a stack overflow in Data Transfer...

8.8CVSS4.3AI score0.01468EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/19 12:00 a.m.7 views

The vulnerability of the Data Transfer component in the Google Chrome web browser allows a hacker to execute arbitrary code.

The vulnerability of the Data Transfer component in the Google Chrome web browser is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.3CVSS8.3AI score0.01468EPSS
SaveExploits1References12Affected Software6
CNVD
CNVD
added 2021/02/18 12:00 a.m.13 views

Google Chrome stack overflow vulnerability (CNVD-2021-13239)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A stack overflow vulnerability exists in Data Transfer in versions prior to Google Chrome 88.0.4324.182. No detailed vulnerability details are provided at this time...

8.8CVSS6.7AI score0.01468EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
added 2021/02/17 11:28 p.m.130 views

Chromium CVE-2021-21149: Stack overflow in Data Transfer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.01468EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/02/17 12:00 a.m.13 views

Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A stack overflow vulnerability exists in Data Transfer in versions prior to Google Chrome 88.0.4324.182. No detailed vulnerability details are provided at this time...

8.8CVSS7.4AI score0.01468EPSS
SaveExploits1References11
NVD
NVD
added 2021/01/26 6:15 p.m.41 views

CVE-2020-25169

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds...

7.5CVSS7.4AI score0.00986EPSS
SaveExploits0References1
HackRead
HackRead
added 2021/01/18 5:45 p.m.43 views

Transferring data between smartphones seamlessly

By Sudais Asif Apple is strict on privacy which is a positive thing to do but what if you would like to transfer or backup WhatsApp data from an iPhone to a PC? This is a post from HackRead.com Read the original post: Transferring data between smartphones seamlessly...

1.6AI score
SaveExploits0
Fedora
Fedora
added 2020/12/15 1:22 a.m.38 views

[SECURITY] Fedora 33 Update: curl-7.71.1-8.fc33

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

7.5CVSS0.09917EPSS
SaveExploits2
OSV
OSV
added 2020/12/14 8:15 p.m.33 views

CVE-2020-8231

Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data...

7.5CVSS6.6AI score0.03721EPSS
SaveExploits1References8
Hacker One
Hacker One
added 2020/10/23 1:00 a.m.34 views

Open-Xchange: Guard WKS lookup: Evil WKS server forces connections to last forever

Any logged-in user can cause denial of service against the AppSuite server by asking Guard to fetch keys from a badly-behaving WKS server. This WKS server's response never ends, tying up a java process and TLS connection forever. Any logged-in user can cause denial of service against the AppSuite...

0.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:00 a.m.9 views

The vulnerabilities in implementations of OPC UA data transfer specifications in industrial networks, related to errors in managing cryptographic keys, allow attackers to disclose protected information.

The vulnerability of implementations of the OPC UA data transfer specification in industrial networks is related to errors in managing cryptographic keys. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

5.3CVSS6.1AI score0.01167EPSS
SaveExploits0References5Affected Software2
NVD
NVD
added 2020/10/01 2:15 a.m.21 views

CVE-2019-20902

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1...

7.5CVSS0.00872EPSS
SaveExploits0References1
OSV
OSV
added 2020/10/01 2:15 a.m.8 views

CVE-2019-20902

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1...

7.5CVSS7.1AI score0.00872EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/01 2:15 a.m.29 views

Code injection

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1...

5CVSS7.5AI score0.00872EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/10/01 1:30 a.m.73 views

CVE-2019-20902

Summary: CVE-2019-20902 describes a vulnerability in Crowd where upgrading via XML Data Transfer can reactivate a disabled OpenLDAP user. The issue affects Crowd versions prior to 3.4.6 and 3.5.0 prior to 3.5.1; fixed in 3.4.6 and 3.5.1+ (per records). Impact/behavior: during upgrade, disabled Op...

7.5CVSS7.5AI score0.00872EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/10/01 1:30 a.m.30 views

CVE-2019-20902

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1...

7.5AI score0.00872EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/09/28 12:00 a.m.36 views

Debian DLA-2382-1 : curl security update

An issue has been found in curl, a command line tool for transferring data with URL syntax. In rare circumstances, when using the multi API of curl in combination with CURLOPTCONNECTONLY, the wrong connection might be used when transfering data later. For Debian 9 stretch, this problem has been...

7.5CVSS6.5AI score0.03721EPSS
SaveExploits1References4
Debian
Debian
added 2020/09/26 3:33 p.m.130 views

[SECURITY] [DLA 2382-1] curl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2382-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 26, 2020 https://wiki.debian.org/LTS -...

7.5CVSS7.9AI score0.03721EPSS
SaveExploits1
NVD
NVD
added 2020/09/09 7:15 a.m.28 views

CVE-2020-3674

Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in Nicobar, QCS405, Saipan, SC8180X, SDX55,...

5.5CVSS0.00207EPSS
SaveExploits0References1
Rows per page
Query Builder