Lucene search
+L

5884 matches found

BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.14 views

The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic, relates to reading data beyond the buffer in memory. This allows an attacker to gain unauthorized access to protected information.

The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.5CVSS6.1AI score0.02411EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/01/18 12:00 a.m.61 views

WordPress Simple Board Job plugin path traversal vulnerability

Wordpress Simple Board Job Plugin is a plugin from the WordPress Wordpress Foundation that provides job posting functionality job boards for Wordpress. A security vulnerability exists in WordPress Simple Board Job plugin 2.9.3 and earlier versions, which stems from a path traversal vulnerability ...

7.7CVSS6.9AI score0.30479EPSS
SaveExploits7References1
NVD
NVD
added 2021/01/14 4:15 p.m.31 views

CVE-2020-29018

A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive data via the redir parameter...

8.8CVSS8.5AI score0.02028EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/01/13 4:15 p.m.4 views

CVE-2021-21602

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks...

6.5CVSS6.5AI score0.02226EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2021/01/13 3:55 p.m.89 views

CVE-2021-21602

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks...

6.5CVSS7.1AI score0.02226EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/01/07 9:17 p.m.41 views

CVE-2020-13449

A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files...

7.4AI score0.04936EPSS
SaveExploits2References2
OSV
OSV
added 2021/01/07 12:00 p.m.20 views

RUSTSEC-2021-0091 Reading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv()` )

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

9.8CVSS9.4AI score0.01191EPSS
SaveExploits0References3
OSV
OSV
added 2021/01/06 9:15 p.m.14 views

CVE-2020-8274

Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code 'Code Injection' by allowing unauthenticated access to read data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to...

6.5CVSS6.9AI score0.02037EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/06 12:00 a.m.11 views

Fortinet FortiWeb 格式化字符串错误漏洞

FortiWeb is a Web Application Firewall WAF that protects hosted web applications from attacks targeting known and unknown vulnerabilities. A format string vulnerability exists in FortiWeb 6.3.0 - 6.3.5. A remote attacker can exploit this vulnerability to read the contents of memory and retrieve...

8.8CVSS7.3AI score0.02028EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/01/06 12:00 a.m.12 views

MiniCMS Directory Traversal Vulnerability (CNVD-2021-02038)

MiniCMS is a micro content management system designed for personal websites. A directory traversal vulnerability exists in pageedit.php in MiniCMS V1.10. A remote attacker can exploit this vulnerability to read arbitrary files via the state parameter...

7.5CVSS6.9AI score0.01972EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/05 9:15 p.m.7 views

CVE-2019-20483

An issue was discovered in Viki Vera 4.9.1.26180. An attacker could set a user's last name to an XSS Payload, and read another user's cookie and use that to login to the application...

5.4CVSS6.1AI score0.00538EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2021/01/05 2:41 p.m.141 views

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

CISCO CVE-2020-3452 Scanner & Exploiter It will scan the targ...

7.5CVSS7.9AI score0.99992EPSS
SaveExploits25
NVD
NVD
added 2020/12/31 10:15 a.m.31 views

CVE-2020-35861

An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys...

7.5CVSS7.4AI score0.0149EPSS
SaveExploits1References1
Prion
Prion
added 2020/12/31 10:15 a.m.16 views

Authentication flaw

An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys...

5CVSS7.4AI score0.0149EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2020/12/31 10:15 a.m.19 views

CVE-2020-35861

An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys...

7.5CVSS7.1AI score0.0149EPSS
SaveExploits1References3
CVE
CVE
added 2020/12/31 8:30 a.m.84 views

CVE-2020-35861

The CVE-2020-35861 issue affects the bumpalo crate for Rust, specifically before version 3.2.1. The realloc functionality can read unknown memory, potentially allowing attackers to read cryptographic keys. No exploit details are provided in the initial/connected documents beyond this description....

7.5CVSS7.3AI score0.0149EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2020/12/31 12:00 a.m.13 views

Rust Buffer Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in bumpalo crate before 3.2.1 for Rust, which stems from a realloc feature that allows reading of unknown memory. An attacker can exploit this vulnerability to potentially read...

7.5CVSS5.8AI score0.0149EPSS
SaveExploits1References2
OSV
OSV
added 2020/12/31 12:00 a.m.6 views

UBUNTU-CVE-2020-36332

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability...

7.5CVSS7.1AI score0.01966EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:00 a.m.11 views

The vulnerability of the Adobe Photoshop graphic editor lies in the ability to write beyond the buffer boundaries in memory, allowing attackers to access protected information.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

7.8CVSS5.9AI score0.04235EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
added 2020/12/15 12:00 a.m.24 views

Google Asylo Buffer Error Vulnerability

Google Asylo is a framework for developing trusted applications from Google Inc. in the United States. The software supports the creation of a trusted execution environment, including software isolation and hardware isolation. A security vulnerability exists in Asylo up to 0.6.0, which allows an...

5.5CVSS6.2AI score0.0013EPSS
SaveExploits0References2
Rows per page
Query Builder