Lucene search
+L

4813 matches found

CNVD
CNVD
•added 2021/07/14 12:00 a.m.•21 views

Directory Traversal Vulnerability in Dynamic Ring Monitoring Backend System of Guangzhou Kingston Electronic Technology Co.

Guangzhou Kingston Electronic Technology Co., Ltd. is a high-tech company integrating R&D, production and sales. A directory traversal vulnerability exists in the back-end system of Guangzhou Kingston Electronic Technology Co. An attacker can exploit this vulnerability to obtain sensitive...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/07/01 12:00 a.m.•38 views

Oracle Linux 8 : microcode_ctl (ELSA-2021-2308)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2308 advisory. 4:20210216-1.20210525.0.1 - add support for UEK6 kernels - remove no longer appropriate caveats for 06-2d-07 and 06-55-04 4:20210216-1.20210525.1 -...

8.8CVSS7.1AI score0.00472EPSS
SaveExploits0References5
Microsoft KB
Microsoft KB
•added 2021/06/30 12:00 a.m.•21 views

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB5004873)

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB5004873 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...

6.7AI score
SaveExploits0
OSV
OSV
•added 2021/06/29 6:15 p.m.•15 views

CVE-2021-23275

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfi...

7.8CVSS5.8AI score0.00219EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/29 5:15 p.m.•69 views

CVE-2021-28830

The CVE-2021-28830 issue affects TIBCO Spotfire Server and related TIBCO Runtime for R components, where a local, low-privilege attacker with Windows access could abuse a component that searches for run-time artifacts outside the installation hierarchy to execute malicious software with elevated ...

8.8CVSS7.8AI score0.00251EPSS
SaveExploits0References2Affected Software4
CVE
CVE
•added 2021/06/29 5:15 p.m.•72 views

CVE-2021-23275

CVE-2021-23275 concerns a Windows Installation component in TIBCO products (TIBCO Enterprise Runtime for R – Server Edition, Spotfire Server/Analytics Platform for AWS Marketplace, Spotfire Statistics Services, and Spotfire Server components). The vulnerability stems from a lack of access restric...

8.8CVSS7.7AI score0.00219EPSS
SaveExploits0References2Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/29 12:00 a.m.•6 views

CVE-2021-23275: Incorrect Permission Assignment for Critical Resource

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfi...

8.8CVSS6.1AI score0.00219EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/29 12:00 a.m.•15 views

多款TIBCO Software产品访问控制错误漏洞

Tibco Software TIBCO Spotfire Server and TIBCO Software Enterprise Runtime for R-Server Edition are both products of Tibco Software, Inc. of the U.S.A. TIBCO Spotfire Server is a suite of data analysis and mining tools based on TIBCO Spotfire that provide an integrated platform for organizations ...

8.8CVSS7.5AI score0.00219EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/29 12:00 a.m.•5 views

CVE-2021-28830: Undefined Security Weakness

The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace...

8.8CVSS6.1AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/06/28 12:00 a.m.•13 views

SICK Visionary-S CX 加密问题漏洞

SICK Visionary-S CX is a 3D vision sensor from SICK, Germany. It provides direct output of color and depth values via Ethernet. The SICK Visionary-S CX has a security vulnerability in versions prior to 5.21.2.29154R, which can be exploited by an attacker with a weak password to more easily...

5.3CVSS5.6AI score0.00264EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/17 12:00 a.m.•6 views

CVE-2021-0143: Incorrect Default Permissions

Improper permissions in the installer for the IntelR Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.9AI score0.00215EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/06/17 12:00 a.m.•28 views

Unauthorized Access Vulnerability in AXIS Q7424-R Video Encoder

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS Q7424-R Video Encoder, which can be exploited by attackers to obtain sensitive information...

6.8AI score
SaveExploits0
Veracode
Veracode
•added 2021/06/12 6:22 p.m.•25 views

Privilege Escalation

intel-microcode:sid is vulnerable to privilege escalation. An incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalated privileges...

4.8CVSS4.1AI score0.00643EPSS
SaveExploits2References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2021/06/12 12:00 a.m.•77 views

SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2021:1932-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1932-1 advisory. - Updated to Intel CPU Microcode 20210525 release. - CVE-2020-24513: A domain bypass transient execution vulnerability was discover...

8.8CVSS6.8AI score0.00472EPSS
SaveExploits0References13
NVD
NVD
•added 2021/06/11 4:15 p.m.•38 views

CVE-2021-20591

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules R00/01/02CPU all versions, R04/08/16/32/120ENCPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions allows a remote unauthenticated...

7.8CVSS0.01497EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/06/11 4:15 p.m.•9 views

CVE-2021-20591

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules R00/01/02CPU all versions, R04/08/16/32/120ENCPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions allows a remote unauthenticated...

7.8CVSS7.3AI score0.01497EPSS
SaveExploits0References3
Prion
Prion
•added 2021/06/11 4:15 p.m.•30 views

Race condition

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules R00/01/02CPU all versions, R04/08/16/32/120ENCPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions allows a remote unauthenticated...

7.8CVSS7.4AI score0.01497EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/06/11 3:52 p.m.•49 views

CVE-2021-20591

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules R00/01/02CPU all versions, R04/08/16/32/120ENCPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions allows a remote unauthenticated...

7.6AI score0.01497EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/11 3:52 p.m.•74 views

CVE-2021-20591

CVE-2021-20591 affects Mitsubishi Electric MELSEC iQ-R Series CPU modules (R00/01/02CPU all versions; R04/08/16/32/120(EN)CPU all versions; R08/16/32/120SFCPU all versions; R08/16/32/120PCPU all versions; R08/16/32/120PSFCPU all versions). The vulnerability is an Uncontrolled Resource Consumption...

7.8CVSS7.4AI score0.01497EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2021/06/11 3:15 p.m.•11 views

CVE-2021-25415

Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writable...

5.5CVSS6.1AI score0.00149EPSS
SaveExploits0References1
Rows per page
Query Builder