Lucene search
+L

2884 matches found

CNNVD
CNNVD
•added 2023/12/22 12:00 a.m.•15 views

AWS SDK for PHP Path Traversal Vulnerability

Amazon AWS SDK for PHP is a software development kit for Amazon Web Services from Amazon.com, Inc. based on the PHP platform. A path traversal vulnerability exists in AWS SDK for PHP versions prior to 3.288.1, which stems from the presence of a URI path traversal vulnerability...

6CVSS6.8AI score0.00376EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2023/12/22 12:00 a.m.•31 views

SUSE: Security Advisory (SUSE-SU-2023:4942-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.02262EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/12/21 12:00 a.m.•10 views

PT-2023-31869

Name of the Vulnerable Software and Affected Versions AWS SDK for PHP versions prior to 3.288.1 Description A URI path traversal issue exists in the AWS SDK for PHP, specifically within the scope of requests to S3 object keys and/or prefixes containing a Unix double-dot. This issue is possible du...

6CVSS5.5AI score0.00992EPSS
SaveExploits1References22
attackerkb
attackerkb
•added 2023/12/13 11:15 p.m.•9 views

CVE-2023-43586

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access...

8.8CVSS5.8AI score0.00991EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/12/13 12:00 a.m.•44 views

SUSE: Security Advisory (SUSE-SU-2023:4736-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7AI score0.01733EPSS
SaveExploits5References8
OSV
OSV
•added 2023/12/12 6:15 p.m.•14 views

CVE-2023-35625

Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability...

4.7CVSS7.3AI score0.00714EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/12/12 6:15 p.m.•8 views

CVE-2023-35625

Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability...

4.7CVSS6.2AI score0.00714EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/12 12:00 a.m.•16 views

PT-2023-8111

Name of the Vulnerable Software and Affected Versions Azure Machine Learning Compute Instance for SDK Users affected versions not specified Description The issue is related to a lack of protection for service data in Azure Machine Learning, which can allow an attacker to gain unauthorized access ...

4.7CVSS6AI score0.00714EPSS
SaveExploits0References10
OpenVAS
OpenVAS
•added 2023/11/27 12:00 a.m.•36 views

SUSE: Security Advisory (SUSE-SU-2023:4543-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.2AI score0.01381EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2023/11/22 12:00 a.m.•30 views

SUSE: Security Advisory (SUSE-SU-2023:4523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7AI score0.04459EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2023/11/22 12:00 a.m.•34 views

SUSE: Security Advisory (SUSE-SU-2023:4521-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7AI score0.04459EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2023/11/16 12:00 a.m.•39 views

SUSE: Security Advisory (SUSE-SU-2023:4451-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.03003EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2023/11/14 12:00 a.m.•29 views

SUSE: Security Advisory (SUSE-SU-2023:4418-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.4AI score0.04322EPSS
SaveExploits0References9
GithubExploit
GithubExploit
•added 2023/11/12 10:15 p.m.•372 views

Exploit for Code Injection in Vmware Spring_Framework

Spring4Shell Vulnerability - CVE-2022-22965 :closedbook:...

9.8CVSS7.9AI score0.99638EPSS
SaveExploits105
OpenVAS
OpenVAS
•added 2023/11/07 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2023:4368-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.02101EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/11/04 12:00 a.m.•15 views

The vulnerability of the recovery mode implementation in the software development tool for engineering applications, Drawings SDK, relates to writing beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the recovery mode implementation in the software development tool for engineering applications, Drawings SDK, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00315EPSS
SaveExploits0References5Affected Software2
CNNVD
CNNVD
•added 2023/11/03 12:00 a.m.•20 views

Eclipse Glassfish Security Vulnerability

Eclipse GlassFish is an open source application server from the Eclipse Foundation. A security vulnerability exists in Eclipse Glassfish versions 5 and 6, which stems from the use of older versions of the JDK versions prior to 6u211, prior to 7u201, and prior to 8u191, and can be exploited by an...

9.8CVSS7AI score0.0065EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/10/31 12:00 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2023:4269-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.00715EPSS
SaveExploits0References6
OSV
OSV
•added 2023/10/26 2:15 p.m.•17 views

CVE-2023-41096

Missing Encryption of Security Keys vulnerability in Silicon Labs Ember ZNet SDK on 32 bit, ARM SecureVault High modules allows potential modification or extraction of network credentials stored in flash. This issue affects Silicon Labs Ember ZNet SDK: 7.3.1 and earlier...

6.1CVSS5.8AI score0.00107EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/10/25 12:00 a.m.•17 views

The vulnerability of the Compiler component of the Oracle GraalVM for JDK allows a hacker to gain access to read, modify, add, or delete data.

The vulnerability of the Compiler component of the Oracle GraalVM for JDK lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, or delete data...

4.8CVSS5.5AI score0.00365EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder