Lucene search
+L

7571 matches found

Cvelist
Cvelist
•added 2023/04/04 12:00 a.m.•77 views

CVE-2021-28235

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

9.7AI score0.01618EPSS
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
•added 2023/04/04 12:00 a.m.•44 views

Improper Authentication

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

9.8CVSS9AI score0.01618EPSS
SaveExploits0References7Affected Software1
Mend
Mend
•added 2023/04/04 12:00 a.m.•7 views

CVE-2021-28235

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

9.8CVSS0.01618EPSS
SaveExploits0References6
CVE
CVE
•added 2023/04/04 12:00 a.m.•249 views

CVE-2021-28235

CVE-2021-28235: Etcd-io v3.4.10 contains an authentication vulnerability that enables remote privilege escalation via the debug function. Documented impact is high (CVSS 9.8), with potential for elevated privileges on affected systems. Mitigation in connected sources advises upgrading to newer et...

9.8CVSS9.3AI score0.01618EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/04 12:00 a.m.•5 views

CVE-2021-28235: Improper Authentication

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

9.8CVSS6.5AI score0.01618EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/04/04 12:00 a.m.•18 views

PT-2025-40767

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to device mapper integrity. Specifically, the issue involves a memory leak in the journal io cache if dm register target fails during the dm...

7.8CVSS6.3AI score0.00156EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2023/04/04 12:00 a.m.•57 views

CVE-2021-28235

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...

9.8CVSS7.5AI score0.01618EPSS
SaveExploits0
osv_oesa
osv_oesa
•added 2023/04/01 11:05 a.m.•12 views

OESA-2023-1201 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRVCTLIOCTLELEMREAD|WRITE32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 acces...

7.8CVSS7.8AI score0.03672EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2023/03/31 11:54 a.m.•47 views

Security Bulletin: Vulnerability in commons-io affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2021-29425]

Summary Commons-io package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVE CVE-2021-29425. Vulnerability Details CVEID:CVE-2021-29425 DESCRIPTION: Apache Commons IO could allow a remote attacker to traverse directories on the syste...

5.8CVSS6.3AI score0.10549EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/03/29 12:00 a.m.•31 views

Hitachi Energy Relion 670/650/SAM600-IO Initialization of a Resource with an Insecure Default (CVE-2021-35535)

Insecure Boot Image vulnerability in Hitachi Energy Relion Relion 670/650/SAM600-IO series allows an attacker who manages to get access to the front network port and to cause a reboot sequences of the device may exploit the vulnerability, where there is a tiny time gap during the booting process...

8.1CVSS7.3AI score0.00667EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/03/28 12:00 a.m.•33 views

CBL Mariner 2.0 Security Update: kernel (CVE-2022-1976)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1976 advisory. - A flaw was found in the Linux kernel's implementation of IO-URING. This flaw allows an attacker with local...

7.8CVSS7.6AI score0.00235EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/03/26 10:15 p.m.•15 views

CVE-2023-1641

A vulnerability, which was classified as problematic, has been found in IObit Malware Fighter 9.4.0.776. This issue affects the function 0x222018 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. An attack has to be approached locall...

5.5CVSS4.7AI score0.00318EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2023/03/26 7:15 p.m.•14 views

UBUNTU-CVE-2023-28859

redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. This could, for example, happen for a non-pipeline operation. NOTE: the solutions for CVE-2023-288...

6.5CVSS7.1AI score0.01034EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/03/25 12:15 p.m.•26 views

CVE-2023-1628

A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploi...

5.5CVSS4.9AI score0.00317EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2023/03/25 12:15 p.m.•21 views

CVE-2023-1627

A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the loc...

5.5CVSS4.6AI score0.00317EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/03/25 12:00 a.m.•27 views

PT-2023-17129 · Unknown · Jiangmin Antivirus

Name of the Vulnerable Software and Affected Versions: Jianming Antivirus version 16.2.2022.418 Description: A vulnerability was found in the library kvcore.sys of the component IoControlCode Handler, which can lead to denial of service. The manipulation can be launched on the local host. The...

5.5CVSS6.9AI score0.00317EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2023/03/25 12:00 a.m.•24 views

PT-2023-17130 · Unknown · Jiangmin Antivirus

Name of the Vulnerable Software and Affected Versions: Jianming Antivirus version 16.2.2022.418 Description: A problematic vulnerability has been found in the library kvcore.sys of the component IoControlCode Handler, affecting an unknown function. The manipulation leads to null pointer...

5.5CVSS7AI score0.00317EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
•added 2023/03/24 12:00 a.m.•43 views

EulerOS 2.0 SP11 : containerd (EulerOS-SA-2023-1570)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the hos...

6.5CVSS6.7AI score0.01109EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/03/21 12:00 a.m.•45 views

Amazon Linux 2023 : golist (ALAS2023-2023-046)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-046 advisory. 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A flaw was found in golang. The HTTP/1 client accepted invalid...

9.3CVSS6.9AI score0.0995EPSS
SaveExploits7References36
osv_cve
osv_cve
•added 2023/03/18 10:15 p.m.•19 views

CVE-2023-1489

A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is the function 0x9C402088 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to improper access controls. The...

7.8CVSS6.4AI score0.00527EPSS
SaveExploits1References4
Rows per page
Query Builder