Lucene search
+L

6984 matches found

OSV
OSV
•added 2023/11/27 12:15 a.m.•21 views

CVE-2023-49321

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

5.3CVSS5.5AI score0.00613EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/11/27 12:15 a.m.•10 views

CVE-2023-49322

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

7.5CVSS5.8AI score0.00701EPSS
SaveExploits0References3
OSV
OSV
•added 2023/11/27 12:15 a.m.•19 views

CVE-2023-49322

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

7.5CVSS7.3AI score0.00701EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/11/27 12:15 a.m.•13 views

CVE-2023-49321

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

5.3CVSS5.8AI score0.00613EPSS
SaveExploits0References3
Talos
Talos
•added 2023/11/27 12:00 a.m.•72 views

WPS Office ET Data use of uninitialized pointer vulnerability

Talos Vulnerability Report TALOS-2023-1748 WPS Office ET Data use of uninitialized pointer vulnerability November 27, 2023 CVE Number CVE-2023-31275 SUMMARY An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel fil...

8.8CVSS7.4AI score0.01692EPSS
SaveExploits0
CNNVD
CNNVD
•added 2023/11/26 12:00 a.m.•16 views

WithSecure products Security breaches

WithSecure products are a range of security software from the Finnish company WithSecure. A security vulnerability exists in some WithSecure products. An attacker has exploited the vulnerability to cause the scanning engine to crash. The following products and versions are affected: WithSecure...

7.5CVSS6.6AI score0.00701EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/11/26 12:00 a.m.•22 views

PT-2023-31167 · Withsecure · Withsecure Linux Protection +7

Name of the Vulnerable Software and Affected Versions: WithSecure Client Security version 15 WithSecure Server Security version 15 WithSecure Email and Server Security version 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac version 15 WithSecure...

5.3CVSS5.1AI score0.00613EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/11/26 12:00 a.m.•61 views

CVE-2023-49321

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

5.5AI score0.00613EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/11/26 12:00 a.m.•23 views

WithSecure products Security breaches

WithSecure products are a range of security software from the Finnish company WithSecure. A security vulnerability exists in some WithSecure products. An attacker could exploit the vulnerability to cause a denial of service on the system. The following products and versions are affected: WithSecu...

5.3CVSS6.5AI score0.00613EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/23 10:15 a.m.•19 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Medart Health Services Medart Notification Panel allows SQL Injection.This issue affects Medart Notification Panel: through 20231123. NOTE: The vendor was contacted early about this disclosure but...

7.5CVSS7.8AI score0.00809EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/11/23 9:15 a.m.•25 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veribilim Software Computer Veribase allows SQL Injection.This issue affects Veribase: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

7.5CVSS7.8AI score0.00802EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/23 12:00 a.m.•5 views

CVE-2023-3377: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Veribilim Software Computer Veribase allows SQL Injection. This issue affects Veribase: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.8CVSS8.3AI score0.00802EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•17 views

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software arises from the lack of measures to neutralize special elements, allowing a perpetrator to execute arbitrary codes.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to disable user notifications remotely...

9.1CVSS7.2AI score0.01341EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•18 views

The vulnerability of the chromedriver software for automated testing of web applications stems from the lack of measures taken to neutralize special elements used in the operating system command line. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the chromedriver software for automated testing of web applications exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

7.5CVSS7.2AI score0.02233EPSS
SaveExploits1References5Affected Software2
OSV
OSV
•added 2023/11/20 9:15 p.m.•19 views

CVE-2023-47172

Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, and WithSecure Elements Endpoint Protection 17 and later...

7.8CVSS5.8AI score0.00216EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/11/20 9:15 p.m.•8 views

CVE-2023-47172

Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, and WithSecure Elements Endpoint Protection 17 and later...

7.8CVSS5.8AI score0.00216EPSS
SaveExploits0References2
Prion
Prion
•added 2023/11/20 9:15 p.m.•25 views

Privilege escalation

Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, and WithSecure Elements Endpoint Protection 17 and later...

4.3CVSS7.2AI score0.00216EPSS
SaveExploits0References1Affected Software4
CNNVD
CNNVD
•added 2023/11/20 12:00 a.m.•18 views

WithSecure products Security breaches

WithSecure products is a line of security software from the Finnish company WithSecure. A security vulnerability exists in WithSecure products that originates from a local elevation of privilege that allows an attacker with administrator privileges to corrupt kernel memory. Affected products and...

7.8CVSS6.6AI score0.00216EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/20 12:00 a.m.•16 views

PT-2023-30341 · Withsecure · Withsecure Elements Endpoint Protection +3

Name of the Vulnerable Software and Affected Versions: WithSecure Client Security versions 15 WithSecure Server Security versions 15 WithSecure Email and Server Security versions 15 WithSecure Elements Endpoint Protection versions 17 and later Description: The issue allows for Local Privilege...

7.8CVSS7.4AI score0.00216EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/20 12:00 a.m.•5 views

CVE-2023-47172: Undefined Security Weakness

Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, and WithSecure Elements Endpoint Protection 17 and later...

7.8CVSS7.4AI score0.00216EPSS
SaveExploits0References1
Rows per page
Query Builder