Lucene search
K

654 matches found

OSV
OSV
added 2022/08/10 8:16 p.m.1 views

CVE-2022-37003

The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized access to files...

9.8CVSS5.8AI score0.00422EPSS
Exploits0References2
OSV
OSV
added 2022/07/14 3:15 p.m.1 views

ALPINE-CVE-2022-32215

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling HRS...

6.5CVSS7AI score0.68796EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/12 2:15 p.m.2 views

CVE-2022-34742

The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

7.5CVSS5.9AI score0.0069EPSS
Exploits0References4Affected Software3
OpenVAS
OpenVAS
added 2022/07/05 12:0 a.m.13 views

SUSE: Security Advisory (SUSE-SU-2022:2249-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS8.5AI score0.06705EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.3 views

TOTOLINK EX1200T 操作系统命令注入漏洞

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.A command injection vulnerability exists in TOTOLINK EX1200T V4.1.2cu.5215, which originates from the file lib/cstemodules/system in the setNoticeCfg function in the file lib/cstemodules/system fails to properly...

10CVSS5.9AI score0.08208EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2022/05/20 10:53 p.m.23 views

CVE-2019-12816

Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name...

8.8CVSS6AI score0.04127EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2022/05/20 10:45 p.m.24 views

CVE-2017-16114

The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds...

7.5CVSS4.3AI score0.01758EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/05 12:0 a.m.3 views

HUAWEI HarmonyOS 资源管理错误漏洞

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the HUAWEI HarmonyOS kernel that stems from a use-after-release vulnerability in a kernel module, whi...

9.1CVSS8.1AI score0.00616EPSS
Exploits0References4
Prion
Prion
added 2022/04/11 8:15 p.m.15 views

Input validation

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability...

5CVSS7.6AI score0.00283EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/02/22 12:0 a.m.6 views

The vulnerability of the NetUSB.ko module of TP-Link AC1750 Archer C7 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the NetUSB.ko module of TP-Link AC1750 Archer C7 router’s microprogramming software is related to writing data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.2AI score0.00739EPSS
Exploits0References7Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.7 views

Mageia: Security Advisory (MGASA-2016-0245)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.2 views

The vulnerability of the URI module in the Ansible configuration management system arises from a lack of mechanisms for encoding or shielding output data, allowing attackers to access confidential information.

The vulnerability of the Ansible configuration system’s module module relates to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow attackers to access confidential data...

5.5CVSS6.8AI score0.00568EPSS
Exploits1References10Affected Software4
Cvelist
Cvelist
added 2022/01/07 10:39 p.m.17 views

CVE-2021-40002

The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command execution at the remote end...

9.1AI score0.00384EPSS
Exploits0References1
NVD
NVD
added 2022/01/03 10:15 p.m.12 views

CVE-2021-37112

Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lead to Firmware leak...

5.3CVSS0.00483EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/12/17 12:0 a.m.1 views

ajaxsoundstudio.com Pyo安全漏洞

Pyo is a Python module written in C by the individual developer Olivier Belanger. It is used to help create digital signal processing scripts. ajaxsoundstudio.com A security vulnerability exists in Pyo version 1.03, which can be exploited by an attacker to conduct a denial-of-service attack by...

7.5CVSS7.3AI score0.01066EPSS
Exploits1References2
CNVD
CNVD
added 2021/12/08 12:0 a.m.5 views

Huawei HarmonyOS stack buffer overflow vulnerability (CNVD-2021-99968)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS. An attacker can exploit this vulnerability to cause the device to beco...

7.5CVSS7.1AI score0.00665EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/12/05 12:0 a.m.3 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to an improper privilege management vulnerability in the Huawei HarmonyOS Wearables cellular module. An attacker could exploit this vulnerability to cause confidentiality to be compromised...

7.5CVSS5.6AI score0.00637EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.2 views

The vulnerability of the CMA module in the FusionCompute virtualization software allows a hacker to execute arbitrary commands.

The vulnerability of the CMA module in FusionCompute virtualization software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS7.5AI score0.00898EPSS
Exploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2021/11/19 7:24 p.m.3 views

Ansible: ansible-connection module discloses sensitive info in traceback error message

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality...

5.5CVSS6.8AI score0.00384EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/11/19 12:0 a.m.4 views

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S.A. A buffer error vulnerability exists in Moddable SDK v10.5.0, which originates in the software component module /modules/network/wifi/esp/modwifi. c is vulnerable to a heap-based buffer...

5.5CVSS6AI score0.00613EPSS
Exploits1References2
Rows per page
Query Builder