Lucene search
K

684 matches found

Cvelist
Cvelist
added 2021/12/09 9:15 a.m.16 views

CVE-2021-43065

A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data...

7.8CVSS8AI score0.00426EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.3 views

The vulnerability of Intel BIOS/UEFI processor microprogramming software allows attackers to enhance their privileges and gain unauthorized access to protected information.

The vulnerability of Intel BIOS/UEFI processor microprogramming systems is related to insufficient protection of system data. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to protected information...

7.1CVSS6.6AI score0.00407EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2021/11/19 12:0 a.m.3 views

Greenplum Database 路径遍历漏洞

Greenplum Database is an advanced , full-featured open source data warehouse based on PostgreSql . It is used to analyze massively parallel PostgreSql. A security vulnerability exists in Greenplum Database versions prior to 5.28.6 and 6.14.0, which stems from a lack of restriction and filtering o...

9.1CVSS8.1AI score0.02354EPSS
Exploits0References2
NVD
NVD
added 2021/11/17 7:15 p.m.6 views

CVE-2021-43551

A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System data and other dat...

6.5CVSS0.0059EPSS
Exploits0References1
Prion
Prion
added 2021/11/17 7:15 p.m.11 views

Information disclosure

A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System data and other dat...

3.5CVSS5.4AI score0.0059EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/17 6:19 p.m.12 views

CVE-2021-43551 OSIsoft PI Vision

A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System data and other dat...

6.5CVSS6.6AI score0.0059EPSS
Exploits0References1
NCSC
NCSC
added 2021/11/11 12:0 a.m.2 views

Vulnerabilities fixed in Kibana

Vulnerabilities have been fixed in Kibana. The vulnerabilities allow a malicious person the opportunity to gain access to system data. Updates have been released to fix the vulnerabilities in Kibana 7.15.2 For more information, see: https://discuss.elastic.co/t/kibana-7-15-2-security-update/28892...

4.3CVSS7.2AI score0.00697EPSS
Exploits0
NCSC
NCSC
added 2021/11/05 12:0 a.m.50 views

Vulnerabilities fixed in GitLab

Vulnerabilities have been fixed in GitLab. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication Remote code execution User rights Access to system data GitLab categorize...

8.7CVSS7.5AI score0.60729EPSS
Exploits2
NCSC
NCSC
added 2021/11/03 12:0 a.m.2 views

Vulnerability fixed in Linux kernel

A vulnerability has been fixed in Linux kernel. The vulnerability allows a remote malicious person to obtain system data obtain. Updates have been released to fix the vulnerability. More information can be found on the page below: https://github.com/torvalds/linux/commit...

9.8CVSS8.7AI score0.57853EPSS
Exploits2
NCSC
NCSC
added 2021/11/02 12:0 a.m.54 views

Vulnerabilities fixed in Wind River Linux

Vulnerabilities have been fixed in Wind River Linux. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root rights Remote...

10CVSS7.4AI score0.88497EPSS
Exploits90
OSV
OSV
added 2021/10/30 11:3 a.m.2 views

OESA-2021-1412 python-psutil security update

psutil process and system utilities is a cross-platform library for retrieving information on running processes and system utilization CPU, memory, disks, network, sensors in Python. It is useful mainly for system monitoring, profiling and limiting process resources and management of running...

7.5CVSS9AI score0.03522EPSS
Exploits0References2
NCSC
NCSC
added 2021/10/20 12:0 a.m.4 views

Vulnerabilities fixed in Oracle Virtualization products

Oracle has fixed vulnerabilities in Secure Global Desktop and VirtualBox. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the following categories of damage: Denial-of-Service DoS Gain access to VM Accessing sensitive data Accessing system data...

7.8CVSS9.1AI score0.75353EPSS
Exploits1
NCSC
NCSC
added 2021/10/20 12:0 a.m.5 views

Vulnerabilities fixed in Oracle Java SE and GraalVM

Oracle has fixed vulnerabilities in Java SE and GraalVM Enterprise Edition. The vulnerabilities allow a malicious potentially able to launch attacks that result in the following categories of damage: Circumvention of security measure. Denial-of-Service DoS. Remote code execution User Rights Acces...

8.6CVSS9.3AI score0.32362EPSS
Exploits6
NCSC
NCSC
added 2021/10/20 12:0 a.m.7 views

Vulnerabilities fixed in Oracle Peoplesoft products

Oracle has fixed vulnerabilities in the following PeopleSoft products: PeopleSoft Enterprise PT PeopleTools PeopleSoft Enterprise CS SA Integration Pack PeopleSoft Enterprise SCM Purchasing PeopleSoft Enterprise CS Academic Advisement PeopleSoft Enterprise CS Student Records. PeopleSoft Enterpris...

9.8CVSS7.3AI score0.53336EPSS
Exploits4
NCSC
NCSC
added 2021/10/20 12:0 a.m.5 views

Vulnerabilities fixed in Oracle Systems Solaris, ZFS Storage Appliance Kit and Ethernet switches

Oracle has fixed vulnerabilities in Solaris, ZFS Storage Appliance Kit and ES2-64 and ES2-72 switches. The vulnerabilities potentially enable a malicious party to launch attacks leading to the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User...

9.8CVSS7.3AI score0.68067EPSS
Exploits0
NCSC
NCSC
added 2021/10/14 12:0 a.m.31 views

Vulnerabilities fixed in Foxit products

Vulnerabilities have been fixed in Foxit products. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Access to system data Foxit has released updates to fix the vulnerabilitie...

7.8CVSS7.4AI score0.01253EPSS
Exploits6
NCSC
NCSC
added 2021/09/22 12:0 a.m.5 views

Vulnerabilities fixed in openSUSE kernel

Vulnerabilities have been fixed in openSUSE kernel. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS. Access to sensitive data Access to system data -= openSUSE =- The developers of openSUSE ha...

8.8CVSS6.6AI score0.03354EPSS
Exploits8
NCSC
NCSC
added 2021/09/22 12:0 a.m.2 views

Vulnerabilities fixed in Oracle MySQL

Vulnerabilities have been fixed in MySQL. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS SQL Injection Access to sensitive data Access to system data Increased user privileges MySQL categorizes these...

8CVSS9.4AI score0.41478EPSS
Exploits3
NCSC
NCSC
added 2021/09/20 12:0 a.m.7 views

Vulnerabilities fixed in Ubuntu kernel

Vulnerabilities have been fixed in Ubuntu kernel. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Accessing sensitive data Accessing system data -= Ubuntu ...

8.8CVSS7.1AI score0.03354EPSS
Exploits5
NCSC
NCSC
added 2021/09/14 12:0 a.m.4 views

Vulnerabilities fixed in NetIQ Access Manager

Vulnerabilities have been fixed in Access Manager. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data Access to sensitive data Access to system da...

8CVSS6AI score0.00709EPSS
Exploits0
Rows per page
Query Builder