Lucene search
+L

2168 matches found

CNNVD
CNNVD
•added 2022/06/17 12:00 a.m.•12 views

BitTorrent uTorrent 安全漏洞

BitTorrent uTorrent is a suite of BitTorrent client software written in C++ by the American company BitTorrent. A security vulnerability exists in BitTorrent uTorrent that stems from some unknown functionality of the component JSON RPC server. A remote attacker could exploit the vulnerability to...

8.8CVSS7.8AI score0.01024EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/06/17 12:00 a.m.•13 views

BitTorrent uTorrent 安全漏洞

BitTorrent uTorrent is a suite of BitTorrent client software written in C++ by the American company BitTorrent. BitTorrent uTorrent suffers from a security vulnerability that stems from certain unknown handling of component guest accounts. A remote attacker could exploit the vulnerability to caus...

8.8CVSS7.9AI score0.00978EPSS
SaveExploits1References4
NVD
NVD
•added 2022/06/15 2:15 p.m.•25 views

CVE-2022-20145

In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for...

10CVSS0.07037EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/06/15 2:15 p.m.•8 views

CVE-2022-20145

In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for...

10CVSS7.4AI score0.07037EPSS
SaveExploits0References2
OSV
OSV
•added 2022/06/15 2:15 p.m.•8 views

CVE-2022-20145

In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for...

9.8CVSS5.9AI score0.07037EPSS
SaveExploits0References1
CVE
CVE
•added 2022/06/15 1:02 p.m.•212 views

CVE-2022-20145

Android CVE-2022-20145 exposes VPN credentials via a downgrade in Vpn.java: startLegacyVpnPrivileged in Android 11, enabling remote privilege escalation when connected to a malicious Wi‑Fi AP and requiring no user interaction. Affected product: Android (Android-11) framework component; vulnerabil...

10CVSS9.1AI score0.07037EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/06/15 12:00 a.m.•15 views

Microsoft Edge’s vulnerability, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

8.3CVSS7.4AI score0.0185EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/06/11 10:15 a.m.•11 views

CVE-2017-20037

A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument c leads to privilege escalation. The attack can be launched remotely...

8.8CVSS5.5AI score0.00624EPSS
SaveExploits0References2
OSV
OSV
•added 2022/06/11 10:15 a.m.•15 views

CVE-2017-20038

A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this issue is some unknown functionality of the file cardscandecoder.php. The manipulation of the argument No/door leads to privilege escalation. The attack may be launched remotely...

8.8CVSS5.6AI score0.00708EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/06/11 12:00 a.m.•19 views

SICUNET Access Controller 安全漏洞

SICUNET Access Controller is a browser-based access from SICUNET China that allows you to connect your panel to our cloud server. This allows you to access your panel without firewall settings. A security vulnerability exists in SICUNET Access Controller version 0.32-05z, which stems from a...

8.8CVSS8.1AI score0.00624EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/06/10 12:00 a.m.•16 views

Money Transfer Management System 安全漏洞

Money Transfer Management System is a remittance management system.An elevation of privilege vulnerability exists in Money Transfer Management System version 1.0. A remote attacker can exploit this vulnerability to gain elevated privileges to the Admin role via any URL...

8.8CVSS5.7AI score0.01438EPSS
SaveExploits1References3
OSV
OSV
•added 2022/06/09 11:15 p.m.•13 views

CVE-2017-20023

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects some unknown processing of the component Network Config. The manipulation leads to privilege escalation. The attack may be initiated remotely. Upgrading to version 3.5.3-86 is able to...

9.8CVSS5.3AI score0.00849EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/09 5:15 p.m.•23 views

CVE-2019-25067

A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

8.8CVSS8.9AI score
SaveExploits0References4
NVD
NVD
•added 2022/06/09 5:15 p.m.•35 views

CVE-2019-25067

A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

8.8CVSS0.02552EPSS
SaveExploits1References4
OSV
OSV
•added 2022/06/09 5:15 p.m.•6 views

CVE-2019-25068

A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely...

8.8CVSS7AI score0.00551EPSS
SaveExploits0References1
OSV
OSV
•added 2022/06/09 5:15 p.m.•74 views

DEBIAN-CVE-2019-25067

A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

8.8CVSS6.2AI score0.02552EPSS
SaveExploits1References1
Prion
Prion
•added 2022/06/09 5:15 p.m.•34 views

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

6.5CVSS8.8AI score0.02552EPSS
SaveExploits1References4Affected Software2
UbuntuCve
UbuntuCve
•added 2022/06/09 5:15 p.m.•42 views

CVE-2019-25067

A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

8.8CVSS6.3AI score0.02552EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2022/06/09 1:10 p.m.•72 views

CVE-2019-25067

A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

8.8CVSS6.8AI score0.02552EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2022/06/09 12:00 a.m.•15 views

The vulnerability of the Bluetooth driver for Microsoft Windows operating systems, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of the Windows operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

8.8CVSS7.2AI score0.00352EPSS
SaveExploits0References3
Rows per page
Query Builder