Lucene search
+L

12405 matches found

HPE Security Bulletins
HPE Security Bulletins
added 2023/02/14 12:00 a.m.11 views

HPESBHF04427 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 Plus server - Prior to 1.7202-02-2023 HPE ProLiant DX380 Gen10 Plus server - Prior to 1.7202-02-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | |...

7.5CVSS6.1AI score0.00539EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/02/14 12:00 a.m.8 views

Microsoft Windows Fax and Scan Service 安全漏洞

Microsoft Windows Fax Service is a functional component service from Microsoft Corporation USA. It is used to specify fax settings, including how to send, receive, view, and print. A security vulnerability exists in Microsoft Windows Fax and Scan Service. The following products and editions are...

6.8CVSS7.1AI score0.00558EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/14 12:00 a.m.10 views

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS7.7AI score0.03566EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/14 12:00 a.m.14 views

Splunk 安全漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

6.3CVSS6AI score0.00429EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/02/14 12:00 a.m.27 views

Microsoft .NET Framework 安全漏洞

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...

5CVSS6.7AI score0.00917EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/14 12:00 a.m.10 views

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

7.8CVSS8.1AI score0.00422EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/14 12:00 a.m.11 views

Microsoft Windows MSHTML Platform 安全漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windo...

7.8CVSS7.7AI score0.00737EPSS
SaveExploits0References4
HPE Security Bulletins
HPE Security Bulletins
added 2023/02/14 12:00 a.m.12 views

HPESBHF04440 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00717, 2023.1 IPU - BIOS Advisory, Local Escalation of Privilege Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL450 Gen10 Server - Prior to 2.7602-09-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-20...

8.2CVSS6.1AI score0.00247EPSS
SaveExploits0
OSV
OSV
added 2023/02/13 3:15 p.m.7 views

CVE-2023-0261

The WP TripAdvisor Review Slider WordPress plugin before 10.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber...

8.8CVSS7.3AI score0.04356EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2023/02/13 12:00 a.m.10 views

PT-2023-13378 · Dell · Solution Enabler Vapp +2

Name of the Vulnerable Software and Affected Versions: Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp versions 10.0.0.5 and below Description: The issue allows users to perform actions for which they are not authorized due to an authorization bypass...

6.9CVSS5.5AI score0.0023EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/02/13 12:00 a.m.25 views

WordPress plugin WP TripAdvisor Review Slider SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

8.8CVSS8.2AI score0.04356EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2023/02/13 12:00 a.m.6 views

PT-2023-34968 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.10 Description: The issue is related to an incorrect offset calculation in the erofs/zmap.c file. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

7.1AI score
SaveExploits0References1
CNNVD
CNNVD
added 2023/02/12 12:00 a.m.21 views

HP Factory Preinstalled Windows 10 Images 安全漏洞

HP Factory Preinstalled Windows 10 Images is a factory preinstalled image of HP from Hewlett-Packard HP USA. A security vulnerability exists in HP Factory Preinstalled Windows 10 Images version 20H2 and prior versions. An attacker can exploit the vulnerability to elevate privileges...

7.8CVSS7.5AI score0.00407EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/10 1:15 p.m.8 views

CVE-2023-24573

Dell Command | Monitor versions prior to 10.9 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

7.1CVSS7.2AI score0.00155EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/09 7:15 p.m.11 views

CVE-2023-21441

Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q10, 3.1.21.10 in Android R11 and 3.5.2.23 in Android S12 allows local attacker to access protected files via unused code...

5.5CVSS6.1AI score0.001EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/02/09 12:00 a.m.10 views

PT-2023-18208 · Google · Android

Name of the Vulnerable Software and Affected Versions: Routine versions prior to 2.6.30.6 in Android Q10 Routine versions prior to 3.1.21.10 in Android R11 Routine versions prior to 3.5.2.23 in Android S12 Description: The issue allows a local attacker to access protected files via unused code du...

7.4CVSS5.4AI score0.001EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/09 12:00 a.m.10 views

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from the presence of a remote code execution vulnerability...

8.3CVSS8.9AI score0.01067EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/02/03 1:15 a.m.3 views

CVE-2022-47132

A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users...

8.8CVSS7.4AI score0.00857EPSS
SaveExploits1References4
OSV
OSV
added 2023/02/03 1:15 a.m.7 views

CVE-2022-47132

A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users...

8.8CVSS5.8AI score0.00857EPSS
SaveExploits1References3
OSV
OSV
added 2023/02/03 1:15 a.m.8 views

CVE-2022-47131

A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows an attacker to arbitrarily create a page...

4.8CVSS5.8AI score0.00408EPSS
SaveExploits2References6
Rows per page
Query Builder