Lucene search
+L

57 matches found

Positive Technologies
Positive Technologies
added 2023/03/21 12:0 a.m.5 views

PT-2023-2261 · Time +12 · Time +12

Name of the Vulnerable Software and Affected Versions: Time component versions through 0.2.1 Ruby versions through 3.2.1 Description: A ReDoS issue was discovered in the Time component, where the Time parser mishandles invalid URLs with specific characters, causing an increase in execution time f...

9.8CVSS6.3AI score0.0576EPSS
SaveExploits7References203
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.12 views

The vulnerability of the DEVICE.TIME.php component in the wireless router software from D-Link, DIR-859 A3 and D-Link DIR-850L A, allows a hacker to execute arbitrary code.

The vulnerability of the DEVICE.TIME.php component in D-Link DIR-859 A3 and D-Link DIR-850L A wireless router microprogramming software is related to the lack of measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote...

10CVSS7.2AI score0.15838EPSS
SaveExploits1References5Affected Software2
CNVD
CNVD
added 2019/06/28 12:0 a.m.6 views

Access Control Vulnerabilities in Multiple ZyXEL Products

ZyXEL ZyWall 310 and others are products of Taiwan, China-based ZyXEL Corporation.ZyXEL ZyWall 310 is a 310 series VPN firewall appliance.ZyXEL ZyWall 110 is a 110 series VPN firewall appliance.ZyXEL USG1900 is a next-generation unified security gateway appliance. A security vulnerability exists ...

9.1CVSS7AI score0.43926EPSS
SaveExploits1References1
Prion
Prion
added 2019/06/27 2:15 p.m.21 views

Improper access control

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service...

6.4CVSS9AI score0.43926EPSS
SaveExploits1References2Affected Software14
NVD
NVD
added 2017/10/23 1:29 a.m.20 views

CVE-2017-7145

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data...

5.3CVSS4.3AI score0.00779EPSS
SaveExploits0References2
OSV
OSV
added 2017/10/23 1:29 a.m.7 views

CVE-2017-7145

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data...

5.3CVSS7.3AI score0.00779EPSS
SaveExploits0References2
Prion
Prion
added 2017/10/23 1:29 a.m.18 views

Code injection

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data...

5CVSS4.3AI score0.00779EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2017/10/23 1:0 a.m.33 views

CVE-2017-7145

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data...

4.3AI score0.00779EPSS
SaveExploits0References2
CVE
CVE
added 2017/10/23 1:0 a.m.75 views

CVE-2017-7145

CVE-2017-7145 affects iOS before 11 in the Time component, specifically the Time Zone setting that may misuse location data. The Apple security content entry notes a permissions issue in the time zone handling process, addressed by modifying permissions. Connected references corroborate the issue...

5.3CVSS5.7AI score0.00779EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2017/10/23 12:0 a.m.9 views

Apple iOS Time has an unspecified vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Time component is one of the time components. A security vulnerability exists in the Time component of Apple iOS prior to version 11, which arises from the possibility that the program fails to properly handle the use of...

5.3CVSS6.8AI score0.00779EPSS
SaveExploits0References1
NVD
NVD
added 2011/12/14 12:55 a.m.27 views

CVE-2011-3397

The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecified "binary behavior" in Internet Explorer, aka "Microsoft Time Remote Code Execution Vulnerability...

9.3CVSS7.8AI score0.19535EPSS
SaveExploits0References3
Prion
Prion
added 2011/12/14 12:55 a.m.24 views

Remote code execution

The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecified "binary behavior" in Internet Explorer, aka "Microsoft Time Remote Code Execution Vulnerability...

9.3CVSS8.5AI score0.19535EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2011/12/14 12:0 a.m.40 views

CVE-2011-3397

The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecified "binary behavior" in Internet Explorer, aka "Microsoft Time Remote Code Execution Vulnerability...

7.8AI score0.19535EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2011/12/14 12:0 a.m.39 views

Microsoft Windows Time Component Remote Code Execution Vulnerability (2618451)

This host is missing a critical security update according to Microsoft Bulletin MS11-090. OpenVAS Vulnerability Test $Id: secpodms11-090.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Time Component Remote Code Execution Vulnerability 2618451 Authors: Sooraj KS Copyright: Copyright c...

9.3CVSS0.7AI score0.19535EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2011/12/14 12:0 a.m.33 views

Microsoft Windows Time Component Remote Code Execution Vulnerability (2618451)

This host is missing a critical security update according to Microsoft Bulletin MS11-090. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5.1AI score0.19535EPSS
SaveExploits0References3
Check Point Advisories
Check Point Advisories
added 2011/12/13 12:0 a.m.15 views

Microsoft Time Remote Code Execution (MS11-090; CVE-2011-3397)

A remote code execution vulnerability has been reported in the Microsoft Time component. The vulnerability is caused due to binary behavior in Internet Explorer that results in system corruption. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafte...

9.3CVSS7.3AI score0.19535EPSS
SaveExploits0
Saint
Saint
added 2010/12/16 12:0 a.m.31 views

Internet Explorer HTML+TIME element OuterText memory corruption

Added: 12/16/2010 CVE: CVE-2010-3346 BID: 45261 OSVDB: 69829 Background The HTML+TIME.aspx component of Internet Explorer adds timing and media synchronization support to HTML pages. Problem A memory corruption vulnerability in the HTML+TIME component allows command execution when a user loads a...

9.3CVSS6.5AI score0.28886EPSS
SaveExploits4
Rows per page
Query Builder