Lucene search
+L

11718 matches found

BDU FSTEC
BDU FSTEC
added 2021/04/16 12:00 a.m.12 views

The vulnerability of the DIAG Mode implementation in Qualcomm’s embedded software allows a perpetrator to execute arbitrary code or cause malfunctions during maintenance operations.

The vulnerability of the DIAG Mode implementation in Qualcomm’s embedded software lies in the lack of checks for buffer size during array indexing. Exploiting this vulnerability can allow attackers to execute arbitrary code or cause system failures...

7.8CVSS7.9AI score0.00203EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/04/16 12:00 a.m.10 views

The vulnerability of embedded software developed by Qualcomm, related to the swapping of a non-trusted pointer, allows a malicious actor to execute arbitrary code or cause service failures.

The vulnerability of microprogramming software in embedded Qualcomm chips relates to the use of an unreliable pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by reproducing specially created MKV files...

6.5CVSS6.4AI score0.00407EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/04/16 12:00 a.m.10 views

The vulnerability in the implementation of syntactic analysis of user action lists in Qualcomm’s embedded software allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the syntax analysis implementation for the user action list in Qualcomm’s embedded software lies in the buffer overflow that occurs when the TLV Tag-length-value data writing method with the NDPE parameter is used. Exploiting this vulnerability allows a remote attacker to...

10CVSS8.6AI score0.01057EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/04/15 12:00 a.m.39 views

Adobe Bridge TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4.3AI score0.03868EPSS
SaveExploits0References1
Talos
Talos
added 2021/04/15 12:00 a.m.81 views

Cosori Smart 5.8-Quart Air Fryer CS158-AF configuration server code execution vulnerability

Summary A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. Tested Versions Cosori Smart...

8.1CVSS8.6AI score0.01875EPSS
SaveExploits1
Microsoft Security Update
Microsoft Security Update
added 2021/04/13 5:00 p.m.23 views

2020-05 Security Only Update for .NET Framework 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 (KB4556403)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/04/13 5:00 p.m.15 views

2020-08 Security Only Update for .NET Framework 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 (KB4570500)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/04/13 5:00 p.m.20 views

2020-10 Security Only Update for .NET Framework 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 for x64 (KB4580467)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/04/13 5:00 p.m.20 views

2020-05 Security Only Update for .NET Framework 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 for x64 (KB4556403)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/04/13 5:00 p.m.14 views

2020-09 Security Only Update for .NET Framework 4.8 for Windows Embedded Standard 7 for x64 (KB4576490)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/04/13 5:00 p.m.16 views

2020-08 Security Only Update for .NET Framework 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 for x64 (KB4570500)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/04/13 5:00 p.m.15 views

2021-02 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 (KB4602958)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/04/13 5:00 p.m.11 views

2021-02 Security Only Update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 for x64 (KB4602958)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/04/13 5:00 p.m.16 views

2020-10 Security Only Update for .NET Framework 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 (KB4580467)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2021/04/13 5:00 p.m.13 views

2020-09 Security Only Update for .NET Framework 4.8 for Windows Embedded Standard 7 (KB4576490)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.7AI score
SaveExploits0
Veracode
Veracode
added 2021/04/13 2:43 a.m.15 views

Denial Of Service (DoS)

chrono-node is vulnerable to denial of service DoS. The vulnerability exists due to catastrophic backtracking in the regex matching, due to embedded spaces in the parseTimeUnits function...

7.5CVSS4.7AI score0.01987EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2021/04/13 12:00 a.m.81 views

Unspecified vulnerability in Npm chrono-node

Npm chrono-node is an application from Npm USA. Used to handle most date/time formats and extract information from any given text. A security vulnerability exists in Chrono-node prior to version 2.2.4, which stems from the program hanging on date-like strings with a large number of embedded space...

7.5CVSS6.4AI score0.01987EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/12 2:15 p.m.6 views

CVE-2021-24223

The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5uniqidrand, however, in the case of misconfigured servers...

9.8CVSS5.9AI score0.02207EPSS
SaveExploits2References2
NVD
NVD
added 2021/04/12 1:15 p.m.40 views

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

7.5CVSS0.01987EPSS
SaveExploits1References3
Prion
Prion
added 2021/04/12 1:15 p.m.22 views

Design/Logic Flaw

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

5CVSS7.5AI score0.01987EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder