Lucene search
K

252 matches found

Redos
Redos
added 2021/09/08 12:0 a.m.27 views

ROS-2-1678

2.1678 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.7CVSS8.4AI score0.52838EPSS
Exploits10
Redos
Redos
added 2021/09/08 12:0 a.m.24 views

ROS-2-1697

2.1697 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

9.8CVSS8.5AI score0.52838EPSS
Exploits10
Redos
Redos
added 2021/09/08 12:0 a.m.25 views

ROS-2-1612

2.1612 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.7CVSS8.4AI score0.52838EPSS
Exploits11
Redos
Redos
added 2021/09/08 12:0 a.m.18 views

ROS-2-1775

2.1775 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.8CVSS8.5AI score0.99305EPSS
Exploits91
Redos
Redos
added 2021/09/08 12:0 a.m.5 views

ROS-2-2074

2.2074 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

7.8CVSS8.5AI score0.99305EPSS
Exploits91
Redos
Redos
added 2021/09/08 12:0 a.m.5 views

ROS-2-2057

2.2057 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS8.4AI score0.03582EPSS
Exploits1
Redos
Redos
added 2021/09/08 12:0 a.m.8 views

ROS-2-1653

2.1653 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

9.3CVSS8.3AI score0.10047EPSS
Exploits3
Redos
Redos
added 2021/09/08 12:0 a.m.4 views

ROS-2-1646

2.1646 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability coul...

8.8CVSS9.3AI score0.03582EPSS
Exploits1
CNNVD
CNNVD
added 2021/08/18 12:0 a.m.3 views

stevemao trim-off-newlines 处理逻辑错误漏洞

trim-off-newlines is used by NPM to remove line breaks. A processing logic error vulnerability exists in stevemao trim-off-newlines that stems from the fact that all versions of trim-off-newlines are susceptible to a Regular Expression Denial of Service ReDoS attack via string processing...

5.3CVSS6.6AI score0.01927EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2021/08/12 12:0 a.m.3 views

The vulnerability of the implementation of TCP/IP protocols in the Hyper-V virtualization system in the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the TCP/IP protocol implementation in the Hyper-V virtualization system in the Windows operating system is related to errors in packet processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.58898EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2021/06/15 12:0 a.m.458 views

ArubaOS-Switch DoS (ARUBA-PSA-2021-002)

A security vulnerability has been identified in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...

4.9CVSS5.3AI score0.00296EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.2 views

PT-2021-2702 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in processing objects in memory within the Overlay Filter component of Windows operating systems. This can allow an attacker to gain unauthorized access to...

5.5CVSS5.2AI score0.00806EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.2 views

The vulnerability of the DNS server service in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DNS server service in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.06769EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.4 views

The vulnerability of the ParserParseDocument() function in UPnP device sets allows a hacker to trigger a service failure.

The vulnerability of the ParserParseDocument function for UPnP devices is related to errors in processing XML entities. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.5CVSS7.3AI score0.01415EPSS
Exploits1References5Affected Software1
CNVD
CNVD
added 2021/03/29 12:0 a.m.8 views

Cisco IOx Application Denial of Service Vulnerability

Cisco Iox is the U.S. Cisco Cisco a combination of Cisco IOS and Linux OS for secure network connectivity and the development of IOT applications for secure development environment. The Cisco IOx Application Framework's Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829...

7.5CVSS6.8AI score0.01305EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.4 views

The vulnerability of the ldb_wildcard_compare function in the Samba networking software package, related to a number processing error, allows a hacker to trigger a service failure.

The vulnerability of the ldbwildcardcompare function in the Samba networking software package is related to a number processing error. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

5.3CVSS6.5AI score0.06754EPSS
Exploits0References10Affected Software3
Veracode
Veracode
added 2021/02/25 12:7 a.m.22 views

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists due to an error when processing a redirect with a conflicting Referrer-Policy. The browser adopts redirect's Referrer-Policy, which may result in disclosure of more information than intended by the original origin...

6.5CVSS1.8AI score0.01007EPSS
Exploits0References4Affected Software7
NVD
NVD
added 2021/02/09 5:15 p.m.26 views

CVE-2021-25141

A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...

4.9CVSS0.00296EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/02/09 4:11 p.m.27 views

CVE-2021-25141

A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...

5AI score0.00296EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.2 views

The vulnerability of the VMware Carbon Black Cloud for MacOS installer relates to memory object processing errors, which allows an attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the VMware Carbon Black Cloud for MacOS installer is related to errors in memory object processing. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

7.1CVSS5.5AI score0.00201EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder