Lucene search
+L

610 matches found

Cvelist
Cvelist
added 2023/03/29 12:00 a.m.31 views

CVE-2022-27644

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files...

5CVSS8.7AI score0.00339EPSS
SaveExploits1References2
CVE
CVE
added 2023/03/29 12:00 a.m.90 views

CVE-2022-27644

The CVE-2022-27644 issue affects NETGEAR R6700v3 routers (version 1.0.4.120_10.0.91). The root cause is failure to properly validate the server certificate during HTTPS-based file downloads, allowing network-adjacent attackers to compromise the integrity of downloaded information. The vulnerabili...

8.8CVSS6.3AI score0.00339EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.12 views

The vulnerability of the sps.cc component in the h.265 Libde265 video codec implementation allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sps.cc component in the h.265 video codec implementation by Libde265 is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service failures...

9.3CVSS7.2AI score0.00897EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.10 views

The vulnerability of the Perl programming language’s Module::Signature::_verify() function allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Perl programming language’s Module::Signature::verify function is related to improper verification of the cryptographic signature of data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

9.3CVSS7.2AI score0.00791EPSS
SaveExploits1References20Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.12 views

The vulnerability of the print_mac function in the Dnsmasq DNS server allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the printmac function in the Dnsmasq DNS server is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS8AI score0.0259EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.14 views

The vulnerability of the dhcpreply function in the Dnsmasq DNS server allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the dhcpreply function in the Dnsmasq DNS server is related to buffer overflow attacks. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS8.1AI score0.0259EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.9 views

The vulnerability of the ReadLogicalParts function in the basicmbr.cc component of the GPT disk partitioning tool allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadLogicalParts function in the basicmbr.cc component of the GPT disk partitioning tool fdisk is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause servi...

7.2CVSS6.8AI score0.00436EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.8 views

The vulnerability of the GdkPixbuf image loading library, related to writing beyond the buffer’s boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GdkPixbuf image loading library is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use of a specially create...

9.3CVSS7.6AI score0.01891EPSS
SaveExploits1References13Affected Software3
Cvelist
Cvelist
added 2023/03/22 6:16 p.m.44 views

CVE-2023-0870 Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)

A form can be manipulated with cross-site request forgery in multiple versions of OpenNMS Meridian and Horizon. This can potentially allow an attacker to gain access to confidential information and compromise integrity. The solution is to upgrade to Meridian 2023.1.1 or Horizon 31.0.6 or newer...

8.1CVSS8.4AI score0.00305EPSS
SaveExploits0References2
NVD
NVD
added 2023/03/06 11:15 p.m.36 views

CVE-2022-4134

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images...

2.8CVSS3.4AI score0.00326EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/03/06 12:00 a.m.45 views

CVE-2022-4134

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images...

3.9AI score0.00326EPSS
SaveExploits0References3
Code423n4
Code423n4
added 2023/02/20 12:00 a.m.21 views

Artificial Inflation of Interest-Bearing Balances

Lines of code Vulnerability details Impact It is possible to artificially inflate one's balance, compromising the integrity of the KIB token entirely. The vulnerability arises from how the balances are updated and utilize "stale" values that were loaded into memory. As such, a self-transfer would...

6.8AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 5:46 a.m.10 views

SUSE CVE-2012-3146

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors...

2.1CVSS6.5AI score0.00994EPSS
SaveExploits0References3
OSV
OSV
added 2023/02/01 7:15 a.m.9 views

CVE-2022-23455

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

7.8CVSS5.8AI score0.00186EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/01 7:15 a.m.29 views

CVE-2022-23454

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

7.8CVSS8AI score0.00186EPSS
SaveExploits0References1
NVD
NVD
added 2023/02/01 7:15 a.m.27 views

CVE-2022-23453

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

7.8CVSS8AI score0.00186EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/01 7:15 a.m.12 views

CVE-2022-23454

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

7.8CVSS5.8AI score0.00186EPSS
SaveExploits0References1
Prion
Prion
added 2023/02/01 7:15 a.m.17 views

Privilege escalation

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

4.3CVSS7.9AI score0.00186EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/02/01 7:15 a.m.25 views

Privilege escalation

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

4.3CVSS7.9AI score0.00186EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/02/01 7:15 a.m.18 views

Privilege escalation

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...

4.3CVSS7.9AI score0.00186EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder