Lucene search
+L

1508 matches found

Openbugbounty
Openbugbounty
•added 2020/05/23 9:16 a.m.•15 views

prostor22.rs Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1169621 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

0.6AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/05/19 7:53 a.m.•11 views

shop.glecher021.rs Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1165709 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/05/10 1:56 p.m.•10 views

rs-haier.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1158383 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

0.6AI score
SaveExploits0
CNVD
CNVD
•added 2020/04/15 12:00 a.m.•17 views

Unspecified Vulnerability in Zoom Call Recording

Zoom Call Recording is a scalable session recording management solution from Zoom USA. An unspecified vulnerability exists in Zoom Call Recording. The vulnerability can be exploited to elevate privileges to root by replacing the /opt/callrec/bin/rs binary with a malicious file and leveraging...

9CVSS6.9AI score0.01356EPSS
SaveExploits1References1
OSV
OSV
•added 2020/04/14 6:15 p.m.•16 views

CVE-2019-18822

A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account i.e., the account under which the program runs - by default, the callrec account to elevate privileges to root by abusing the [email protected]. The [email protected] starts the /opt/callrec/bin/rs binar...

8.8CVSS5.8AI score0.01356EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/04/14 12:00 a.m.•5 views

PT-2020-9987

Name of the Vulnerable Software and Affected Versions: ZOOM Call Recording version 6.3.1 Description: A privilege escalation issue allows the user account, which runs the program by default under the callrec account, to elevate privileges to root by abusing the [email protected]. This service...

9CVSS5.8AI score0.01356EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/14 12:00 a.m.•9 views

CVE-2019-18822: Improper Privilege Management

A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account i.e., the account under which the program runs - by default, the callrec account to elevate privileges to root by abusing the [email protected]. The [email protected] starts the /opt/callrec/bin/rs binar...

9CVSS7.8AI score0.01356EPSS
SaveExploits1References2
vulnersOsv
vulnersOsv
•added 2020/03/19 12:00 p.m.•8 views

llvm-alt (>=0.3.2, <=0.5.0), llvm-rs (>=0.1.0, <=0.2.1) potentially affected by CVE-2020-35860 via cbox (0.3.0)

cbox CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cbox and may be impacted: - llvm-alt =0.3.2, =0.1.0, =0.2.1 Source cves: CVE-2020-35860 Source advisory: OSV:RUSTSEC-2020-0005...

9.8CVSS8.5AI score0.01649EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2020/03/12 12:00 a.m.•20 views

The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a intruder to gain unauthorized access and intercept web sessions.

The vulnerability of Belden Hirschmann’s network switch web interfaces for models series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS is related to improper session management. Exploiting this vulnerability can allow an attacker to gain unauthorized access and intercept web sessions...

10CVSS7.6AI score0.01719EPSS
SaveExploits0References6
OSV
OSV
•added 2020/02/18 12:15 a.m.•12 views

CVE-2020-1882

Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180C185E6R3P3, earlier than 10.0.0.180C432E6R1P7, earlier than 10.0.0.180C636E5R2P3; HUAWEI Mate 20 RS versions earlier than 10.0.0.175C786E70R3P8; HUAWEI Mate 20 X versions earlier than 10.0.0.176C00E70R2P8; and Honor Magic2 versions...

4.6CVSS5.8AI score0.00214EPSS
SaveExploits0References1
NVD
NVD
•added 2020/02/18 12:15 a.m.•31 views

CVE-2020-1882

Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180C185E6R3P3, earlier than 10.0.0.180C432E6R1P7, earlier than 10.0.0.180C636E5R2P3; HUAWEI Mate 20 RS versions earlier than 10.0.0.175C786E70R3P8; HUAWEI Mate 20 X versions earlier than 10.0.0.176C00E70R2P8; and Honor Magic2 versions...

4.6CVSS4.8AI score0.00214EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/05 12:00 a.m.•8 views

CVE-2015-5627: Out-of-bounds Write

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...

10CVSS8.5AI score0.04173EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/05 12:00 a.m.•8 views

CVE-2015-5628: Out-of-bounds Write

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...

10CVSS9AI score0.06722EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/02/05 12:00 a.m.•8 views

PT-2020-3889

Name of the Vulnerable Software and Affected Versions: Yokogawa CENTUM CS 1000 versions R3.08.70 and earlier Yokogawa CENTUM CS 3000 versions R3.09.50 and earlier Yokogawa CENTUM CS 3000 Entry versions R3.09.50 and earlier Yokogawa CENTUM VP versions R5.04.20 and earlier Yokogawa CENTUM VP Entry...

10CVSS0.04173EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/05 12:00 a.m.•5 views

CVE-2015-5626: Out-of-bounds Write

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...

10CVSS8.5AI score0.04173EPSS
SaveExploits0References2
OSV
OSV
•added 2020/01/23 12:15 a.m.•23 views

CVE-2019-20399

A timing vulnerability in the Scalar::checkoverflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack...

5.9CVSS5.4AI score
SaveExploits0References1
NVD
NVD
•added 2020/01/23 12:15 a.m.•26 views

CVE-2019-20399

A timing vulnerability in the Scalar::checkoverflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack...

5.9CVSS5.4AI score0.00881EPSS
SaveExploits0References1
Prion
Prion
•added 2020/01/23 12:15 a.m.•20 views

Information disclosure

A timing vulnerability in the Scalar::checkoverflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack...

4.3CVSS5.4AI score0.00881EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
•added 2020/01/23 12:15 a.m.•62 views

CVE-2019-20399

A timing vulnerability in the Scalar::checkoverflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack...

5.9CVSS4.4AI score0.00881EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/01/22 11:12 p.m.•33 views

CVE-2019-20399

A timing vulnerability in the Scalar::checkoverflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack...

5.3AI score0.00881EPSS
SaveExploits0References1
Rows per page
Query Builder