Lucene search
+L

3476 matches found

attackerkb
attackerkb
•added 2021/07/14 2:15 p.m.•10 views

CVE-2021-0515

In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

10CVSS8.4AI score0.01436EPSS
SaveExploits0References2
Mend
Mend
•added 2021/07/14 1:43 p.m.•2 views

CVE-2021-0515

In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

10CVSS0.01436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/07/14 1:43 p.m.•35 views

CVE-2021-0515

In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

9.5AI score0.01436EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/07/13 12:00 a.m.•18 views

The vulnerability of Western Digital WD My Book Live and WD My Book Live Duo disk storage devices stems from authentication procedures that have flaws. This allows attackers to reset the device to its factory settings.

The vulnerability of the microprogrammed software in Western Digital WD My Book Live and WD My Book Live Duo storage devices is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

8.5CVSS7.4AI score0.1271EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2021/07/13 12:00 a.m.•21 views

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2021-2190)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS4.3AI score0.00268EPSS
SaveExploits0References2
OSV
OSV
•added 2021/07/08 2:15 p.m.•23 views

CVE-2021-25433

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal...

5.5CVSS6.1AI score0.00223EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/08 2:15 p.m.•43 views

CVE-2021-25433

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal...

5.5CVSS0.00223EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/07/08 2:15 p.m.•12 views

CVE-2021-25440

Improper access control vulnerability in FactoryCameraFB prior to version 3.4.74 allows untrusted applications to access arbitrary files with an escalated privilege...

7.8CVSS7.5AI score0.00367EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/07/08 2:15 p.m.•13 views

CVE-2021-25433

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal...

5.5CVSS5.7AI score0.00223EPSS
SaveExploits0References2
Prion
Prion
•added 2021/07/08 2:15 p.m.•35 views

Authorization

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal...

4.9CVSS5.5AI score0.00223EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/07/08 1:45 p.m.•46 views

CVE-2021-25433

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal...

5.8AI score0.00223EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/08 1:45 p.m.•79 views

CVE-2021-25433

The CVE-2021-25433 entry describes an improper authorization vulnerability in the Tizen factory reset policy prior to the Firmware update JUL-2021 Release. The flaw allows untrusted applications to trigger a factory reset via a dbus signal, indicating a local‑level attack path with low attack com...

5.5CVSS5.5AI score0.00223EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/08 12:00 a.m.•9 views

CVE-2021-25433: Improper Authorization

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal...

5.5CVSS5.8AI score0.00223EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/07/08 12:00 a.m.•2 views

PT-2021-16624

Name of the Vulnerable Software and Affected Versions: Tizen versions prior to Firmware update JUL-2021 Release Description: The issue is related to an improper authorization vulnerability in the Tizen factory reset policy. This vulnerability allows untrusted applications to perform a factory res...

5.5CVSS0.00223EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/07/08 12:00 a.m.•18 views

Samsung Tizen安全漏洞

Samsung Tizen is an open source Linux kernel-based mobile operating system from South Korea's Samsung, available for devices including smartphones, tablets, smartwatches, netbooks, in-car messaging and entertainment devices, and smart TVs. Tizen suffers from a security vulnerability that stems fr...

5.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/07/08 12:00 a.m.•19 views

CVE-2021-32000

A UNIX Symbolic Link Symlink Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux...

7.1CVSS6.5AI score0.00296EPSS
SaveExploits1References2
OSV
OSV
•added 2021/07/07 2:15 p.m.•18 views

CVE-2021-32534

QSAN SANOS factory reset function does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0...

9.8CVSS7.5AI score0.01924EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/07 2:15 p.m.•27 views

CVE-2021-32534

QSAN SANOS factory reset function does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0...

9.8CVSS0.01924EPSS
SaveExploits0References1
Prion
Prion
•added 2021/07/07 2:15 p.m.•22 views

Design/Logic Flaw

QSAN SANOS factory reset function does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0...

7.5CVSS9.8AI score0.01924EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/07/07 12:12 p.m.•10 views

CVE-2021-32534

QSAN SANOS factory reset function does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0...

9.8CVSS7.2AI score0.01924EPSS
SaveExploits0References2
Rows per page
Query Builder