Lucene search
+L

249 matches found

Positive Technologies
Positive Technologies
•added 2025/03/19 12:00 a.m.•7 views

PT-2025-11959 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 134.0.6998.117 Description: The issue is related to a use-after-free vulnerability in the Lens feature of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted...

10CVSS8.8AI score0.01042EPSS
SaveExploits0References47
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•12 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: v4l: async: Fixed a NULL pointer dereferencing issue in the process of creating auxiliary links. In v4l2asynccreateancillarylinks, auxiliary links are created for lens and flash sub-devices. These are links between...

5.5CVSS5.8AI score0.00225EPSS
SaveExploits0References3
NVD
NVD
•added 2024/11/05 11:15 p.m.•21 views

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

9.8CVSS0.00769EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/05 12:00 a.m.•0 views

CVE-2024-48746: Improper Neutralization of Special Elements used in a Command

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

9.8CVSS6.5AI score0.00769EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/05 12:00 a.m.•16 views

PT-2024-33199 · Microsoft · Power Bi

Name of the Vulnerable Software and Affected Versions: Power BI version 4.0.0.3 Description: An issue in Lens Visual integration with Power BI allows a remote attacker to execute arbitrary code via the Natural language processing component. Recommendations: For Power BI version 4.0.0.3, consider...

9.8CVSS8.1AI score0.00769EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/11/05 12:00 a.m.•35 views

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

0.00769EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/05 12:00 a.m.•101 views

CVE-2024-48746

A security vulnerability exists in the Lens Visual integration with Power BI v.4.0.0.3 . A remote attacker can achieve arbitrary code execution by targeting the Natural language processing component . As a temporary workaround, it is recommended to disable the Natural language processing componen...

7.9AI score0.00769EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/05 12:00 a.m.•12 views

Lens Visual integration with Power BI 安全漏洞

Lens Visual integration with Power BI is a program from Lens Visual, Inc. Enhances Power BI dashboards with OpenAI and ChatGPT. A security vulnerability exists in Lens Visual integration with Power BI version v.4.0.0.3, which originates from a vulnerability that could allow a remote attacker to...

9.8CVSS7.7AI score0.00769EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/05 12:00 a.m.•16 views

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

7.9AI score0.00769EPSS
SaveExploits0References1
Hewlett-Packard
Hewlett-Packard
•added 2024/08/05 12:00 a.m.•28 views

Clariti Manager - Arbitrary File Upload

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize user input. The recommendation is to update an impacted device to firmware build 10.12.0.2100 or later. Customers can receive the latest builds throu...

8.8CVSS7.1AI score0.00519EPSS
SaveExploits0
Hewlett-Packard
Hewlett-Packard
•added 2024/08/05 12:00 a.m.•23 views

Clariti Manager – Privilege Escalation Through Sudo

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls. The recommendation is to update an impacted device to firmware build 10.12.0.2100 or later. Customers will receive the latest build...

9.8CVSS7.1AI score0.00506EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•15 views

The vulnerability of the Poly Lens application interface for phones and audio systems in Poly Trio conferencing systems allows attackers to elevate their privileges.

The vulnerability of the Poly Lens application interface for telephones and conference call audio systems in the Poly Trio device is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.6CVSS5.8AI score0.00253EPSS
SaveExploits0References8Affected Software3
Hewlett-Packard
Hewlett-Packard
•added 2024/01/09 12:00 a.m.•39 views

UC Software - Missing Authorization

A potential vulnerability was discovered in certain Trio devices. An attacker with physical access to a device without administrator privileges can gain administrative access through the Poly Lens interface due to a potential authorization vulnerability. This is only possible for devices that are...

7.6CVSS7.1AI score0.00253EPSS
SaveExploits0
OSV
OSV
•added 2024/01/08 3:15 p.m.•12 views

DEBIAN-CVE-2023-35995

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS7.9AI score0.00414EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/08 3:15 p.m.•11 views

UBUNTU-CVE-2023-39317

Multiple integer overflow vulnerabilities exist in the LXT2 numdictentries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer...

7.8CVSS7.4AI score0.00416EPSS
SaveExploits1References3
OSV
OSV
•added 2024/01/08 3:15 p.m.•12 views

UBUNTU-CVE-2023-35996

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS6.1AI score0.00414EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/01/08 2:47 p.m.•6 views

CVE-2023-35997

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS7.5AI score0.00414EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2024/01/08 2:47 p.m.•56 views

CVE-2023-35995

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

7.8CVSS8AI score0.00414EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•20 views

PT-2024-12543 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: The issue is related to improper array index validation in the fstReaderIterBlocks2 tdelta functionality. A specially crafted .fst file can lead to arbitrary code execution when opened by a victim. The...

7.8CVSS8AI score0.01481EPSS
SaveExploits82References131
CVE
CVE
•added 2023/12/29 9:38 a.m.•76 views

CVE-2023-4468

Poly Trio 8500/8800/C60 devices are affected by CVE-2023-4468 in the Poly Lens Management Cloud Registration component, enabling missing authorization with physical access to the device. The vulnerability is described as exploitable on the physical device, with public disclosure. Connected docume...

7.6CVSS5.8AI score0.00253EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder