Lucene search
+L

3551 matches found

OSV
OSV
•added 2022/04/11 7:15 p.m.•13 views

CVE-2021-43442

A Logic Flaw vulnerability exists in i3 International Inc Annexxus Camera V5.2.0 build 150317 Ax46, V5.0.9 build 151106 Ax68, and V5.0.9 build 150615 Ax78 due to a failure to allow the creation of more than one administrator account; however, this can be bypassed by parameter maniulation using PU...

8.1CVSS7.2AI score0.01013EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•13 views

The vulnerability of the put_qpel_fallback function in the h.265 Libde265 implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putqpelfallback function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created file...

7.8CVSS7AI score0.01096EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•18 views

The vulnerability of the put_font function in the genpict2e.c component of the Fig2dev file conversion utility, related to copying buffers without checking the input data, allows a malicious actor to cause service failures.

The vulnerability of the putfont function in the genpict2e.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions by converting xfig files into pict2e...

7.1CVSS5.8AI score0.00699EPSS
SaveExploits1References5Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/11 12:00 a.m.•5 views

CVE-2021-43442: Undefined Security Weakness

A Logic Flaw vulnerability exists in i3 International Inc Annexxus Camera V5.2.0 build 150317 Ax46, V5.0.9 build 151106 Ax68, and V5.0.9 build 150615 Ax78 due to a failure to allow the creation of more than one administrator account; however, this can be bypassed by parameter maniulation using PU...

8.1CVSS7.5AI score0.01013EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/04/11 12:00 a.m.•13 views

i3 International Annexxus Cameras 安全漏洞

i3 International Annexxus Cameras is a camera from the Canadian company i3 International. A security vulnerability exists in i3 International Annexxus Cameras Ax-n 5.2.0, which can be exploited to add a second administrative account by using the PUT and DELETE parameterizations, as well as by...

8.1CVSS7.7AI score0.01013EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/04/07 12:15 p.m.•21 views

CVE-2021-46418

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts...

7.5CVSS7.2AI score0.23945EPSS
SaveExploits4References4
NVD
NVD
•added 2022/04/07 12:15 p.m.•41 views

CVE-2021-46418

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts...

7.5CVSS0.23945EPSS
SaveExploits4References2
Prion
Prion
•added 2022/04/07 12:15 p.m.•30 views

Design/Logic Flaw

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts...

5CVSS7.5AI score0.23945EPSS
SaveExploits4References2
Cvelist
Cvelist
•added 2022/04/07 11:18 a.m.•55 views

CVE-2021-46418

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts...

7.7AI score0.23945EPSS
SaveExploits4References2
CVE
CVE
•added 2022/04/07 11:18 a.m.•132 views

CVE-2021-46418

Telesquare TLR-2855KS6 is affected by CVE-2021-46418. The Nuclei template documents an unauthenticated vulnerability where an HTTP PUT request can create arbitrary files, including CGI scripts, on the device. Impact is described as potentially enabling remote code execution via file creation. Aff...

7.5CVSS7.5AI score0.23945EPSS
SaveExploits4References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/07 12:00 a.m.•0 views

PT-2022-12694

Name of the Vulnerable Software and Affected Versions Telesquare TLR-2855KS6 affected versions not specified Description The issue concerns an unauthorized file creation vulnerability. It affects Telesquare TLR-2855KS6 via the PUT method, allowing the creation of CGI scripts. Recommendations At t...

7.5CVSS0.23945EPSS
SaveExploits4References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/07 12:00 a.m.•4 views

CVE-2021-46418: Undefined Security Weakness

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts...

7.5CVSS7.3AI score0.23945EPSS
SaveExploits4References1
CNNVD
CNNVD
•added 2022/04/07 12:00 a.m.•25 views

Telesquare TLR-2855KS6 安全漏洞

The Telesquare TLR-2855KS6 is an LTE router from Telesquare Korea. A security vulnerability exists in the Telesquare TLR-2855KS6 that stems from an unauthorized file creation vulnerability via the PUT method that could allow the creation of CGI scripts...

7.5CVSS7.3AI score0.23945EPSS
SaveExploits4References5
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•18 views

The vulnerability of the put_arrow() function in the genpict2e.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the putarrow function in the genpict2e.c component of the Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting an xfig file into the pict2e format...

7.1CVSS6.8AI score0.00778EPSS
SaveExploits1References6Affected Software2
NVD
NVD
•added 2022/03/28 9:15 p.m.•35 views

CVE-2003-5001

A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit h...

9.8CVSS0.01046EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/03/28 12:00 a.m.•20 views

PT-2022-7714 · Ibm · Blackice Pc Protection

Name of the Vulnerable Software and Affected Versions: ISS BlackICE PC Protection affected versions not specified Description: A critical vulnerability was found in the Cross Site Scripting Detection component of ISS BlackICE PC Protection. The issue allows for privilege escalation through...

9.8CVSS6.9AI score0.01046EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/28 12:00 a.m.•7 views

CVE-2003-5001: Improper Privilege Management

A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit h...

9.8CVSS5.2AI score0.01046EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/28 12:00 a.m.•15 views

IBM ISS BlackICE PC 安全漏洞

IBM ISS BlackICE PC is a personal firewall/IDS for Windows desktops from International Business Machines IBM. A security vulnerability exists in IBM ISS BlackICE PC Protection that stems from Cross Site Scripting Detection causing an elevation of privilege when processing operations that are part...

9.8CVSS5.3AI score0.01046EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/03/26 12:00 a.m.•1 views

PT-2022-36895

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: s RLE process, cmd put bits, and clist copy mono. No...

5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/23 12:00 a.m.•2 views

PT-2025-8120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified, where the cpsw ethtool begin function may return inconsistent values, leading to incorrect calls to pm runtime put. This inconsistency ca...

5.5CVSS5.6AI score0.00268EPSS
SaveExploits0
Rows per page
Query Builder