Lucene search
+L

266 matches found

CNNVD
CNNVD
added 2023/05/08 12:0 a.m.7 views

Aruba Networks InstantOS 安全漏洞

Aruba Networks InstantOS is an Arch Linux-based distribution from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks InstantOS and ArubaOS 10, which stems from a buffer overflow vulnerability in the underlying service that can be exploited by an attacker to execute arbitrary...

9.8CVSS9.2AI score0.02068EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/08 12:0 a.m.8 views

Aruba Networks InstantOS 安全漏洞

Aruba Networks InstantOS is an Arch Linux-based distribution from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks InstantOS and ArubaOS 10, which stems from a buffer overflow vulnerability in the underlying service that can be exploited by an attacker to execute arbitrary...

9.8CVSS9.2AI score0.02068EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/08 12:0 a.m.7 views

Aruba Networks InstantOS 安全漏洞

Aruba Networks InstantOS is an Arch Linux-based distribution from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks InstantOS and ArubaOS 10, which stems from a buffer overflow vulnerability in the underlying service that can be exploited by an attacker to execute arbitrary...

9.8CVSS9.2AI score0.02068EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/29 7:15 p.m.6 views

CVE-2022-42430

This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. An attacker must first obtain the ability to execute privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the wowlanconfig data...

7.8CVSS6.2AI score0.00364EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/29 7:15 p.m.4 views

UBUNTU-CVE-2022-42432

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

5.1CVSS5.8AI score0.0061EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/03/22 12:0 a.m.29 views

Aruba Networks AOS-CX Network Analytics Engine 安全漏洞

The Aruba Networks AOS-CX is a modern programmable network from Aruba Networks. A security vulnerability exists in the Aruba Networks AOS-CX Network Analytics Engine that can be exploited by an attacker to execute arbitrary code on the underlying operating system as a privileged user, resulting i...

8.8CVSS8.5AI score0.01141EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:32 a.m.2 views

SUSE CVE-2022-2200

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

8.8CVSS8.8AI score0.23941EPSS
SaveExploits0References11
OSV
OSV
added 2022/12/22 8:15 p.m.11 views

CVE-2022-2200

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

8.8CVSS8.9AI score
SaveExploits0References4
OSV
OSV
added 2022/12/22 8:15 p.m.1 views

DEBIAN-CVE-2022-2200

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

8.8CVSS8.5AI score0.23941EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/22 8:15 p.m.28 views

Remote code execution

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

6.8CVSS8.5AI score0.23941EPSS
SaveExploits0References4Affected Software3
AlpineLinux
AlpineLinux
added 2022/12/22 12:0 a.m.40 views

CVE-2022-2200

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

8.8CVSS9AI score0.23941EPSS
SaveExploits0
CVE
CVE
added 2022/12/22 12:0 a.m.495 views

CVE-2022-2200

CVE-2022-2200 affects Firefox and Thunderbird where an attacker could corrupt an object prototype to set undesired attributes on a JavaScript object, leading to privileged code execution. Affected versions are Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird

8.8CVSS8.7AI score0.23941EPSS
SaveExploits0References4Affected Software3
Positive Technologies
Positive Technologies
added 2022/12/06 12:0 a.m.5 views

PT-2022-6108 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 6.0.7 through 6.0.15 Fortinet FortiOS versions 6.2.2 through 6.2.12 Fortinet FortiOS versions 6.4.0 through 6.4.9 Fortinet FortiOS versions 7.0.0 through 7.0.3 Description: The issue is related to improper...

5.4CVSS5.5AI score0.0038EPSS
SaveExploits0References9
OSV
OSV
added 2022/11/09 9:15 p.m.4 views

CVE-2021-26391

Insufficient verification of multiple header signatures while loading a Trusted Application TA may allow an attacker with privileges to gain code execution in that TA or the OS/kernel...

7.8CVSS6.2AI score0.00172EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/09 12:0 a.m.5 views

PT-2022-9755 · Amd · Amd Radeon Rx 5000 Series & Pro W5000 Series +15

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient verification of multiple header signatures while loading a Trusted Application TA, which may allow an attacker with...

7.8CVSS6.7AI score0.00172EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/11/09 12:0 a.m.7 views

PT-2022-9756 · Amd · Amd Radeon Rx 5000 Series & Pro W5000 Series +66

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient verification of a missing size check in the 'LoadModule' function, which may lead to an out-of-bounds write. This...

7.8CVSS7.9AI score0.0026EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2022/11/08 5:0 p.m.3 views

CVE-2021-26392

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA...

7.8CVSS7.5AI score0.0026EPSS
SaveExploits0References3
Prion
Prion
added 2022/09/28 9:15 p.m.19 views

Design/Logic Flaw

An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code o...

1.7CVSS3.9AI score0.00417EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/09/15 12:0 a.m.56 views

SUSE SLES12: MozillaFirefox / MozillaFirefox-branding-SLE / MozillaFirefox-devel / etc (SUSE-SU-2022:3273-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3273-1 advisory. Mozilla Firefox was updated to 102.2.0esr ESR: Fixed: Various stability, functionality, and security fixes. - MFSA 2022-34 bsc12026...

9.8CVSS6.6AI score0.23941EPSS
SaveExploits2References60
Tenable Nessus
Tenable Nessus
added 2022/07/08 12:0 a.m.32 views

Rocky Linux 8 : thunderbird (RLSA-2022:5470)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5470 advisory. - The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evidence of memory corruption and ...

9.8CVSS8.1AI score0.23941EPSS
SaveExploits1References19
Rows per page
Query Builder