Lucene search
+L

3764 matches found

Positive Technologies
Positive Technologies
•added 2021/05/19 12:00 a.m.•3 views

PT-2021-3084

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager affected versions not specified Description The issue is related to insufficient validation of user-supplied input to the web-based management interface, which could allow...

9CVSS0.02115EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/05/19 12:00 a.m.•0 views

PT-2021-3062

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions affected versions not specified Cisco Evolved Programmable Network EPN Manager versions affected versions not specified Cisco Identity Services Engine versions affected versions not specified Description The...

4.4CVSS0.00212EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/05/19 12:00 a.m.•19 views

Cisco Prime Infrastructure 操作系统命令注入漏洞

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. An operating system command injection vulnerability exists in Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager, which can be exploited ...

9CVSS6.3AI score0.02115EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/05/19 12:00 a.m.•18 views

Cisco 多款产品安全漏洞

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. A security vulnerability exists in several Cisco products, which can be exploited by an attacker to identify directories and write arbitrary files to the file...

4.4CVSS5.2AI score0.00212EPSS
SaveExploits0References5
OSV
OSV
•added 2021/04/19 9:15 p.m.•4 views

DEBIAN-CVE-2021-3505

A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with 1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate, which is called before the prime number check. The highest threat...

5.5CVSS6.2AI score0.00404EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/04/19 9:15 p.m.•11 views

CVE-2021-3505

A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with 1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate, which is called before the prime number check. The highest threat...

5.5CVSS6.5AI score0.00404EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2021/04/19 12:00 a.m.•22 views

Archlinux libtpms 安全特征问题漏洞

Archlinux libtpms is an Archlinux open source application. A library that provides software emulation of Trusted Platform Modules TPM 1.2 and TPM 2.0. A security feature issue vulnerability exists in versions prior to libtpms 0.8.0, which stems from a bug in the TCG specification where the key...

5.5CVSS6.5AI score0.00404EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•64 views

SUSE: Security Advisory (SUSE-SU-2018:2825-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.0499EPSS
SaveExploits1References7
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•39 views

SUSE: Security Advisory (SUSE-SU-2018:2842-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.0499EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2021/04/08 4:05 a.m.•46 views

CVE-2021-1362 Cisco Unified Communications Products Remote Code Execution Vulnerability

A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, and Cisco Prime License Manager could allow an authenticated, remo...

8.8CVSS9AI score0.02714EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/04/08 12:00 a.m.•20 views

The vulnerability of the SOAP API interfaces of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection—an integrated messaging system—allows a perpetrator to execute arbitrary code. The Cisco Prime License Manager (PLM) licensing management tool also exposes vulnerabilities that enable a perpetrator to perform arbitrary actions.

The vulnerability of the SOAP API interfaces of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection—an integrated messaging system—as well as the Cisco Pri...

9CVSS8AI score0.02714EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/04/07 12:00 a.m.•2 views

PT-2021-2542

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager affected versions not specified Cisco Unified Communications Manager Session Management Edition affected versions not specified Cisco Unified Communications Manager IM & Presence Service affected versions...

9CVSS0.02714EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2021/03/25 12:00 a.m.•18 views

Fuji Xerox 安全漏洞

The Fuji Xerox is a hardware device of the Japanese company Fuji Xerox Fuji. A printer. A security vulnerability exists in Fuji Xerox that could allow an attacker to cause a denial of service by sending specially crafted commands. The following products and versions are affected: DocuCentre-VII...

7.8CVSS6.1AI score0.01549EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/02/23 12:00 a.m.•12 views

The vulnerabilities of Intel Quartus Prime Pro and Intel Quartus Prime Standard software-based design systems involve privilege management errors, which allow attackers to escalate their privileges.

The vulnerability of Intel Quartus Prime Pro and Intel Quartus Prime Standard automated design systems is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS7.2AI score0.00293EPSS
SaveExploits0References3Affected Software2
OSV
OSV
•added 2021/02/17 2:15 p.m.•14 views

CVE-2020-24481

Insecure inherited permissions for the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00293EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/02/17 2:15 p.m.•9 views

CVE-2020-24481

Insecure inherited permissions for the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.5AI score0.00293EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/02/17 1:45 p.m.•36 views

CVE-2020-24481

Insecure inherited permissions for the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

7.9AI score0.00293EPSS
SaveExploits0References1
CVE
CVE
•added 2021/02/17 1:45 p.m.•59 views

CVE-2020-24481

CVE-2020-24481 involves insecure inherited permissions in Intel® Quartus Prime Pro and Standard Edition software, potentially allowing an authenticated user to escalate privileges via local access. Affected products: Intel Quartus Prime Pro before v20.4 and Standard before v20.1. Root cause: inse...

7.8CVSS7.8AI score0.00293EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/17 12:00 a.m.•9 views

CVE-2020-24481: Undefined Security Weakness

Insecure inherited permissions for the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.9AI score0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•22 views

Intel Quartus Prime Pro Security Vulnerability

Intel Quartus Prime Pro is a set of multi-platform design environments from the U.S. company Intel Intel. The product is primarily used for programming programmable logic devices. A security vulnerability exists in Intel Quartus Prime Pro and Standard edition, which arises from a lack of effectiv...

7.8CVSS7.1AI score0.00293EPSS
SaveExploits0References3
Rows per page
Query Builder