Lucene search
+L

5469 matches found

Cvelist
Cvelist
added 2022/01/04 3:10 p.m.28 views

CVE-2021-45912

An unauthenticated Named Pipe channel in Controlup Real-Time Agent cuAgent.exe before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method...

7.9AI score0.00296EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/04 2:29 p.m.38 views

CVE-2021-45913

CVE-2021-45913 affects ControlUp Real-Time Agent (cuAgent.exe) prior to version 8.2.5. Root cause: a hardcoded key in the agent creates a potential weakness that can be exploited to execute operating system commands via a WCF channel. Impact described as allowing an attacker to run OS commands th...

9CVSS6.9AI score0.01008EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/04 2:29 p.m.28 views

CVE-2021-45913

A hardcoded key in ControlUp Real-Time Agent cuAgent.exe before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel...

7.1AI score0.01008EPSS
SaveExploits0References2
Check Point Advisories
Check Point Advisories
added 2022/01/04 12:0 a.m.5 views

Updating IPS Blade with the Latest Dynamic Protections

IPS dynamic updates are available to customers who have purchased the IPS subscription service. Customers with valid subscription license can choose the attacks to defend against, read detailed information about the attack, configure parameters for each attack defense, including logging options,...

1.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.10 views

PT-2025-37624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the rtc subsystem, specifically within the msc313 rtc probe function. A function prototype mismatch exists when calling clk disable unprepare, which...

5.5CVSS6AI score0.00143EPSS
SaveExploits0References20
OSV
OSV
added 2021/12/30 10:15 p.m.2 views

DEBIAN-CVE-2021-4185

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.3AI score0.03879EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.8 views

The vulnerability of the WebRTC extension of the Microsoft Edge browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Fedora operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of information...

8.8CVSS7.4AI score0.02798EPSS
SaveExploits0References8Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.10 views

The vulnerability in the implementation of the WebRTC technology in Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the WebRTC technology implementation in Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of information...

8.8CVSS7.4AI score0.02768EPSS
SaveExploits0References7Affected Software7
OSV
OSV
added 2021/12/27 6:15 p.m.5 views

ALPINE-CVE-2021-43845

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...

9.1CVSS6.9AI score0.03722EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/23 1:15 a.m.2 views

DEBIAN-CVE-2021-4079

Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packets...

8.8CVSS8.6AI score0.00846EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/22 6:15 p.m.4 views

UBUNTU-CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

7.3CVSS7.3AI score0.02192EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/12/22 12:0 a.m.7 views

PJSIP 缓冲区错误漏洞

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. PJSIP suffers from a buffer error vulnerability that arises from the fact that if an incoming "RTCP BYE" message contains a reason...

7.5CVSS7.7AI score0.02192EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2021/12/22 12:0 a.m.9 views

PT-2021-6171 · Pjsip +3 · Pjsip +3

Name of the Vulnerable Software and Affected Versions: PJSIP versions prior to the fixed version Description: The issue is related to a buffer overflow in the PJSIP library when handling the length of RTCP BYE messages. This can be exploited by a remote attacker to execute arbitrary code. The...

9.8CVSS8.8AI score0.16406EPSS
SaveExploits2References110
OSV
OSV
added 2021/12/21 6:15 p.m.4 views

UBUNTU-CVE-2021-45292

The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...

5.5CVSS7.3AI score0.00622EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2021/12/21 9:33 a.m.54 views

Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

4.7CVSS6.7AI score0.00216EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/21 9:15 a.m.11 views

CVE-2021-24750

The WP Visitor Statistics Real Time Traffic WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks...

8.8CVSS5.8AI score0.38298EPSS
SaveExploits5References3
OSV
OSV
added 2021/12/21 9:12 a.m.33 views

RLSA-2021:5241 Moderate: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: In Overlayfs missing a check for a negative dentry before calling vfsrename CVE-2021-20321 For more details about the security...

5.5CVSS6.7AI score0.00216EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2021/12/21 9:12 a.m.43 views

kernel-rt security and bug fix update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

4.7CVSS0.3AI score0.00216EPSS
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
added 2021/12/20 12:0 a.m.3 views

HPESBGN04224 rev.1 - HPE Real Time Management System (RTMS), Apache Log4j 2 Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Real Time Management System RTMS - Prior to RTMS 3.00.72.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

10CVSS6.8AI score0.99999EPSS
SaveExploits363
CNVD
CNVD
added 2021/12/19 12:0 a.m.53 views

Delta Electronics DIAEnergie .NET Request.QueryString Cross-Site Scripting Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A cross-site...

7.5CVSS2.1AI score0.00603EPSS
SaveExploits0References1
Rows per page
Query Builder