Lucene search
+L

13267 matches found

Cvelist
Cvelist
•added 2022/01/21 6:17 p.m.•50 views

CVE-2021-4032

A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvmfreelapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with...

4.7AI score0.00393EPSS
SaveExploits3References3
CVE
CVE
•added 2022/01/21 6:17 p.m.•152 views

CVE-2021-4032

CVE-2021-4032 affects the Linux kernel KVM: arch/x86/kvm/lapic.c kvm_free_lapic. A failure during memory allocation when constructing a VCPU can mishandle memory errors, causing a kernel crash and enabling local-privilege attackers to trigger a denial of service. The issue exists in kernel versio...

4.9CVSS4.3AI score0.00393EPSS
SaveExploits3References3Affected Software1
Debian CVE
Debian CVE
•added 2022/01/21 6:17 p.m.•98 views

CVE-2021-4032

A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvmfreelapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with...

4.9CVSS6.2AI score0.00393EPSS
SaveExploits3
CNVD
CNVD
•added 2022/01/20 12:00 a.m.•26 views

chaskiq Cross-Site Scripting Vulnerability (CNVD-2022-08227)

Chaskiq is an open source messaging platform. It is used for marketing, support and sales. chaskiq suffers from a cross-site scripting vulnerability that stems from the fact that chaskiq is vulnerable to input errors during web page generation "cross-site scripting". An attacker could exploit thi...

7.3CVSS2.6AI score0.006EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/01/20 12:00 a.m.•18 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to resource management errors, which can be exploited by attackers to perform sandbox escapes through carefully crafted HTML pages...

9.6CVSS8.3AI score0.02038EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
•added 2022/01/19 12:00 a.m.•15 views

The vulnerability of the Adobe InCopy text creation and editing software, related to pointer aliasing errors, allows a hacker to trigger a service failure.

The vulnerability of the Adobe InCopy text creation and editing software is related to pointer aliasing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.02077EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2022/01/18 4:15 p.m.•32 views

CVE-2021-4146

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...

4.3CVSS0.008EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/18 4:15 p.m.•19 views

CVE-2021-4146

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...

4.3CVSS4.5AI score
SaveExploits0References2
Prion
Prion
•added 2022/01/18 4:15 p.m.•26 views

Code injection

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...

4CVSS4.5AI score0.008EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/01/18 3:30 p.m.•3 views

CVE-2021-4146

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...

5.3CVSS0.008EPSS
SaveExploits1References6
CVE
CVE
•added 2022/01/18 3:30 p.m.•108 views

CVE-2021-4146

CVE-2021-4146 relates to Business Logic Errors in pimcore/pimcore prior to version 10.2.6. Multiple connected advisories describe a flaw where discount logic can yield negative amounts, enabling unintended behavior in pricing (e.g., negative cart discounts). The issue stems from insufficient inpu...

4.3CVSS5.5AI score0.008EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/01/18 3:30 p.m.•45 views

CVE-2021-4146 Business Logic Errors in pimcore/pimcore

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...

4.3CVSS4.9AI score0.008EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/18 12:00 a.m.•1 views

PT-2022-11414

Name of the Vulnerable Software and Affected Versions pimcore versions prior to 10.2.9 pimcore versions prior to 10.2.6 Description The issue concerns Business Logic Errors in the pimcore/pimcore GitHub repository. It has been noted that in versions prior to 10.2.9, discounts could be set to...

4.3CVSS0.008EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/18 12:00 a.m.•4 views

CVE-2021-4146: Undefined Security Weakness

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...

4.3CVSS5.8AI score0.008EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/18 12:00 a.m.•10 views

Oracle Java SE和Oracle GraalVM 输入验证错误漏洞

Oracle Java SE is an Oracle Corporation USA product for developing and deploying Java applications on desktops, servers, and embedded devices and in real-time environments.Oracle Java SE is vulnerable to an input validation error that could be exploited by an attacker to potentially cause an...

5.3CVSS5.6AI score0.03765EPSS
SaveExploits0References53
attackerkb
attackerkb
•added 2022/01/17 10:15 a.m.•18 views

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

9.8CVSS7.2AI score0.01387EPSS
SaveExploits1References3
NVD
NVD
•added 2022/01/17 10:15 a.m.•34 views

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

9.8CVSS0.01387EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/17 10:15 a.m.•29 views

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

9.8CVSS6.8AI score
SaveExploits0References2
Prion
Prion
•added 2022/01/17 10:15 a.m.•24 views

Code injection

calibre-web is vulnerable to Business Logic Errors...

7.5CVSS9.4AI score0.01387EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/01/17 9:45 a.m.•3 views

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

9.8CVSS0.01387EPSS
SaveExploits1References6
Rows per page
Query Builder