Lucene search
+L

8328 matches found

Exploit DB
Exploit DB
added 2022/05/11 12:00 a.m.323 views

DLINK DIR850 - Insecure Access Control

Exploit Title: DLINK DIR850 - Insecure Access Control Product: Dlink Model: DIR850 Date: 14/1/2022 CVE : CVE-2021-46378 Exploit Author: Ahmed Alroky Hardware version: b1 Firmware version: ET850-1.08TRb03 Vendor home page: https://www.dlink.com/ Exploit : Visit http:///config.dat...

7.5CVSS7.5AI score0.31863EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2022/05/11 12:00 a.m.238 views

DLINK DIR850 Insecure Direct Object Reference

Exploit Title: DLINK DIR850 - Insecure Access Control Product: Dlink Model: DIR850 Date: 14/1/2022 CVE : CVE-2021-46378 Exploit Author: Ahmed Alroky Hardware version: b1 Firmware version: ET850-1.08TRb03 Vendor home page: https://www.dlink.com/ Exploit : Visit http:///config.dat...

7.5CVSS7.6AI score0.31863EPSS
SaveExploits4
CNNVD
CNNVD
added 2022/05/11 12:00 a.m.10 views

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks. A security vulnerability exists in Palo Alto Networks PAN-OS. An attacker could use this vulnerability to upload a specially created configuration that interrupts system processes and executes arbitrary code...

9CVSS7.4AI score0.01547EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/05/10 1:58 p.m.12 views

hw: cpu: intel: Branch History Injection (BHI)

A flaw was found in hw. The Branch History Injection BHI describes a specific form of intra-mode BTI. This flaw allows an unprivileged attacker to manipulate the branch history before transitioning to supervisor or VMX root mode. This issue is an effort to cause an indirect branch predictor to...

6.5CVSS6.8AI score0.00508EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2022/05/10 1:58 p.m.8 views

hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715

A flaw was found in hw. The speculative execution window of AMD LFENCE/JMP mitigation MITIGATION V2-2 may be large enough to be exploited on AMD CPUs...

5.6CVSS6.6AI score0.74041EPSS
SaveExploits10References5
RedHat Linux
RedHat Linux
added 2022/05/10 1:43 p.m.10 views

hw: cpu: intel: Branch History Injection (BHI)

A flaw was found in hw. The Branch History Injection BHI describes a specific form of intra-mode BTI. This flaw allows an unprivileged attacker to manipulate the branch history before transitioning to supervisor or VMX root mode. This issue is an effort to cause an indirect branch predictor to...

6.5CVSS6.8AI score0.00508EPSS
SaveExploits0References7
AlmaLinux
AlmaLinux
added 2022/05/10 8:17 a.m.59 views

Low: grub2 security, bug fix, and enhancement update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2: Incorrect...

3.3CVSS1AI score0.00319EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/10 6:28 a.m.29 views

RLSA-2022:1814 Low: gnome-shell security and bug fix update

GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other objects. It provides core interface functions like switching windows, launching applications, and notifications. It takes advantage of the capabilities of modern graphics hardware and...

4.3CVSS4.9AI score0.00553EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2022/05/10 6:28 a.m.42 views

Low: gnome-shell security and bug fix update

GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other objects. It provides core interface functions like switching windows, launching applications, and notifications. It takes advantage of the capabilities of modern graphics hardware and...

4.3CVSS5.1AI score0.00553EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.6 views

PT-2022-2445 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in resource release in the Windows Hyper-V hardware virtualization system, which can be exploited to cause a denial of service. This allows attackers ...

7.8CVSS9.1AI score0.00731EPSS
SaveExploits0References9
GoogleProjectZero
GoogleProjectZero
added 2022/05/10 12:00 a.m.18 views

Release of Technical Report into the AMD Security Processor

Posted by James Forshaw, Google Project Zero Today, members of Project Zero and the Google Cloud security team are releasing a technical report on a security review of AMD Secure Processor ASP. The ASP is an isolated ARM processor in AMD EPYC CPUs that adds a root of trust and controls secure...

7.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/05/08 12:00 a.m.35 views

Fedora: Security Advisory for golang-github-prometheus-node-exporter (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
Fedora
Fedora
added 2022/05/07 5:06 a.m.31 views

[SECURITY] Fedora 36 Update: golang-github-prometheus-node-exporter-1.3.1-7.fc36

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

7.5CVSS10AI score0.03931EPSS
SaveExploits0
Fedora
Fedora
added 2022/05/07 5:04 a.m.37 views

[SECURITY] Fedora 36 Update: moby-engine-20.10.14-1.fc36

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between - and they don'...

5.9CVSS6.3AI score0.00492EPSS
SaveExploits0
NVD
NVD
added 2022/05/07 4:15 a.m.31 views

CVE-2022-30330

In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmware operations. Using these flaws, malicious firmware code can elevate privileges, permanently make the device inoperable or overwrite the trusted bootloader...

6.9CVSS0.00527EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/07 4:15 a.m.20 views

CVE-2022-30330

In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmware operations. Using these flaws, malicious firmware code can elevate privileges, permanently make the device inoperable or overwrite the trusted bootloader...

6.9CVSS6.7AI score0.00527EPSS
SaveExploits1References4
OSV
OSV
added 2022/05/07 3:25 a.m.11 views

CVE-2022-30330

In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmware operations. Using these flaws, malicious firmware code can elevate privileges, permanently make the device inoperable or overwrite the trusted bootloader...

5.6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2022/05/07 3:25 a.m.41 views

CVE-2022-30330

In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmware operations. Using these flaws, malicious firmware code can elevate privileges, permanently make the device inoperable or overwrite the trusted bootloader...

6.8AI score0.00527EPSS
SaveExploits1References3
NVD
NVD
added 2022/05/06 5:15 p.m.25 views

CVE-2022-28507

Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting XSS via Dragon path router admin page...

4.8CVSS0.00544EPSS
SaveExploits1References2
Prion
Prion
added 2022/05/06 5:15 p.m.27 views

Cross site scripting

Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting XSS via Dragon path router admin page...

3.5CVSS4.9AI score0.00544EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder