Lucene search
+L

7322 matches found

OSV
OSV
added 2022/01/24 6:15 p.m.6 views

CVE-2021-35005

This vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TeamViewer...

3.3CVSS5.6AI score0.00891EPSS
SaveExploits0References2
Prion
Prion
added 2022/01/24 6:15 p.m.20 views

Design/Logic Flaw

This vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TeamViewer...

2.1CVSS3.5AI score0.00891EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/24 6:10 p.m.29 views

CVE-2021-35005

This vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TeamViewer...

3.3CVSS5.2AI score0.00891EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/21 9:15 a.m.7 views

CVE-2022-21933

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

7.8CVSS6.3AI score0.00269EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/01/19 1:35 p.m.15 views

Unrestricted File Upload

pimcore/pimcore allows unrestricted file uploads. The vulnerability exists due to a lack of sanitization of the file type during upload allowing local authenticated attackers to execute malicious scripts on the server...

7.8CVSS4.7AI score0.01115EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/01/18 12:00 a.m.36 views

openSUSE 15 Security Update : watchman (openSUSE-SU-2022:0016-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0016-1 advisory. - A UNIX Symbolic Link Symlink Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows loc...

7.8CVSS7.4AI score0.00287EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2022/01/14 12:00 a.m.18 views

NetBSD Kernel stat System Call Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of NetBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the stat...

5.5CVSS4.9AI score
SaveExploits0References1
CNVD
CNVD
added 2022/01/14 12:00 a.m.27 views

systemd rm_rf_children() function denial of service vulnerability

systemd is a Linux-based system and service manager. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. systemd rmrfchildren function is vulnerable to denial of service, which can be exploited by local...

5.5CVSS3.5AI score0.0156EPSS
SaveExploits1References1
Prion
Prion
added 2022/01/13 10:15 p.m.22 views

Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...

7.2CVSS7.8AI score0.00369EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:00 a.m.35 views

Microsoft Windows DirectComposition Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

5.5CVSS7.1AI score0.01287EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:00 a.m.31 views

OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

3.8CVSS4.7AI score0.00241EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:00 a.m.41 views

Microsoft Windows EFI Partition Incorrect Authorization Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

5.5CVSS6.5AI score0.0143EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:00 a.m.44 views

Microsoft Windows User Profile Service Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the User Profile...

7.8CVSS5.9AI score0.01227EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/12 12:00 a.m.8 views

Jimoty 信任管理问题漏洞

Jimoty is a Web site of Jimoty Japan, Inc. It is used to provide help, information dissemination and other services to local people. Jimoty App for Android is vulnerable to a trust management issue, which exists due to hard-coded credentials in the application code. A local attacker could exploit...

3.3CVSS5.1AI score0.00203EPSS
SaveExploits0References4
NVD
NVD
added 2022/01/10 2:12 p.m.23 views

CVE-2022-22264

Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permission...

7.7CVSS0.00122EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/10 2:12 p.m.9 views

CVE-2022-22264

Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permission...

7.1CVSS5.9AI score0.00122EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.9 views

CVE-2022-21823

A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control 2021.2 10.7.30.0 that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector...

5.5CVSS6.1AI score0.00349EPSS
SaveExploits0References2
Prion
Prion
added 2022/01/10 2:12 p.m.21 views

Design/Logic Flaw

Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permission...

3.6CVSS6.8AI score0.00122EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/07 10:39 p.m.27 views

CVE-2022-22264

Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permission...

7.7CVSS7.6AI score0.00122EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/06 12:00 a.m.37 views

Trend Micro Worry-Free Business Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif...

6.1CVSS4.3AI score0.004EPSS
SaveExploits0References1
Rows per page
Query Builder