Lucene search
+L

1246 matches found

GithubExploit
GithubExploit
added 2022/10/18 6:31 a.m.644 views

Exploit for CVE-2022-27502

RealVNC server up to 6.9.0 DLL Hijacking Exploit CVE-2022-275...

7.8CVSS7.8AI score0.0066EPSS
SaveExploits1
Openbugbounty
Openbugbounty
added 2022/10/16 9:40 p.m.12 views

repair-solutions.nl Cross Site Scripting vulnerability OBB-3000673

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
OSV
OSV
added 2022/09/30 6:15 p.m.6 views

CVE-2022-41975

RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI installer Repair mode...

7.8CVSS5.4AI score0.00177EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/30 6:15 p.m.22 views

CVE-2022-41975

RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI installer Repair mode...

7.8CVSS0.00177EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/30 6:15 p.m.22 views

Privilege escalation

RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI installer Repair mode...

4.3CVSS7.8AI score0.00177EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2022/09/30 12:00 a.m.8 views

RealVNC VNC Server 安全漏洞

RealVNC VNC Server is a VNC server for remote access software from RealVNC UK. A security vulnerability exists in RealVNC VNC Server versions prior to 6.11.0 and VNC Viewer versions prior to 6.22.826. An attacker has exploited the vulnerability to perform a local elevation of privilege via MSI...

7.8CVSS7.5AI score0.00177EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 3:29 a.m.37 views

Security Bulletin: TADDM Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.4AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.67 views

Security Bulletin: IBM Sterling Control Center Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.6AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.46 views

Security Bulletin: Informix JDBC Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the documentation which injects...

4.3CVSS7.6AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.31 views

Security Bulletin: IBM Content Classification Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract The Java API documentation contains a frame injection vulnerability. This is a potential issue only if the Java API documentation that is shipped with the product is hosted on a public network. Content VULNERABILITY DETAILS DESCRIPTION: HTML documentation generated by the Javadoc tool...

4.3CVSS7.6AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.18 views

Security Bulletin: WebSphere Dashboard Framework Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS CVEID: CVE-2013-1571 DESCRIPTION HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.3AI score0.66817EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.20 views

Security Bulletin: IBM Content Analytics with Enterprise Search and IBM OmniFind Enterprise Edition Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract The Java API documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the documentation that...

4.3CVSS7.5AI score0.66817EPSS
SaveExploits1Affected Software2
OSV
OSV
added 2022/09/13 7:15 p.m.8 views

CVE-2022-34100

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

8.8CVSS5.8AI score0.01073EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/09/13 7:15 p.m.5 views

CVE-2022-34100

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

8.8CVSS5.9AI score0.01073EPSS
SaveExploits0References3
Prion
Prion
added 2022/09/13 7:15 p.m.22 views

Design/Logic Flaw

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

6.5CVSS8.7AI score0.01073EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/13 6:11 p.m.41 views

CVE-2022-34100

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

9AI score0.01073EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/13 12:00 a.m.9 views

Crestron AirMedia 安全漏洞

Crestron AirMedia is Crestron's unlimited sharing platform for laptops, PCs, smartphones or tablets. A security vulnerability exists in Crestron AirMedia Windows Application version 4.3.1.39. An attacker could exploit the vulnerability to temporarily store a file structure and change it during a...

8.8CVSS8AI score0.01073EPSS
SaveExploits0References3
OSV
OSV
added 2022/09/07 2:15 p.m.9 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8CVSS5.8AI score0.00498EPSS
SaveExploits2References2
NVD
NVD
added 2022/09/07 2:15 p.m.38 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8CVSS0.00498EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/09/07 2:15 p.m.4 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8CVSS7.1AI score0.00498EPSS
SaveExploits2References3
Rows per page
Query Builder