Lucene search
+L

13932 matches found

Citrix
Citrix
added 2020/04/20 12:00 a.m.18 views

Receiver 4.4 Selfservice.exe -terminate Does Not Disconnect Sessions

Citrix receiver 4.4. Selfservice.exe -terminate. When running this command line there is no response of the command other commands appear to work as expected. CTX200337 -Driving the Citrix Receiver Self-Service Plug-in Programmatically...

7.3AI score
SaveExploits0
NVD
NVD
added 2020/04/16 11:15 a.m.47 views

CVE-2019-10610

Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

9.4CVSS9.2AI score0.00876EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/16 11:15 a.m.33 views

Buffer overflow

Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

9.4CVSS9AI score0.00876EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.11 views

The vulnerability in the ImageStream::getLine method from the poppler/Stream.cc library used for displaying PDF files allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ImageStream::getLine method in the Poppler/Stream.cc library for displaying PDF files is related to the output of operations that go beyond the acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...

8.8CVSS7.3AI score0.03473EPSS
SaveExploits1References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.17 views

The vulnerability of the operating system utility package OC SUSE Linux Supportutils lies in the lack of measures to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.

The vulnerability of the operating system utility package for SUSE Linux Supportutils lies in the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows an attacker to execute arbitrary commands by controlling the rp...

7.2CVSS7.2AI score0.00503EPSS
SaveExploits0References3Affected Software6
CNVD
CNVD
added 2020/04/15 12:00 a.m.22 views

Unspecified vulnerability in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 (CNVD-2021-17243)

MB CONNECT LINE mbCONNECT24 and MB CONNECT LINE mymbCONNECT24 are both products of MB CONNECT LINE, Germany.MB CONNECT LINE mbCONNECT24 is a set of remote service portals. The product supports remote access, data logging and alarms.MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance...

8.8CVSS7.2AI score0.01919EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/15 12:00 a.m.19 views

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 have an unspecified vulnerability security vulnerability

MB CONNECT LINE mbCONNECT24 and MB CONNECT LINE mymbCONNECT24 are both products of MB CONNECT LINE, Germany.MB CONNECT LINE mbCONNECT24 is a set of remote service portals. The product supports remote access, data logging and alarms.MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance...

9.8CVSS7.2AI score0.01818EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/15 12:00 a.m.16 views

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Privilege Management Error Vulnerability

Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A privilege management error vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which can be exploited by an attacke...

7.8CVSS6.9AI score0.00255EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/14 6:15 p.m.24 views

CVE-2020-10384

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root account...

7.8CVSS8.3AI score0.00255EPSS
SaveExploits0References2
OSV
OSV
added 2020/04/14 6:15 p.m.11 views

CVE-2020-10384

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root account...

7.8CVSS7.1AI score0.00255EPSS
SaveExploits0References2
Prion
Prion
added 2020/04/14 6:15 p.m.18 views

Privilege escalation

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root account...

7.2CVSS8.2AI score0.00255EPSS
SaveExploits0References2Affected Software2
RedHat Linux
RedHat Linux
added 2020/04/14 5:59 p.m.9 views

ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of service or code execution

The ntpq and ntpdc command-line utilities that are part of ntp package are vulnerable to stack-based buffer overflow via crafted hostname. Applications using these vulnerable utilities with an untrusted input may be potentially exploited, resulting in a crash or arbitrary code execution under...

9.8CVSS8.2AI score0.28709EPSS
SaveExploits5References4
RedHat Linux
RedHat Linux
added 2020/04/14 5:56 p.m.12 views

python: CRLF injection via the query part of the url passed to urlopen()

An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the query string after a ? charact...

6.1CVSS6.7AI score0.05328EPSS
SaveExploits1References4
OSV
OSV
added 2020/04/14 5:15 p.m.7 views

CVE-2020-10383

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the commb24sysapi module...

9.8CVSS7.8AI score0.01818EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/14 5:15 p.m.21 views

CVE-2020-10383

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the commb24sysapi module...

9.8CVSS9.9AI score0.01818EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/14 5:15 p.m.13 views

CVE-2020-10381

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...

5.3CVSS6.1AI score0.0112EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/14 5:15 p.m.24 views

CVE-2020-10382

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler...

8.8CVSS9AI score0.01919EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/14 5:15 p.m.33 views

CVE-2020-10381

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...

5.3CVSS5.9AI score0.0112EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/14 5:15 p.m.31 views

Sql injection

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...

5CVSS5.9AI score0.0112EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2020/04/14 5:15 p.m.20 views

Remote code execution

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler...

6.5CVSS8.9AI score0.01919EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder