Lucene search
+L

224 matches found

RedhatCVE
RedhatCVE
•added 2021/03/01 6:15 a.m.•30 views

CVE-2021-27803

A flaw was found in the wpasupplicant, in the way it processes P2P Wi-Fi Direct provision discovery requests. This flaw allows an attacker who is within radio range of the device running P2P discovery to cause termination of the wpasupplicant process or potentially cause code execution. The highe...

7.5CVSS2.3AI score0.01228EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2021/02/26 11:15 p.m.•4 views

DEBIAN-CVE-2021-27803

A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range...

7.5CVSS8AI score0.01228EPSS
SaveExploits0References1
NVD
NVD
•added 2021/02/26 11:15 p.m.•47 views

CVE-2021-27803

A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range...

7.5CVSS0.01228EPSS
SaveExploits0References9
osv_ubuntu
osv_ubuntu
•added 2021/02/26 11:15 p.m.•21 views

UBUNTU-CVE-2021-27803

A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range...

7.5CVSS7.4AI score0.01228EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2021/02/26 10:11 p.m.•38 views

CVE-2021-27803

A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range...

7.5CVSS4.6AI score0.01228EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/02/25 12:00 a.m.•13 views

PT-2021-2346

Name of the Vulnerable Software and Affected Versions wpa supplicant versions prior to 2.10 Description A vulnerability in the p2p/p2p pd.c component of wpa supplicant is related to resource release errors. Exploitation of this issue could allow a remote attacker to cause a denial of service or...

9.8CVSS7.4AI score0.15193EPSS
SaveExploits5References121
Packet Storm
Packet Storm
•added 2021/01/27 12:00 a.m.•263 views

STVS ProVision 5.9.10 Cross Site Request Forgery

STVS ProVision 5.9.10 Cross-Site Request Forgery Add Admin Vendor: STVS SA Product web page: http://www.stvs.ch Platform: Ruby Affected version: 5.9.10 build 2885-3a8219a 5.9.9 build 2882-7c3b787 5.9.7 build 2871-a450938 5.9.1 build 2771-1bbed11 5.9.0 build 2701-6123026 5.8.6 build 2557-84726f7 5...

0.6AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2021/01/27 12:00 a.m.•269 views

STVS ProVision 5.9.10 File Disclosure

STVS ProVision 5.9.10 archive.rb Authenticated File Disclosure Vulnerability Vendor: STVS SA Product web page: http://www.stvs.ch Platform: Ruby Affected version: 5.9.10 build 2885-3a8219a 5.9.9 build 2882-7c3b787 5.9.7 build 2871-a450938 5.9.1 build 2771-1bbed11 5.9.0 build 2701-6123026 5.8.6...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2021/01/27 12:00 a.m.•314 views

STVS ProVision 5.9.10 - File Disclosure (Authenticated)

Exploit Title: STVS ProVision 5.9.10 - File Disclosure Authenticated Date: 19.01.2021 Exploit Author: LiquidWorm Vendor Homepage: http://www.stvs.ch STVS ProVision 5.9.10 archive.rb Authenticated File Disclosure Vulnerability Vendor: STVS SA Product web page: http://www.stvs.ch Platform: Ruby...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2021/01/27 12:00 a.m.•422 views

STVS ProVision 5.9.10 - Cross-Site Request Forgery (Add Admin)

Exploit Title: STVS ProVision 5.9.10 - Cross-Site Request Forgery Add Admin Date: 19.01.2021 Exploit Author: LiquidWorm Vendor Homepage: http://www.stvs.ch STVS ProVision 5.9.10 Cross-Site Request Forgery Add Admin Vendor: STVS SA Product web page: http://www.stvs.ch Platform: Ruby Affected...

5.3AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2021/01/26 12:00 a.m.•95 views

STVS ProVision 5.9.10 Authenticated Reflected Cross-Site Scripting

Summary STVS is a Swiss company specializing in development of software for digital video recording for surveillance cameras as well as the establishment of powerful and user-friendly IP video surveillance networks. Description Input passed to the POST parameter 'files' is not properly sanitised...

5.4CVSS6.1AI score0.00217EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2021/01/26 12:00 a.m.•76 views

STVS ProVision 5.9.10 (archive.rb) Authenticated File Disclosure Vulnerability

Summary STVS is a Swiss company specializing in development of software for digital video recording for surveillance cameras as well as the establishment of powerful and user-friendly IP video surveillance networks. Description The NVR software ProVision suffers from an authenticated arbitrary fi...

5.8AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2021/01/26 12:00 a.m.•61 views

STVS ProVision 5.9.10 Cross-Site Request Forgery (Add Admin)

Summary STVS is a Swiss company specializing in development of software for digital video recording for surveillance cameras as well as the establishment of powerful and user-friendly IP video surveillance networks. Description The application interface allows users to perform certain actions via...

5.8AI score
SaveExploits0
Citrix
Citrix
•added 2020/06/12 12:00 a.m.•15 views

Updating vCPU in Nutanix prov scheme via Powershell, new machines are not getting the new setting

Tried to decrease the number of cores per vCPU in a Nutanix machine catalog. However, the new machines did not have the desired change...

7AI score
SaveExploits0
NVD
NVD
•added 2020/05/06 1:15 p.m.•30 views

CVE-2020-2186

A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances...

4.3CVSS4.6AI score0.00636EPSS
SaveExploits0References2
Mend
Mend
•added 2020/05/06 12:45 p.m.•11 views

CVE-2020-2186

A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances...

5.3CVSS0.00636EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/06 12:00 a.m.•12 views

CVE-2020-2186: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances...

4.3CVSS5.5AI score0.00636EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/04/03 7:05 a.m.•52 views

CVE-2018-17954 crowbar provision leaks admin password to all nodes in cleartext

An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE...

9.3CVSS9.2AI score0.00318EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/11/21 3:15 p.m.•35 views

CVE-2019-16548

A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineClouddoProvision could be used to provision new agents...

8.8CVSS6.5AI score
SaveExploits0References2
NVD
NVD
•added 2019/11/21 3:15 p.m.•41 views

CVE-2019-16548

A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineClouddoProvision could be used to provision new agents...

8.8CVSS8.6AI score0.00691EPSS
SaveExploits0References2
Rows per page
Query Builder