Lucene search
+L

7914 matches found

CVE
CVE
added 2021/01/27 7:06 p.m.85 views

CVE-2021-22655

Fuji Electric Tellus Lite V-Simulator and V-Server Lite (pre-4.0.10.0) are affected by CVE-2021-22655, an out-of-bounds read in project-file processing that may allow arbitrary code execution when a crafted project file is used. Affected products: Tellus Lite V-Simulator and V-Server Lite; root c...

7.8CVSS7.8AI score0.01191EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/01/27 7:05 p.m.34 views

CVE-2021-22639

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0...

8AI score0.01858EPSS
SaveExploits0References2
CVE
CVE
added 2021/01/27 7:05 p.m.83 views

CVE-2021-22639

CVE-2021-22639 affects Fuji Electric Tellus Lite V‑Simulator and V‑Server Lite (versions before 4.0.10.0). The issue is an uninitialized pointer in how the application processes project files, which may allow an attacker to craft a special project file to achieve arbitrary code execution in the a...

7.8CVSS7.8AI score0.01858EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2021/01/27 7:03 p.m.74 views

CVE-2021-22641

CVE-2021-22641 is a heap-based buffer overflow vulnerability in Fuji Electric Tellus Lite V-Simulator and V-Server Lite, prior to version 4.0.10.0. The issue arises in how project files are processed, allowing an attacker to craft a special project file that may lead to arbitrary code execution w...

7.8CVSS7.9AI score0.02065EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2021/01/27 7:03 p.m.27 views

CVE-2021-22641

A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0...

8.2AI score0.02065EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/01/27 7:01 p.m.29 views

CVE-2021-22653

Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0...

8.2AI score0.01191EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/27 7:01 p.m.79 views

CVE-2021-22653

CVE-2021-22653 describes multiple out-of-bounds write vulnerabilities in Fuji Electric Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0) triggered by processing project files. Root cause: out-of-bounds write in the handling of project files could permit arbitrary code executi...

7.8CVSS8AI score0.01191EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2021/01/26 12:00 a.m.12 views

Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

7.8CVSS6.3AI score0.01858EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/01/26 12:00 a.m.13 views

Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

7.8CVSS6.3AI score0.02142EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/01/26 12:00 a.m.14 views

Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

7.8CVSS6.1AI score0.01191EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/26 12:00 a.m.12 views

Fuji Electric Tellus Lite V-Simulator和Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

7.8CVSS6.3AI score0.02065EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/01/26 12:00 a.m.13 views

Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

7.8CVSS6.1AI score0.01191EPSS
SaveExploits0References3
ICS
ICS
added 2021/01/26 12:00 a.m.71 views

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Fuji Electric Equipment: Tellus Lite V-Simulator and V-Server Lite Vulnerabilities: Stack-based Buffer Overflow, Out-of-Bounds Read, Out-of-Bounds Write, Access of Uninitialized Pointer, Heap-based Buffer Overflow 2...

7.8CVSS8.5AI score0.02142EPSS
SaveExploits1References5
CNVD
CNVD
added 2021/01/19 12:00 a.m.12 views

Envira Gallery Lite Cross-Site Scripting Vulnerability (CNVD-2021-11280)

Envira Gallery Lite is a plugin that provides responsive gallery functionality for Wordpress from China's Envira Gallery. A cross-site scripting vulnerability exists in Envira Gallery Lite 1.8.3.2, which originates when the program accepts malicious client-side scripts without proper detection, a...

5.4CVSS6AI score0.01343EPSS
SaveExploits2References1
OSV
OSV
added 2021/01/15 7:15 a.m.14 views

CVE-2020-35581

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the metatitle parameter...

5.4CVSS6.2AI score0.01343EPSS
SaveExploits2References4
NVD
NVD
added 2021/01/15 7:15 a.m.28 views

CVE-2020-35582

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

5.4CVSS5.3AI score0.01343EPSS
SaveExploits2References4
OSV
OSV
added 2021/01/15 7:15 a.m.8 views

CVE-2020-35582

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

5.4CVSS6.2AI score0.01343EPSS
SaveExploits2References4
Prion
Prion
added 2021/01/15 7:15 a.m.21 views

Cross site scripting

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the metatitle parameter...

3.5CVSS5.3AI score0.01343EPSS
SaveExploits2References4Affected Software1
Prion
Prion
added 2021/01/15 7:15 a.m.30 views

Cross site scripting

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

3.5CVSS5.3AI score0.01343EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2021/01/15 6:24 a.m.94 views

CVE-2020-35582

CVE-2020-35582 affects Envira Gallery Lite prior to 1.8.3.3. It is a stored cross-site scripting (XSS) vulnerability: an attacker can inject arbitrary JavaScript/HTML via the post_title parameter in a POST to /wp-admin/post.php. The vulnerability is associated with Envira Gallery Lite, with affec...

5.4CVSS5.2AI score0.01343EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder