Lucene search
+L

4977 matches found

NVD
NVD
added 2022/05/10 7:15 p.m.33 views

CVE-2021-26408

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality...

7.1CVSS0.00259EPSS
SaveExploits0References1
OSV
OSV
added 2022/05/10 7:15 p.m.7 views

CVE-2021-26408

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality...

7.1CVSS7.1AI score0.00259EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/10 7:15 p.m.19 views

Input validation

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality...

6.6CVSS7.1AI score0.00259EPSS
SaveExploits0References1Affected Software38
Cvelist
Cvelist
added 2022/05/10 6:22 p.m.35 views

CVE-2021-26408

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality...

7.2AI score0.00259EPSS
SaveExploits0References1
CVE
CVE
added 2022/05/10 6:22 p.m.104 views

CVE-2021-26408

The CVE-2021-26408 issue affects AMD SEV-legacy firmware, where insufficient validation of elliptic curve points during SEV-legacy guest migration could lead to loss of guest integrity or confidentiality. This is rooted in inadequate point validation within SEV-legacy firmware. According to the c...

7.1CVSS7.1AI score0.00259EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2022/05/10 1:43 p.m.10 views

kernel: cgroup: Use open-time creds and namespace for migration perm checks

An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1...

7.8CVSS6.6AI score0.00536EPSS
SaveExploits0References5
Imperva Blog
Imperva Blog
added 2022/05/10 12:48 p.m.30 views

The Business Case for Modernizing On-Premises and Cloud-Based Database Security

Nobody ever says, “We don’t need better security for the data we manage.” There is, however, a balancing act that security professionals perform every day to get the most security value from their solutions at the lowest possible cost. As they move more workloads into cloud-native environments an...

6.7AI score
SaveExploits0
CNNVD
CNNVD
added 2022/05/10 12:0 a.m.17 views

WordPress plugin All-in-One WP Migration 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress All-in-One WP Migration 7.58 and prior versions have a path traversal vulnerability that ca...

6.6CVSS7.4AI score0.47077EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/05/10 12:0 a.m.7 views

PT-2022-13916 · WordPress · All-In-One Wp Migration

Name of the Vulnerable Software and Affected Versions: All-in-One WP Migration plugin for WordPress versions up to, and including, 7.58 Description: The issue arises from insufficient file validation via the /lib/model/class-ai1wm-backups.php file, allowing for arbitrary file deletion via directo...

6.6CVSS6.7AI score0.47077EPSS
SaveExploits0References7
Oracle linux
Oracle linux
added 2022/05/09 12:0 a.m.54 views

virt:kvm_utils security update

qemu-kvm 4.2.1.16.el8 - Document CVE-2021-4145 as fixed Mark Kanda Orabug: 33791496 CVE-2021-4145 - migration: Tally pre-copy, downtime and post-copy bytes independently David Edmondson - migration: Introduce ramtransferredadd David Edmondson - ACPI ERST: specification for ERST support Eric...

6.5CVSS1.1AI score0.0039EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2022/05/08 12:0 a.m.14 views

Fedora: Security Advisory for golang-github-coredns-corefile-migration (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
Fedora
Fedora
added 2022/05/07 5:6 a.m.20 views

[SECURITY] Fedora 36 Update: golang-github-coredns-corefile-migration-1.0.11-5.fc36

Library and tools for migrating the CoreDNS corefile...

7.5CVSS1.9AI score0.03931EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/05/06 8:0 p.m.4 views

CVE-2021-26408

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality...

7.1CVSS7.1AI score0.00259EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.15 views

Fedora: Security Advisory for golang-github-coredns-corefile-migration (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.12 views

Fedora: Security Advisory for golang-github-coredns-corefile-migration (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
Fedora
Fedora
added 2022/04/28 5:55 a.m.20 views

[SECURITY] Fedora 34 Update: golang-github-coredns-corefile-migration-1.0.11-5.fc34

Library and tools for migrating the CoreDNS corefile...

7.5CVSS1.9AI score0.03931EPSS
SaveExploits0
Fedora
Fedora
added 2022/04/28 5:53 a.m.20 views

[SECURITY] Fedora 35 Update: golang-github-coredns-corefile-migration-1.0.11-5.fc35

Library and tools for migrating the CoreDNS corefile...

7.5CVSS1.9AI score0.03931EPSS
SaveExploits0
WPVulnDB
WPVulnDB
added 2022/04/28 12:0 a.m.114 views

All-in-One WP Migration < 7.59 - Admin+ File Deletion on Windows Hosts via Path Traversal

The plugin is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the /lib/model/class-ai1wm-backups.php file which can be exploited by administrative users, and users who have access to the site’s secret key on WordPress instances with Windows...

6.6CVSS4.4AI score0.47077EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2022/04/28 12:0 a.m.46 views

WordPress All in One WP Migration plugin <= 7.58 - Directory Traversal to File Deletion on Windows Hosts vulnerability

Directory Traversal to File Deletion on Windows Hosts vulnerability discovered by haidv35 Viettel Cyber Security in WordPress All-in-One WP Migration plugin versions = 7.58. Solution Update the WordPress All-in-One WP Migration plugin to the latest available version at least 7.59...

6.6CVSS2AI score0.47077EPSS
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
added 2022/04/26 2:47 p.m.1135 views

Exploit for SQL Injection in Djangoproject Django

CVE-2022-28346 Django QuerySet.annotate, aggregate, extr...

9.8CVSS9.9AI score0.18661EPSS
SaveExploits3
Rows per page
Query Builder