Lucene search
+L

17384 matches found

VulnCheck KEV
VulnCheck KEV
added 2022/03/15 12:00 a.m.8 views

VulnCheck KEV: CVE-2019-1315

A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status...

7.8CVSS6.9AI score0.03478EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/03/14 1:15 p.m.22 views

CVE-2022-24387

With administrator or admin privileges the application can be tricked into overwriting files in appdata/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010...

9.1CVSS7AI score0.02058EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/03/14 1:15 p.m.9 views

CVE-2022-24387

With administrator or admin privileges the application can be tricked into overwriting files in appdata/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010...

7.2CVSS5.8AI score0.02058EPSS
SaveExploits0References3
NVD
NVD
added 2022/03/14 1:15 p.m.37 views

CVE-2022-24387

With administrator or admin privileges the application can be tricked into overwriting files in appdata/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010...

9.1CVSS0.02058EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/03/14 12:15 p.m.16 views

CVE-2022-24387 File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010

With administrator or admin privileges the application can be tricked into overwriting files in appdata/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010...

9.1CVSS6.9AI score0.02058EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/03/14 12:15 p.m.31 views

CVE-2022-24387 File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010

With administrator or admin privileges the application can be tricked into overwriting files in appdata/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010...

9.1CVSS9.4AI score0.02058EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/14 11:15 a.m.10 views

DEBIAN-CVE-2022-23943

Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions...

9.8CVSS8.5AI score0.50401EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/14 11:15 a.m.4 views

ALPINE-CVE-2022-23943

Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions...

9.8CVSS7.1AI score0.50401EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/03/14 12:00 a.m.19 views

PT-2022-16662 · Unknown · Smartertrack

Name of the Vulnerable Software and Affected Versions: SmarterTrack version 100.0.8019.14010 Description: The application can be tricked into overwriting files in the app data/Config folder, such as the systemsettings.xml file, with administrator or admin privileges. Recommendations: For...

9.1CVSS6.9AI score0.02058EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/03/14 12:00 a.m.11 views

SmarterTools SmarterTrack 代码问题漏洞

SmarterTools SmarterTrack is a customer service software from SmarterTools UK. It improves customer service and reduces support costs. SmarterTools SmarterTrack 100.0.8019.14010 A security vulnerability exists where an application using administrator or administrator privileges could be tricked...

9.1CVSS7.1AI score0.02058EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/03/14 12:00 a.m.5 views

Apache HTTP Server 缓冲区错误漏洞

Apache HTTP Server is an open source web server from the Apache Foundation. The server is fast, reliable, and extensible via a simple API.A buffer overflow vulnerability exists in Apache HTTP Server, which stems from a networked system or product that does not properly validate data boundaries wh...

9.8CVSS8.5AI score0.50401EPSS
SaveExploits0References35
GithubExploit
GithubExploit
added 2022/03/13 5:51 a.m.355 views

Exploit for Improper Initialization in Linux Linux_Kernel

Dirty-Pipe-CVE-2022-0847 CVE-2022-0847 Dirty Pipe is an arb...

7.8CVSS7.6AI score0.89721EPSS
SaveExploits101
Tenable Nessus
Tenable Nessus
added 2022/03/12 12:00 a.m.181 views

AlmaLinux 8 : nginx:1.20 (ALSA-2022:0323)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:0323 advisory. nginx: Off-by-one in ngxresolvercopy when labels are followed by a pointer to a root domain name CVE-2021-23017 Tenable has extracted the preceding description blo...

7.7CVSS7.8AI score0.53461EPSS
SaveExploits10References2
NVD
NVD
added 2022/03/10 5:46 p.m.20 views

CVE-2022-24960

A use after free vulnerability was discovered in PDFTron SDK version 9.2.0. A crafted PDF can overwrite RIP with data previously allocated on the heap. This issue affects: PDFTron PDFTron SDK 9.2.0 on OSX; 9.2.0 on Linux; 9.2.0 on Windows...

7.8CVSS0.00576EPSS
SaveExploits0References2
NVD
NVD
added 2022/03/10 5:42 p.m.33 views

CVE-2021-34338

Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName in decompiler.c file that causes a direct segmentation fault and leads to denial of service...

6.5CVSS0.00957EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:42 p.m.7 views

CVE-2021-34338

Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName in decompiler.c file that causes a direct segmentation fault and leads to denial of service...

6.5CVSS6.7AI score0.00957EPSS
SaveExploits1References3
OSV
OSV
added 2022/03/10 5:42 p.m.21 views

CVE-2021-34338

Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName in decompiler.c file that causes a direct segmentation fault and leads to denial of service...

6.5CVSS6.9AI score
SaveExploits0References2
Prion
Prion
added 2022/03/10 5:42 p.m.25 views

Design/Logic Flaw

Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName in decompiler.c file that causes a direct segmentation fault and leads to denial of service...

4.3CVSS6.4AI score0.00957EPSS
SaveExploits1References2Affected Software2
Rapid7 Blog
Rapid7 Blog
added 2022/03/09 10:25 p.m.190 views

CVE-2022-0847: Arbitrary File Overwrite Vulnerability in Linux Kernel

CVE | Disclosure | AttackerKB | IVM Content | Patching Urgency | Blog's Last Update ---|---|---|---|---|--- CVE-2022-0847 | Original disclosure | AttackerKB | March 10, 2022 | When practical | March 10, 2022 3:21 PM EST On March 7, 2022, CM4all security researcher Max Kellermann published technic...

7.2CVSS1.2AI score0.89721EPSS
SaveExploits101
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:00 a.m.16 views

The vulnerability of the `copy_page_to_iter_pipe` and `push_pipe` functions in the Linux operating system allows a hacker to overwrite the contents of page cache for arbitrary files.

The vulnerability of the copypagetoiterpipe and pushpipe functions in the Linux kernel is related to errors in permission storage. Exploiting this vulnerability could allow an attacker to rewrite the contents of page cache for arbitrary files...

7.8CVSS7AI score0.89721EPSS
SaveExploits101References33Affected Software19
Rows per page
Query Builder