Lucene search
+L

5592 matches found

OSV
OSV
•added 2020/03/18 1:15 a.m.•18 views

CVE-2020-8470

Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability...

7.5CVSS7.1AI score0.04584EPSS
SaveExploits0References4
OSV
OSV
•added 2020/03/18 1:15 a.m.•8 views

CVE-2020-8468

Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication...

8.8CVSS7.3AI score0.06165EPSS
SaveExploits0References5
OSV
OSV
•added 2020/03/18 1:15 a.m.•18 views

CVE-2020-8599

Trend Micro Apex One 2019 and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability...

9.8CVSS7.4AI score0.11858EPSS
SaveExploits0References3
OSV
OSV
•added 2020/03/18 1:15 a.m.•13 views

CVE-2020-8598

Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installations with SYSTEM level privileges. Authentication is not required to exploit thi...

9.8CVSS7.6AI score0.1324EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2020/03/18 1:15 a.m.•20 views

CVE-2020-8470

Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability...

9.4CVSS7.4AI score0.04584EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2020/03/18 1:15 a.m.•10 views

CVE-2020-8598

Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installations with SYSTEM level privileges. Authentication is not required to exploit thi...

10CVSS9.1AI score0.1324EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2020/03/14 2:07 a.m.•14 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

SMBGhost Advanced scanner for CVE-2020-0796 - SMBv3 RCE using...

10CVSS8AI score0.9981EPSS
SaveExploits126
Microsoft KB
Microsoft KB
•added 2020/03/10 7:00 a.m.•66 views

Internet Explorer help

None None...

7.6CVSS7.4AI score0.08733EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/03/09 6:11 p.m.•40 views

CVE-2011-3269

Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut...

7.2AI score0.01103EPSS
SaveExploits0References1
CVE
CVE
•added 2020/03/09 6:11 p.m.•103 views

CVE-2011-3269

CVE-2011-3269 affects Lexmark X, W, T, E, C, 6500e, and 25xxN printers. The issue is a information disclosure via a hidden email address in a Scan To Email shortcut, enabling attackers to obtain sensitive information. The connected documents corroborate the affected models and the disclosure vect...

7.5CVSS7.2AI score0.01103EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/03/09 12:00 a.m.•3 views

PT-2020-7117

Name of the Vulnerable Software and Affected Versions Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 Description The issue allows attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut. Recommendations For Lexmark X, W, T, E, C, 6500e,...

7.5CVSS0.01103EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/09 12:00 a.m.•5 views

CVE-2011-3269: Exposure of Sensitive Information to an Unauthorized Actor

Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut...

7.5CVSS7.3AI score0.01103EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/03/09 12:00 a.m.•18 views

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-16504)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in the 'uncompressscanline' function of the igcore19d.dll library in Accusoft ImageGear version 19.5.0. A remote attacker could exploit this vulnerability to execut...

9.8CVSS7.6AI score0.03687EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/02/20 8:45 p.m.•46 views

CVE-2020-6977

A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE...

6.6AI score0.00428EPSS
SaveExploits0References1
NVD
NVD
•added 2020/02/17 7:15 p.m.•30 views

CVE-2019-20474

An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role read-only access to use and abuse it. One of the abuses allows performing network and port scan...

4.3CVSS4.7AI score0.01441EPSS
SaveExploits0References2
Prion
Prion
•added 2020/02/17 7:15 p.m.•25 views

Authorization

An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role read-only access to use and abuse it. One of the abuses allows performing network and port scan...

4CVSS4.8AI score0.01441EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/02/17 12:00 a.m.•5 views

PT-2020-10461

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Remote Access Plus version 10.0.447 Description An issue was discovered that suffers from an authorization issue, allowing a user with the Guest role to perform certain actions. This issue can be abused to perform network and...

4.3CVSS0.01441EPSS
SaveExploits0References4
OSV
OSV
•added 2020/02/11 9:15 p.m.•14 views

CVE-2020-6063

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

8.8CVSS6.1AI score0.03687EPSS
SaveExploits1References1
OSV
OSV
•added 2020/02/11 9:15 p.m.•17 views

CVE-2020-6064

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

8.8CVSS7.6AI score0.03687EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/02/11 12:00 a.m.•4 views

PT-2020-18902

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.5.0 Description An out-of-bounds write issue exists in the uncompress scan line function of the igcore19d.dll library. This can be triggered by a specially crafted PCX file, potentially leading to remote code...

9.8CVSS0.03687EPSS
SaveExploits1References3
Rows per page
Query Builder