CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

57 matches found

Snyk•added 2023/06/09 5:58 a.m.•4 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read such that parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic. Remediation Upgrade...

8.2CVSS7.4AI score0.01089EPSS

SaveExploits0References2

OSV•added 2023/03/29 7:15 p.m.•16 views

CVE-2022-2848

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lac...

9.1CVSS6.2AI score0.03366EPSS

SaveExploits0References2

NVD•added 2023/03/29 7:15 p.m.•49 views

CVE-2022-2825

9.8CVSS9.7AI score0.0343EPSS

SaveExploits0References2

NVD•added 2023/03/29 7:15 p.m.•55 views

CVE-2022-2848

9.1CVSS9.5AI score0.03366EPSS

SaveExploits0References2

OSV•added 2023/03/29 7:15 p.m.•21 views

CVE-2022-2825

9.8CVSS8.7AI score0.0343EPSS

SaveExploits0References2

Prion•added 2023/03/29 7:15 p.m.•38 views

Heap overflow

6.4CVSS9.4AI score0.03366EPSS

SaveExploits0References2Affected Software7

Rapid7 Vulnerability Database (full)•added 2023/03/29 12:00 a.m.•2 views

CVE-2022-2848: Heap-based Buffer Overflow

9.1CVSS6.7AI score0.03366EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2023/03/29 12:00 a.m.•4 views

CVE-2022-2825: Stack-based Buffer Overflow

9.8CVSS8.7AI score0.0343EPSS

SaveExploits0References2

CVE•added 2023/03/29 12:00 a.m.•96 views

CVE-2022-2825

The CVE-2022-2825 issue affects Kepware KEPServerEX 6.11.718.0, with a stack-based buffer overflow in the handling of text encoding conversions caused by improper validation of the length of user-supplied data. It allows remote attackers to execute arbitrary code with SYSTEM privileges without au...

9.8CVSS8.7AI score0.0343EPSS

SaveExploits0References2Affected Software8

Cvelist•added 2023/03/29 12:00 a.m.•58 views

CVE-2022-2825

9.8CVSS9.8AI score0.0343EPSS

SaveExploits0References2

Cvelist•added 2023/03/29 12:00 a.m.•53 views

CVE-2022-2848

9.1CVSS9.5AI score0.03366EPSS

SaveExploits0References2

Vulnrichment•added 2023/03/29 12:00 a.m.•16 views

CVE-2022-2848

9.1CVSS7.2AI score0.03366EPSS

SaveExploits0References2

OSV•added 2023/02/16 9:20 a.m.•12 views

USN-5873-1 golang-golang-x-text, golang-x-text vulnerabilities

It was discovered that Go Text incorrectly handled certain encodings. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2020-14040 It was discovered that Go Text incorrectly handled certain BCP 47 language...

7.5CVSS6.6AI score0.02325EPSS

SaveExploits2References6

Zero Day Initiative•added 2022/10/21 12:00 a.m.•74 views

(Pwn2Own) Kepware KEPServerEX Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper...

9.8CVSS8.7AI score0.0343EPSS

SaveExploits0References1

Zero Day Initiative•added 2022/10/21 12:00 a.m.•46 views

(Pwn2Own) Kepware KEPServerEX Heap-based Buffer Overflow Remote Code Execution Vulnerability

9.1CVSS5.9AI score0.03366EPSS

SaveExploits0References1

Positive Technologies•added 2022/08/30 12:00 a.m.•18 views

PT-2022-4524 · Kepware · Kepserverex

Name of the Vulnerable Software and Affected Versions: Kepware KEPServerEX version 6.11.718.0 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling of...

9.1CVSS7.8AI score0.03366EPSS

SaveExploits0References8

Rapid7 Blog•added 2021/11/04 7:47 p.m.•190 views

Trojan Source CVE-2021-42572: No Panic Necessary

What is this thing? Researchers at the University of Cambridge and the University of Edinburgh recently published a paper on an attack technique they call “Trojan Source.” The attack targets a weakness in text-encoding standard Unicode—which allows computers to handle text across many different...

7.5CVSS7.1AI score0.66023EPSS

SaveExploits8

The Hacker News•added 2021/07/05 6:42 a.m.•137 views

Microsoft Urges Azure Users to Update PowerShell to Patch RCE Flaw

Microsoft is urging Azure users to update the PowerShell command-line tool as soon as possible to protect against a critical remote code execution vulnerability impacting .NET Core. The issue, tracked as CVE-2021-26701 CVSS score: 8.1, affects PowerShell versions 7.0 and 7.1 and have been...

9.8CVSS1.8AI score0.30096EPSS

SaveExploits0

Github Security Blog•added 2021/04/21 7:38 p.m.•764 views

.NET Core Remote Code Execution Vulnerability

.NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1, and .NET Core 2.1. This advisory also provides guidance on what...

9.8CVSS4.3AI score0.30096EPSS

SaveExploits0References16Affected Software1

ArchLinux•added 2021/03/25 12:00 a.m.•221 views

[ASA-202103-23] dotnet-sdk-3.1: arbitrary code execution

Arch Linux Security Advisory ASA-202103-23 ========================================== Severity: High Date : 2021-03-25 CVE-ID : CVE-2021-26701 Package : dotnet-sdk-3.1 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1701 Summary ======= The package...

9.8CVSS2.1AI score0.30096EPSS

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by