Lucene search
+L

10440 matches found

Vulnrichment
Vulnrichment
•added 2021/03/24 8:06 p.m.•12 views

CVE-2021-1441 Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability

A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local attacker to execute unsigned code at system boot time. This vulnerability is...

6.7CVSS6.8AI score0.00308EPSS
SaveExploits0References1
Cisco
Cisco
•added 2021/03/24 4:00 p.m.•68 views

Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability

A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local attacker to execute unsigned code at system boot time. This vulnerability is...

6.7CVSS6.5AI score0.00308EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/18 7:15 p.m.•8 views

DEBIAN-CVE-2019-14850

A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of work in initializing backend plugins, by simply opening a connection to the service. This vulnerability could cause...

3.7CVSS4.8AI score0.01601EPSS
SaveExploits1References1
OSV
OSV
•added 2021/03/18 7:15 p.m.•14 views

UBUNTU-CVE-2019-14850

A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of work in initializing backend plugins, by simply opening a connection to the service. This vulnerability could cause...

3.7CVSS5.8AI score0.01601EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2021/03/18 12:00 a.m.•23 views

Softaculous Ltd. Softaculous 安全漏洞

Softaculous is a commercial scripting library that automates the installation of commercial and open source web applications onto websites. A code execution vulnerability exists in Softaculous versions prior to 5.5.7. The vulnerability stems from external initialization of trusted variables or da...

7.8CVSS6.1AI score0.00626EPSS
SaveExploits1References4
Zero Day Initiative
Zero Day Initiative
•added 2021/03/17 12:00 a.m.•55 views

Microsoft Office Graph Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Graph COM...

7.8CVSS3.9AI score0.04046EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/15 9:50 p.m.•8 views

USN-4815-1 xrdp vulnerabilities

It was discovered that xrdp did not properly validate certain input in the session manager. A local attacker could possibly use this issue to cause a denial of service or other unspecified impact. CVE-2017-16927 It was discovered that xrdp did not properly initialize PAM session modules. A remote...

8.4CVSS7.2AI score0.01186EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2021/03/15 12:00 a.m.•45 views

SAP 3D Visual Enterprise Viewer JT File Parsing Null Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.0137EPSS
SaveExploits0
CNVD
CNVD
•added 2021/03/10 12:00 a.m.•20 views

grub2 buffer overflow vulnerability (CNVD-2021-16928)

grub2 is a Linux system boot program from the GNU community. A buffer overflow vulnerability exists in grub2 versions prior to 2.06 in the grubusbdeviceinitialize function, which handles USB device initialization. No details of the vulnerability are provided at this time...

7.6CVSS7.1AI score0.00794EPSS
SaveExploits0References1
OSV
OSV
•added 2021/03/09 6:15 p.m.•12 views

UBUNTU-CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

7.8CVSS6.7AI score0.00321EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2021/03/09 6:15 p.m.•7 views

CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

7.8CVSS6.7AI score0.00321EPSS
SaveExploits0References5
OSV
OSV
•added 2021/03/05 11:04 a.m.•10 views

OESA-2021-1078 xorg-x11-server security update

X.Org X11 X server. Security Fixes: A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

7.8CVSS7.2AI score0.00388EPSS
SaveExploits0References3
OSV
OSV
•added 2021/03/05 11:04 a.m.•10 views

OESA-2021-1065 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

6.5CVSS6.7AI score0.05029EPSS
SaveExploits1References3
NVD
NVD
•added 2021/03/04 10:15 p.m.•32 views

CVE-2021-25340

Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State...

5.1CVSS0.00124EPSS
SaveExploits0References2
Prion
Prion
•added 2021/03/04 10:15 p.m.•24 views

Improper access control

Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State...

2.1CVSS4.2AI score0.00124EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/03/04 10:15 p.m.•8 views

CVE-2021-25340

Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State...

5.1CVSS4.9AI score0.00124EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/03/04 12:00 a.m.•16 views

SAMSUNG keyboard 安全漏洞

Samsung keyboard is a cell phone application from Samsung South Korea. It provides an input function. A security vulnerability exists in Samsung keyboard version prior to SMR Feb-2021 Release 1, which allows a close-range attacker to change arbitrary settings during the initialization state. No...

5.1CVSS5.8AI score0.00124EPSS
SaveExploits0References3
NVD
NVD
•added 2021/03/03 5:15 p.m.•27 views

CVE-2020-25647

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

7.6CVSS0.00794EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2021/03/03 4:40 p.m.•30 views

CVE-2020-25647

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

7.6CVSS7.8AI score0.00794EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2021/03/02 9:13 p.m.•25 views

grub2: Out-of-bounds write in grub_usb_device_initialize()

A flaw was found in grub2. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the...

7.6CVSS6.2AI score0.00794EPSS
SaveExploits0References4
Rows per page
Query Builder