Lucene search
+L

2884 matches found

CNNVD
CNNVD
•added 2021/08/17 12:00 a.m.•17 views

Adobe XMP Toolkit SDK 资源管理错误漏洞

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself. a post-release reuse vulnerability exists in Adobe XMP Toolkit SDK 2020.1 and earlier versions. An attacker could exploit this vulnerability to cause a denial ...

9.3CVSS5.6AI score0.02743EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2021/08/17 12:00 a.m.•15 views

The vulnerability of the MP Daemon diagnostic tool developed by Realtek SDK allows a hacker to execute arbitrary code.

The vulnerability of the MP Daemon diagnostic tool developed by Realtek SDK relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.99877EPSS
SaveExploits1References5Affected Software2
OSV
OSV
•added 2021/08/16 12:15 p.m.•21 views

CVE-2021-35394

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote...

9.8CVSS7.2AI score0.99877EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2021/08/16 12:00 a.m.•25 views

Realtek Jungle SDK 安全漏洞

The Realtek Jungle SDK from China's Realtek Semiconductor Realtek provides an HTTP web server that exposes a management interface that can be used to configure access points. A security vulnerability exists in the Realtek Jungle SDK, which stems from a failure of the product's configuration...

10CVSS8.4AI score0.981EPSS
SaveExploits2References4
attackerkb
attackerkb
•added 2021/08/13 4:15 p.m.•10 views

CVE-2021-3352

The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access view and modify user data without authorization due to improper handling of tokens...

9.1CVSS7.3AI score0.0104EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/08/13 12:00 a.m.•2 views

PT-2021-20174

Name of the Vulnerable Software and Affected Versions Mitel MiContact Center Business versions 8.0.0.0 through 8.1.4.1 Mitel MiContact Center Business versions 9.0.0.0 through 9.3.1.0 Description The issue is related to the improper handling of tokens in the Software Development Kit, allowing an...

9.1CVSS0.0104EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/13 12:00 a.m.•8 views

CVE-2021-3352: Undefined Security Weakness

The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access view and modify user data without authorization due to improper handling of tokens...

9.1CVSS5.8AI score0.0104EPSS
SaveExploits0References1
Cent OS
Cent OS
•added 2021/08/11 4:31 p.m.•649 views

java security update

CentOS Errata and Security Advisory CESA-2021:2845 An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

7.5CVSS6.8AI score0.04238EPSS
SaveExploits0References7
OSV
OSV
•added 2021/08/10 11:59 a.m.•30 views

RLSA-2021:3066 Important: edk2 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe BZ1956284 For more details about the security...

8.1CVSS8.1AI score0.01994EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/08/06 12:00 a.m.•27 views

SUSE: Security Advisory (SUSE-SU-2021:2638-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.2AI score0.01796EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/08/05 12:00 a.m.•15 views

SUSE: Security Advisory (SUSE-SU-2021:2621-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.4AI score0.01012EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/08/04 12:00 a.m.•34 views

SUSE: Security Advisory (SUSE-SU-2021:2589-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.01379EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/07/30 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2021:2564-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.9AI score0.02091EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/07/24 12:00 a.m.•38 views

SUSE: Security Advisory (SUSE-SU-2021:2462-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.0627EPSS
SaveExploits4References7
RedHat Linux
RedHat Linux
•added 2021/07/22 3:08 p.m.•147 views

Important: Red Hat Security Advisory: OpenJDK 11.0.12 Security Update for Windows Builds

The Red Hat Build of OpenJDK 11 java-11-openjdk is now available for Windows. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS6.8AI score0.04238EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2021/07/21 11:52 a.m.•15 views

OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated...

7.5CVSS6.9AI score0.04008EPSS
SaveExploits0References4
OSV
OSV
•added 2021/07/21 7:31 a.m.•29 views

RLSA-2021:2776 Important: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: OpenJDK: Incorrect comparison during range check elimination Hotspot, 8264066 CVE-2021-2388 OpenJDK: FTP PASV command response can cause FtpClient to...

7.5CVSS7AI score0.04238EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/07/21 12:00 a.m.•16 views

Unspecified Vulnerability in Oracle Outside In Technology (CNVD-2021-54720)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. A security vulnerability exists in the Outside In Filters...

7.5CVSS6.2AI score0.01063EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/21 12:00 a.m.•50 views

Unauthorized Access Vulnerability in Oracle Outside In Technology

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. An unauthorized access vulnerability exists in the Outside In...

7.5CVSS7AI score0.01142EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/21 12:00 a.m.•63 views

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-54725)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. An...

7.5CVSS4.4AI score0.01442EPSS
SaveExploits0References1
Rows per page
Query Builder