Lucene search
+L

7331 matches found

UbuntuCve
UbuntuCve
added 2022/12/14 12:00 a.m.38 views

CVE-2022-41861

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...

6.5CVSS6.5AI score0.01112EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/12/13 12:00 a.m.6 views

Tuleap 安全漏洞

Tuleap is open source an application lifecycle management system that facilitates agile software development, design projects, V-modeling, requirements management and IT service management. A security vulnerability exists in Tuleap versions prior to 14.2.99.104, which stems from a failure to...

4.3CVSS5.1AI score0.00498EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
added 2022/12/12 10:10 a.m.12 views

smart-home-by-halemeier.de Cross Site Scripting vulnerability OBB-3096307

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2022/12/08 12:00 a.m.10 views

Cybersecurity Reflections from 26 Years at Trend

Trend Micro is one of the few cybersecurity vendors today that can protect your entire world, whether it is your home office and family, your drive to work, or your work environment...

2.6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/12/07 5:31 p.m.38 views

CVE-2022-41861

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...

7.5CVSS6.5AI score0.01112EPSS
SaveExploits0References3
Malwarebytes
Malwarebytes
added 2022/12/07 11:45 a.m.26 views

Ho, ho, no! Scams to avoid this festive season

Whether youve been naughty or nice, someone will try and stuff a scam down your chimney either way. The FBI is warning of several likely ways to be parted from your funds or logins, and were going to give some additional context along with tips to avoid these digital lumps of coal. Social media...

7.1AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2022/12/05 9:15 a.m.29 views

Eufy "no cloud" security cameras streaming data to the cloud

Eufy home security cameras are currently in a spot of trouble as a result of door camera footage. This is because it turns out that data which should not have been going to the cloud was doing so anyway in certain conditions. Securing your home: a complicated proposition Insecure cameras,...

6.8AI score
SaveExploits0
OSV
OSV
added 2022/12/01 5:15 p.m.8 views

CVE-2022-29837

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution...

7.8CVSS5.9AI score0.00192EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/01 5:15 p.m.40 views

CVE-2022-29837

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution...

7.8CVSS0.00192EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/01 5:15 p.m.23 views

Path traversal

A path traversal vulnerability was addressed in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi which could allow an attacker to initiate installation of custom ZIP packages and overwrite system files. This could potentially lead to a code execution...

4.3CVSS7.7AI score0.00192EPSS
SaveExploits0References1Affected Software3
CNNVD
CNNVD
added 2022/12/01 12:00 a.m.20 views

多款Western Digital产品路径遍历漏洞

Western Digital My Cloud Home is an easy-to-use personal cloud storage device.Western Digital My Cloud Home Duo is an easy-to-use cloud storage device.SanDisk ibi is an intelligent photo manager and media storage drive. Western Digital My Cloud Home Duo is an easy-to-use personal cloud storage...

7.8CVSS7.5AI score0.00192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/01 12:00 a.m.10 views

PT-2022-19867 · Western Digital · Sandisk Ibi +1

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Home affected versions not specified Western Digital My Cloud Home Duo affected versions not specified SanDisk ibi affected versions not specified Description: A path traversal issue was addressed in the mentioned...

7.8CVSS7.6AI score0.00192EPSS
SaveExploits0References3
CVE
CVE
added 2022/12/01 12:00 a.m.56 views

CVE-2022-29837

The CVE-2022-29837 entry describes a path traversal vulnerability in Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices. The flaw could allow an attacker to initiate installation of custom ZIP packages and overwrite system files, potentially leading to code execution. Affec...

7.8CVSS6.1AI score0.00192EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2022/11/23 8:59 a.m.25 views

OS Command Injection

apacheairflowprovidersapachespark is vulnerable to os command injection. The vulnerability exists because the custom spark home and custom binaries are not properly handled which allows an attacker to inject and execute arbitrary commands...

5.5CVSS6.4AI score0.01383EPSS
SaveExploits0References4Affected Software1
Check Point Advisories
Check Point Advisories
added 2022/11/23 12:00 a.m.36 views

Home Owners Collection Management System Arbitrary File Upload (CVE-2022-25094)

An arbitrary file upload vulnerability exists in Home Owners Collection Management System. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with administrative privileges...

6.5CVSS6.3AI score0.23261EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:00 a.m.20 views

The vulnerability of the Home Network Administration Protocol (HNAP) implementation in D-Link DIR-1935 router microsoftware allows a attacker to execute arbitrary code.

The vulnerability of the Home Network Administration Protocol HNAP implementation in D-Link DIR-1935 router microprogramming software lies in the copying of a buffer without checking the size of the input data during the processing of the HNAPAUTH header. Exploiting this vulnerability allows an...

8.8CVSS8.2AI score0.01006EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:00 a.m.24 views

The vulnerability of the Home Network Administration Protocol (HNAP) implementation in D-Link DIR-1935 router microsoftware allows a hacker to circumvent security restrictions.

The vulnerability of the Home Network Administration Protocol HNAP implementation in D-Link DIR-1935 router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

8.8CVSS7.5AI score0.01052EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
added 2022/11/17 12:00 a.m.19 views

Woodpecker Home Repair App Has Logic Flaw Vulnerability

Woodpecker Home Repair App is a formal and professional door-to-door home repair service software. Woodpecker Home Repair APP has a logic flaw vulnerability that can be exploited by an attacker to cause server-side SMS resource exhaustion, SMS bomb attack on any cell phone number...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/11/17 12:00 a.m.9 views

PT-2022-27521 · Acronis · Acronis Cyber Protect Home Office +3

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office versions prior to build 40107 Acronis Agent versions prior to build 30025 Acronis Cyber Protect 15 versions prior to build 30984 Description: The issue is related to local privilege escalation due to incomple...

7.8CVSS6.7AI score0.00149EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/11/17 12:00 a.m.73 views

PT-2022-27518 · Acronis +1 · Acronis Cyber Protect Home Office +4

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office Windows versions prior to build 40173 Acronis Agent Windows versions prior to build 30600 Acronis Cyber Protect 15 Windows versions prior to build 30984 Description: The issue is related to local privilege...

8.8CVSS8.2AI score0.00469EPSS
SaveExploits0References10
Rows per page
Query Builder