Lucene search
+L

20574 matches found

BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.13 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to delete any files they desire.

The vulnerability of the Avalanche mobile device management web component is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...

7.5CVSS7.1AI score0.01807EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.12 views

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

5.3CVSS6.2AI score0.01884EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.12 views

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a hacker to trigger a service failure.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

6.8CVSS6.8AI score0.01728EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.10 views

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

5.3CVSS6.2AI score0.01884EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.10 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

9CVSS7.9AI score0.68104EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.9 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche prior to version 6.4.3, which stems from an out-of-bounds read...

7.5CVSS6.5AI score0.01884EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.10 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions prior to 6.4.3, which stems from a path traversal...

8.8CVSS7.4AI score0.70908EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.8 views

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is a mobile device management MDM software platform designed to help organizations manage, maintain and secure their mobile devices. It supports a range of device types, including smartphones, tablets, and industrial devices. A heap overflow vulnerability exists in Ivanti Avalanc...

9.8CVSS7.5AI score0.04308EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.11 views

The vulnerability of the WLAvalancheService component in the Avalanche mobile device management system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

7.5CVSS7.5AI score0.01789EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.14 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...

9CVSS8.1AI score0.02715EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2024/04/19 12:00 a.m.27 views

Ivanti Avalanche Heap Overflow Vulnerability

Ivanti Avalanche is a mobile device management MDM software platform designed to help organizations manage, maintain and secure their mobile devices. It supports a range of device types, including smartphones, tablets, and industrial devices. A heap overflow vulnerability exists in Ivanti Avalanc...

9.8CVSS7.6AI score0.04308EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.14 views

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to synchronization errors when using a common resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands with SYSTEM privileges...

9CVSS8AI score0.02373EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/04/17 7:15 p.m.2 views

DEBIAN-CVE-2024-31583

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...

7.8CVSS7.4AI score0.00268EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/17 7:15 p.m.9 views

AZL-39942 CVE-2024-31583 affecting package pytorch for versions less than 2.0.0-4

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...

7.8CVSS5.8AI score0.00268EPSS
SaveExploits0References1
PyPA
PyPA
added 2024/04/17 7:15 p.m.13 views

PYSEC-2024-251

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...

7.8CVSS7.3AI score0.00268EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/04/17 7:15 p.m.6 views

UBUNTU-CVE-2024-31583

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...

7.8CVSS5.8AI score0.00268EPSS
SaveExploits0References5
OSV
OSV
added 2024/04/17 5:15 a.m.7 views

CVE-2024-2102

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field and 'smsprefix' parameter when booking an appointment, allowing customers to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the...

4.7CVSS5.8AI score0.00464EPSS
SaveExploits2References1
NVD
NVD
added 2024/04/17 5:15 a.m.23 views

CVE-2024-2101

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field when booking an appointment, allowing customers to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Customers' page and the...

5.7CVSS5.6AI score0.00631EPSS
SaveExploits2References1
OSV
OSV
added 2024/04/17 5:15 a.m.9 views

CVE-2024-2101

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field when booking an appointment, allowing customers to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Customers' page and the...

5.7CVSS7.3AI score0.00631EPSS
SaveExploits2References1
CVE
CVE
added 2024/04/17 5:00 a.m.97 views

CVE-2024-2101

The CVE-2024-2101 in the Salon booking system WordPress plugin affects versions prior to 9.6.3. The issue is improper sanitization/escaping of the Mobile Phone field during appointment booking, enabling Stored Cross-Site Scripting (XSS) attacks that trigger when an admin visits the Customers page...

5.7CVSS8AI score0.00631EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder