Lucene search
+L

2440 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/03/09 12:00 a.m.•49 views

Bitdefender Total Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.1CVSS4.5AI score0.00566EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/07 12:15 p.m.•28 views

CVE-2021-4199

Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issu...

7.8CVSS0.0077EPSS
SaveExploits0References2
Prion
Prion
•added 2022/03/07 12:15 p.m.•35 views

Code injection

Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issu...

7.2CVSS7.6AI score0.0077EPSS
SaveExploits0References2Affected Software4
CVE
CVE
•added 2022/03/07 11:35 a.m.•119 views

CVE-2021-4199

CVE-2021-4199 is a local privilege-escalation flaw in Bitdefender products where BDReinit.exe’s crash-handling component suffers incorrect permission assignment for a critical resource, enabling a local attacker to escalate to SYSTEM. Affected are Bitdefender Total Security, Internet Security, An...

7.8CVSS7.7AI score0.0077EPSS
SaveExploits0References2Affected Software4
Cvelist
Cvelist
•added 2022/03/07 11:35 a.m.•53 views

CVE-2021-4199 Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)

Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issu...

7.8CVSS7.8AI score0.0077EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/07 12:00 a.m.•17 views

Bitdefender Total Security 代码问题漏洞

Bitdefender Total Security is a proactive threat protection software for PCs from the Romanian company Bitdefender. The program features antivirus, firewall, anti-spyware, privacy control, parental control. It also includes features such as System TuneUp. A security vulnerability exists in...

6.1CVSS6.3AI score0.00566EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2022/03/03 12:00 a.m.•42 views

Kaspersky Total Security Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Kaspersky Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.1CVSS4.5AI score0.02601EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/02/26 12:00 a.m.•19 views

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-1258)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS7.9AI score0.02201EPSS
SaveExploits0References2
Code423n4
Code423n4
•added 2022/02/23 12:00 a.m.•17 views

[WP-M2] Wrong implementation of TurboSafe.sol#less() may cause boosted record value in TurboMaster bigger than actual lead to BoostCapForVault and BoostCapForCollateral to be permanently occupied

Lines of code Vulnerability details // Get out current amount of Fei debt in the Turbo Fuse Pool. uint256 feiDebt = feiTurboCToken.borrowBalanceCurrentaddressthis; // If our debt balance decreased, repay the minimum. // The surplus Fei will accrue as fees and can be sweeped. if feiAmount feiDebt...

6.7AI score
SaveExploits0
NVD
NVD
•added 2022/02/18 9:15 a.m.•30 views

CVE-2020-8107

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...

8.2CVSS0.00324EPSS
SaveExploits0References1
OSV
OSV
•added 2022/02/18 9:15 a.m.•12 views

CVE-2020-8107

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...

7.8CVSS7.1AI score0.00324EPSS
SaveExploits0References1
Prion
Prion
•added 2022/02/18 9:15 a.m.•24 views

Design/Logic Flaw

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...

4.4CVSS7.3AI score0.00324EPSS
SaveExploits0References1Affected Software3
CVE
CVE
•added 2022/02/18 8:20 a.m.•83 views

CVE-2020-8107

The CVE-2020-8107 entry concerns a vulnerability in Bitdefender Antivirus Plus (ProductAgentUI.exe) where a specially crafted DLL can tamper with product settings. Affected products are Bitdefender Antivirus Plus, Internet Security, and Total Security with versions prior to 24.0.26.136. The root ...

8.2CVSS7.6AI score0.00324EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
•added 2022/02/18 8:20 a.m.•32 views

CVE-2020-8107 Process Control vulnerability in Bitdefender Antivirus Plus

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions pri...

8.2CVSS8AI score0.00324EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2022/02/16 11:57 a.m.•13 views

orderonline.totalkebab.com.au Cross Site Scripting vulnerability OBB-2374740

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Huntr
Huntr
•added 2022/02/13 8:00 a.m.•33 views

Business Logic Errors in microweber/microweber

Description The product is vulnerable to Business Logic error through negative product amount. Proof of Concept Step 1: Login to the application, Navigate to Shops - Products - Add Product Step 2: Fill in all the required details with Pricing parameter as -100 and click on save. Here an item is...

4CVSS1.9AI score0.0062EPSS
SaveExploits1
attackerkb
attackerkb
•added 2022/02/05 10:00 a.m.•18 views

CVE-2021-4198

A NULL Pointer Dereference vulnerability in the messagingipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects:...

6.1CVSS6.3AI score0.00566EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/02/03 4:15 a.m.•5 views

CVE-2022-24121

SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information through a cookie parameter...

7.5CVSS5.8AI score0.01261EPSS
SaveExploits1References3
NVD
NVD
•added 2022/02/03 4:15 a.m.•22 views

CVE-2022-24121

SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information through a cookie parameter...

7.5CVSS0.01261EPSS
SaveExploits1References2
Prion
Prion
•added 2022/02/03 4:15 a.m.•22 views

Sql injection

SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information through a cookie parameter...

5CVSS7.7AI score0.01261EPSS
SaveExploits1References2
Rows per page
Query Builder