Lucene search
+L

7586 matches found

NVD
NVD
added 2021/03/15 5:15 a.m.29 views

CVE-2021-28375

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

7.8CVSS0.00305EPSS
SaveExploits0References6
OSV
OSV
added 2021/03/15 5:15 a.m.13 views

CVE-2021-28375

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

7.8CVSS8.2AI score
SaveExploits0References6
Prion
Prion
added 2021/03/15 5:15 a.m.42 views

Sql injection

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

7.2CVSS7.1AI score0.00305EPSS
SaveExploits0References6Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/03/15 5:15 a.m.5 views

CVE-2021-28375

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

7.8CVSS6.2AI score0.00305EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
added 2021/03/15 5:15 a.m.47 views

CVE-2021-28375

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

7.8CVSS6.7AI score0.00305EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2021/03/15 4:51 a.m.33 views

CVE-2021-28375

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

8AI score0.00305EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2021/03/15 4:51 a.m.48 views

CVE-2021-28375

An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308...

7.8CVSS6.7AI score0.00305EPSS
SaveExploits0
zdt
zdt
added 2021/03/13 12:00 a.m.132 views

Apache OFBiz XML-RPC Java Deserialization Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache OFBiz XML-RPC Java Deserialization', 'Description' = %q This module exploits a Java deserialization vulnerability in Apache OFBiz's...

6.1CVSS6.6AI score0.98926EPSS
SaveExploits15
OSV
OSV
added 2021/03/12 9:33 p.m.60 views

GHSA-G2FG-MR77-6VRM Uncontrolled Resource Consumption in Apache Thrift

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service...

7.5CVSS7.2AI score0.06779EPSS
SaveExploits0References111
Github Security Blog
Github Security Blog
added 2021/03/12 9:33 p.m.81 views

Uncontrolled Resource Consumption in Apache Thrift

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service...

7.5CVSS2.8AI score0.06779EPSS
SaveExploits0References111Affected Software1
Packet Storm
Packet Storm
added 2021/03/12 12:00 a.m.1173 views

Apache OFBiz XML-RPC Java Deserialization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache OFBiz XML-RPC Java Deserialization', 'Description' = %q This module exploits a Java deserialization vulnerability in Apache OFBiz's...

4.3CVSS0.1AI score0.98926EPSS
SaveExploits15
Tenable Nessus
Tenable Nessus
added 2021/03/12 12:00 a.m.46 views

Amazon Linux 2 : p11-kit (ALAS-2021-1601)

The version of p11-kit installed on the remote host is prior to 0.23.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1601 advisory. An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array...

7.5CVSS7.1AI score0.03486EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2021/03/12 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1625)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.2AI score0.99512EPSS
SaveExploits76References4
OpenVAS
OpenVAS
added 2021/03/12 12:00 a.m.21 views

Huawei EulerOS: Security Advisory for p11-kit (EulerOS-SA-2021-1620)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.03486EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/12 12:00 a.m.31 views

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1635)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.99512EPSS
SaveExploits76References4
Tenable Nessus
Tenable Nessus
added 2021/03/11 12:00 a.m.29 views

EulerOS Virtualization 2.9.0 : p11-kit (EulerOS-SA-2021-1636)

According to the versions of the p11-kit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array...

7.5CVSS7.1AI score0.03486EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/03/11 12:00 a.m.41 views

EulerOS Virtualization 2.9.0 : samba (EulerOS-SA-2021-1635)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, whi...

10CVSS7.5AI score0.99512EPSS
SaveExploits76References5
OSV
OSV
added 2021/03/10 3:15 p.m.9 views

CVE-2020-5016

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When application security is disabled and JAX-RPC applications are present, an attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to vi...

6.5CVSS6.5AI score0.02252EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/10 3:15 p.m.17 views

CVE-2020-5016

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When application security is disabled and JAX-RPC applications are present, an attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to vi...

6.5CVSS0.02252EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/10 3:15 p.m.16 views

Design/Logic Flaw

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When application security is disabled and JAX-RPC applications are present, an attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to vi...

3.5CVSS6.6AI score0.02252EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder