Lucene search
+L

8433 matches found

ATTACKERKB
ATTACKERKB
added 2021/02/10 12:0 a.m.5 views

CVE-2021-20404

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins. IBM X-Force ID: 196078...

5.3CVSS5.5AI score0.009EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/02/10 12:0 a.m.15 views

IBM Security Verify Information Queue 授权问题漏洞

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. An elevation of privilege vulnerability exists in IBM Security Verify Information Queue. The vulnerability stems from...

7.5CVSS6.2AI score0.00752EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/02/10 12:0 a.m.12 views

IBM Security Verify Information Queue 信息泄露漏洞

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. An information disclosure vulnerability exists in IBM Security Verify Information Queue. A remote attacker could explo...

4CVSS5.8AI score0.00978EPSS
SaveExploits0References4
OSV
OSV
added 2021/02/03 5:15 p.m.9 views

CVE-2021-25274

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ Microsoft Message Queue and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon...

9.8CVSS8AI score0.36426EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/02/03 4:49 p.m.51 views

CVE-2021-25274

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ Microsoft Message Queue and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon...

10AI score0.36426EPSS
SaveExploits1References1
NCSC
NCSC
added 2021/02/03 12:0 a.m.6 views

Vulnerability fixed in IBM MQ

A vulnerability has been fixed in IBM MQ. The vulnerability allows a remote malicious person to execute arbitrary code. execute. IBM has released updates to fix the vulnerability. More information can be found on the page below: https://www.ibm.com/support/pages/node/6408626...

10CVSS7.2AI score0.07791EPSS
SaveExploits0
OSV
OSV
added 2021/02/02 10:15 p.m.30 views

CVE-2021-21294

Http4s http4s-blaze-server is a minimal, idiomatic Scala interface for HTTP services. Http4s before versions 0.21.17, 0.22.0-M2, and 1.0.0-M14 have a vulnerability which can lead to a denial-of-service. Blaze-core, a library underlying http4s-blaze-server, accepts connections unboundedly on its...

7.5CVSS7.4AI score
SaveExploits0References3
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.9 views

Qualcomm WLAN HOST Resource Management Error Vulnerability

Qualcomm WLAN HOST is a Qualcomm Incorporated USA wireless LAN component used in Qualcomm products. A resource management error vulnerability exists in the Qualcomm WLAN HOST, which arises from the possibility that an entry in the hash table could be deleted before a frame is placed in the PE que...

10CVSS7.3AI score0.00806EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/27 12:0 a.m.13 views

IBM MQ 代码问题漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. A remote code execution vulnerability exists in IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD, which is caused ...

10CVSS8.1AI score0.07791EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.12 views

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. rust mayqueue crate through 2020-11-10 A security vulnerability exists due to a limitation in the queue's lack of send feature or synchronization feature, which could be exploited by an attacker to cause a memor...

5.9CVSS6.2AI score0.01112EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/01/25 12:0 a.m.78 views

IBM MQ 7.5 <= 7.5.0.8 / 8.0 <= 8.0.0.6 / 9.0 <= 9.0.0.1 LTS / 9.0.1 <= 9.0.3 CD (563791)

The version of IBM MQ Server running on the remote host is affected by a vulnerability. IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information. IBM X-Force ID: 126454. Note that Nessus has not tested for this issue...

7.1CVSS7AI score0.00292EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/01/22 12:0 a.m.4 views

IBM MQ Internet Pass-Thru Denial of Service Vulnerability

IBM MQ Internet Pass-Thru is an American IBM product used to support the realization of messaging between remote sites on the Internet. The product is an extended functionality component of IBM MQ that acts as a protocol channel or proxy for establishing protocols during interactions, making it...

7.5CVSS6.8AI score0.01469EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/01/19 12:0 a.m.14 views

The vulnerability of the Windows operating system’s print queue dispatcher service allows a hacker to escalate their privileges.

The vulnerability of the Windows operating system’s print queue dispatcher is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00852EPSS
SaveExploits0References3
OSV
OSV
added 2020/12/31 9:15 a.m.9 views

CVE-2020-35900

An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A popback call may lead to a use-after-free...

5.5CVSS6.1AI score0.00425EPSS
SaveExploits1References1
NVD
NVD
added 2020/12/31 9:15 a.m.21 views

CVE-2020-35900

An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A popback call may lead to a use-after-free...

5.5CVSS5.4AI score0.00425EPSS
SaveExploits1References1
Prion
Prion
added 2020/12/31 9:15 a.m.20 views

Design/Logic Flaw

An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A popback call may lead to a use-after-free...

2.1CVSS5.4AI score0.00425EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/12/31 8:22 a.m.30 views

CVE-2020-35900

An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A popback call may lead to a use-after-free...

5.4AI score0.00425EPSS
SaveExploits1References1
CVE
CVE
added 2020/12/31 8:22 a.m.59 views

CVE-2020-35900

CVE-2020-35900 affects the Rust array-queue crate (pop_back) and may cause a use-after-free due to incorrect indexing in the pop_back path. Multiple connected advisories (RUSTSEC-2020-0047, GHSA-75CQ-G75G-RXFF, OSV/RUSTSEC mirrors) describe the same issue. The available documents do not specify a...

5.5CVSS5.3AI score0.00425EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2020/12/31 12:0 a.m.11 views

Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. array-queue crate through 2020-09-26 for Rust A security vulnerability exists that stems from a popback call that could lead to use-after-free...

5.5CVSS5.8AI score0.00425EPSS
SaveExploits1References2
RustSec
RustSec
added 2020/12/25 12:0 p.m.19 views

Queues allow non-Send types to be sent to other threads, allowing data races

Affected versions of this crate unconditionally implemented Send for types used in queue implementations InnerSend, InnerRecv, FutInnerSend, FutInnerRecv. This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior...

8.1CVSS3.6AI score0.01098EPSS
SaveExploits1
Rows per page
Query Builder