Lucene search
+L

7322 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/03/09 12:00 a.m.62 views

Google Android fts_driver_test_write Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Google Android. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

5.5CVSS3.1AI score0.00124EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/09 12:00 a.m.11 views

Eclipse Platform 访问控制错误漏洞

Eclipse Platform is Eclipse open source defines a set of frameworks and public services that together form the infrastructure needed to support the use of Eclipse as a component model , Rich Client Platform RCP and a comprehensive tool integration platform . Project model for managing resources ,...

7.8CVSS5.6AI score0.00336EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2021/03/05 12:00 a.m.23 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-1477)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.2AI score0.03522EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/05 12:00 a.m.29 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-1531)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.9AI score0.00379EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/03 10:15 a.m.34 views

CVE-2021-25315

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior t...

9.8CVSS0.02333EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/03 10:15 a.m.15 views

CVE-2021-25315

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior t...

7.8CVSS9.3AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/03/03 10:15 a.m.29 views

CVE-2021-25315

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior t...

9.8CVSS7.3AI score0.02333EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/03 10:15 a.m.18 views

Authentication flaw

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior t...

4.6CVSS7.9AI score0.02333EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2021/03/03 9:55 a.m.53 views

CVE-2021-25315

Removed by vendor...

9.8CVSS8.7AI score0.02333EPSS
SaveExploits0
NVD
NVD
added 2021/03/02 7:15 p.m.25 views

CVE-2021-22296

A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system...

5.5CVSS0.00202EPSS
SaveExploits0References3
NVD
NVD
added 2021/03/02 7:15 p.m.44 views

CVE-2021-22294

A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerability to issue commands repeatedly, exhausting system service resources...

3.3CVSS0.00174EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/02 7:15 p.m.22 views

Design/Logic Flaw

A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system...

4.9CVSS5.5AI score0.00202EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/02 7:15 p.m.4 views

CVE-2021-22296

A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system...

5.5CVSS6AI score0.00202EPSS
SaveExploits0References4
Prion
Prion
added 2021/03/02 7:15 p.m.24 views

Design/Logic Flaw

A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerability to issue commands repeatedly, exhausting system service resources...

2.1CVSS4.3AI score0.00174EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/02 6:11 p.m.50 views

CVE-2021-22294

A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerability to issue commands repeatedly, exhausting system service resources...

4.5AI score0.00174EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/02 6:11 p.m.66 views

CVE-2021-22294

HarmonyOS 2.0 contains a component API permission bypass vulnerability that allows a local attacker to issue commands repeatedly, exhausting system service resources. Affected element: HarmonyOS 2.0 component API. Impact: potential resource exhaustion on local access. Root cause described as a pe...

3.3CVSS4.3AI score0.00174EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/02/26 10:15 p.m.28 views

CVE-2021-26567

Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options...

7.8CVSS8.1AI score
SaveExploits0References2
Veracode
Veracode
added 2021/02/26 2:11 a.m.44 views

Denial Of Service (DoS)

Linux Kernel is vulnerable to denial of service DoS. The vulnerability is possible because of an issue was discovered in drivers/accessibility/speakup/spkttyio.c. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs...

5.5CVSS3.7AI score0.00334EPSS
SaveExploits0References11Affected Software4
UbuntuCve
UbuntuCve
added 2021/02/25 10:15 a.m.22 views

CVE-2020-8032

A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions...

7CVSS7AI score0.0038EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/02/25 9:15 a.m.30 views

CVE-2020-8032 Local privilege escalation to root due to insecure tmp file usage

A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions...

6.7CVSS6.7AI score0.0038EPSS
SaveExploits1References1
Rows per page
Query Builder