Lucene search
+L

3339 matches found

Cvelist
Cvelist
•added 2021/12/03 10:50 a.m.•46 views

CVE-2021-43772

Trend Micro Security 2021 v17.0 Consumer contains a vulnerability that allows files inside the protected folder to be modified without any detection...

5.7AI score0.00211EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/03 10:50 a.m.•66 views

CVE-2021-43772

Trend Micro Security 2021 family (Consumer) Product: Trend Micro Security 2021 v17.0 (Consumer). Vulnerability: A security feature issue in Folder Shield allows a local user to modify files inside a Folder Shield–protected folder without detection, potentially bypassing protections and compromisi...

5.5CVSS5.4AI score0.00211EPSS
SaveExploits0References1Affected Software4
Positive Technologies
Positive Technologies
•added 2021/12/03 12:00 a.m.•11 views

PT-2021-23923

Name of the Vulnerable Software and Affected Versions: Trend Micro Security 2021 version 17.0 Description: The issue allows files inside the protected folder to be modified without any detection. Recommendations: For Trend Micro Security 2021 version 17.0, at the moment, there is no information...

5.5CVSS0.00211EPSS
SaveExploits0References6
CNVD
CNVD
•added 2021/11/09 12:00 a.m.•79 views

GNU Hurd has an unspecified vulnerability (CNVD-2021-100612)

Gnu Hurd is a Gnu project replacement for the Unix kernel. A security vulnerability exists in GNU Hurd, which stems from the fact that in versions of GNU Hurd prior to 0.9 20210404-9 each person who maps a file shares a page navigation port, allowing anyone to modify any file they can read. any...

9CVSS2.6AI score0.01973EPSS
SaveExploits1References1
Hacker One
Hacker One
•added 2021/11/08 9:24 p.m.•105 views

U.S. Dept Of Defense: Unauthenticated Access to Admin Panel Functions at https://██████████/████████

Description: I discovered that the admin panel at https://████/█████ and all its functions can be accessed without authentication. Impact An attacker is able to use the administrative functions in order to upload, delete or modify files. System Hosts ████████ Affected Products and Versions ██████...

7.4AI score
SaveExploits0
NVD
NVD
•added 2021/11/07 6:15 p.m.•42 views

CVE-2021-43413

An issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among everyone who mmaps a file, allowing anyone to modify any files that they can read. This can be trivially exploited to get full root access...

9CVSS0.01973EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/11/07 5:06 p.m.•40 views

CVE-2021-43413

An issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among everyone who mmaps a file, allowing anyone to modify any files that they can read. This can be trivially exploited to get full root access...

8.8AI score0.01973EPSS
SaveExploits1References4
CVE
CVE
•added 2021/11/07 5:06 p.m.•86 views

CVE-2021-43413

The CVE-2021-43413 entry concerns GNU Hurd before 0.9 20210404-9. A single pager port is shared among all processes that mmap a file, enabling any reader to modify files they can read and thereby potentially gain full root access. Available sources (NVD/Red Hat/Debian/CNVD/CVEdoc) reiterate this ...

9CVSS8.5AI score0.01973EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2021/11/07 12:00 a.m.•21 views

GNU Hurd security vulnerabilities

Gnu Hurd is a Gnu project replacement for the Unix kernel. A security vulnerability exists in GNU Hurd, which stems from the fact that in versions of GNU Hurd prior to 0.9 20210404-9 each person who maps a file shares a page navigation port, allowing anyone to modify any file they can read. any...

9CVSS5.6AI score0.01973EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2021/11/03 8:15 p.m.•28 views

CVE-2021-35053

Possible system denial of service in case of arbitrary changing Firefox browser parameters. An attacker could change specific Firefox browser parameters file in a certain way and then reboot the system to make the system unbootable...

7.5CVSS5.9AI score0.02601EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/10/25 12:00 a.m.•4 views

PT-2021-6013

Name of the Vulnerable Software and Affected Versions tvOS versions prior to 15 watchOS versions prior to 8 iOS versions prior to 15 iPadOS versions prior to 15 Mac OS affected versions not specified Description The issue is related to errors in security settings, allowing an attacker to modify...

5.5CVSS0.00914EPSS
SaveExploits0References16
NVD
NVD
•added 2021/10/22 12:15 p.m.•33 views

CVE-2021-38471

There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create new files...

9.1CVSS0.01105EPSS
SaveExploits0References1
CVE
CVE
•added 2021/10/22 11:22 a.m.•80 views

CVE-2021-38471

CVE-2021-38471 affects AUVESY Versiondog. The vulnerability arises from multiple API function codes that permit writing data to arbitrary files, enabling an attacker to modify existing files or create new ones. The NVD entry attributes a high impact (integrity and availability) with a CVSS v3 bas...

9.1CVSS9.3AI score0.01105EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/10/22 11:22 a.m.•36 views

CVE-2021-38471 AUVESY Versiondog

There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create new files...

9.1CVSS9.3AI score0.01105EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/22 12:00 a.m.•5 views

CVE-2021-38471: Unrestricted Upload of File with Dangerous Type

There are multiple API function codes that permit data writing to any file, which may allow an attacker to modify existing files or create new files...

9.1CVSS5.8AI score0.01105EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/22 12:00 a.m.•8 views

PT-2021-22145

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue involves multiple API function codes that allow data writing to any file. This could enable an attacker to modify existing files or create new...

9.1CVSS0.01105EPSS
SaveExploits0References5
CVE
CVE
•added 2021/09/23 2:30 a.m.•103 views

CVE-2021-1419

CVE-2021-1419 affects Cisco Access Points (APs) SSH management interface, where improper checking of file operations allows a local, authenticated user to modify files and potentially gain root privileges. The root cause is input/file operation validation within the SSH management feature. Affect...

7.8CVSS7.8AI score0.00216EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/09/22 4:00 p.m.•10 views

CVE-2021-1419

A vulnerability in the SSH management feature of multiple Cisco Access Points APs platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH...

7.8CVSS7.2AI score0.00216EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/09/22 12:00 a.m.•18 views

Cisco Access Point security vulnerabilities

Cisco Access Points is a network access point device from Cisco. A security vulnerability exists in the Cisco Access Points platforms, which is caused by an incorrect file operation check in the SSH management interface. An attacker could use this vulnerability to allow a local authenticated user...

7.8CVSS7.4AI score0.00216EPSS
SaveExploits0References6
NVD
NVD
•added 2021/09/21 3:15 p.m.•35 views

CVE-2021-41525

An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon versions 2020 R2.5 and prior...

5.5CVSS0.00226EPSS
SaveExploits0References1
Rows per page
Query Builder