Lucene search
+L

19003 matches found

VulnCheck KEV
VulnCheck KEV
added 2022/01/11 12:0 a.m.6 views

VulnCheck KEV: CVE-2022-21882

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.3AI score0.54553EPSS
SaveExploits7References1
Positive Technologies
Positive Technologies
added 2022/01/11 12:0 a.m.3 views

PT-2022-15185 · Microsoft · Directx +1

Name of the Vulnerable Software and Affected Versions: DirectX affected versions not specified Description: A denial-of-service issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

6.5CVSS9.3AI score0.01089EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/01/11 12:0 a.m.5 views

PT-2022-1515 · Microsoft · Windows Ui Immersive Server Api +1

Name of the Vulnerable Software and Affected Versions: Windows UI Immersive Server API affected versions not specified Description: The issue is related to insecure privilege management in the Windows UI Immersive Server API component of the Windows operating system. Exploitation of this issue ma...

7CVSS9.2AI score0.00772EPSS
SaveExploits0References7
OSV
OSV
added 2022/01/10 11:15 p.m.13 views

UBUNTU-CVE-2021-36412

A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gprtpbuilderdompeg12video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,...

7.8CVSS7.4AI score0.00851EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/10 2:12 p.m.5 views

CVE-2022-21823

A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control 2021.2 10.7.30.0 that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector...

5.5CVSS6.1AI score0.00349EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.5 views

CVE-2022-21823

A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control 2021.2 10.7.30.0 that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector...

5.5CVSS6.1AI score0.00349EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.7 views

Ivanti Workspace Control 安全漏洞

Ivanti Workspace Control RES One Workspace is a set of workspace control software from Ivanti, USA. The software includes features such as user management, application management and report management. A security vulnerability exists in versions prior to Ivanti Workspace Control 2021.2 10.7.30.0,...

5.5CVSS5.8AI score0.00349EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/01/10 12:0 a.m.1 views

PT-2022-1723 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is caused by a heap-based buffer overflow in the compile get env function of the vim text editor. This can allow an attacker to execute arbitrary code. The estimated number of...

9.8CVSS8.1AI score0.26583EPSS
SaveExploits46References193
Positive Technologies
Positive Technologies
added 2022/01/04 12:0 a.m.10 views

PT-2022-14265 · Mediatek · Libmtkomxgsmdec

Name of the Vulnerable Software and Affected Versions: libMtkOmxGsmDec affected versions not specified Description: The issue is related to an incorrect bounds check in libMtkOmxGsmDec, which could lead to local information disclosure without requiring additional execution privileges. User...

5.5CVSS5.1AI score0.00114EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/01/04 12:0 a.m.8 views

PT-2022-11190 · Modem Emm · Modem Emm

Name of the Vulnerable Software and Affected Versions: Modem EMM affected versions not specified Description: The issue is related to a missing data encryption in Modem EMM, which could lead to remote information disclosure without requiring additional execution privileges. User interaction is no...

7.5CVSS7.2AI score0.0074EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.8 views

PT-2025-8036

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the clk: mediatek component. The problem occurs due to insufficient handling of error branches, resulting in...

5.5CVSS5.8AI score0.00261EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2021/12/31 12:0 a.m.3 views

PT-2021-6131 · Vim +11 · Vim +11

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Use After Free condition in the vim text editor, specifically concerning the win linetabsize function. This condition involves the use of memory after it has been free...

9.8CVSS7.5AI score0.26583EPSS
SaveExploits118References589
Positive Technologies
Positive Technologies
added 2021/12/29 12:0 a.m.4 views

PT-2021-23395 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize use...

6.6CVSS5.8AI score0.00531EPSS
SaveExploits1References7
CNVD
CNVD
added 2021/12/29 12:0 a.m.52 views

Polycom Trio Remote Code Execution Vulnerability

The Polycom Trio is a Trio series of business conference phones from Polycom USA. A remote code execution vulnerability exists in Polycom Trio, which can be exploited by an attacker to execute commands via unspecified vectors...

8.8CVSS9AI score0.02683EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/28 1:15 p.m.28 views

CVE-2018-17875

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

8.8CVSS0.02683EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/28 1:15 p.m.7 views

CVE-2018-17875

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

8.8CVSS6.4AI score0.02683EPSS
SaveExploits1References2
Prion
Prion
added 2021/12/28 1:15 p.m.19 views

Remote code execution

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

6.5CVSS8.7AI score0.02683EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/12/28 12:28 p.m.58 views

CVE-2018-17875

Poly Trio 8800 devices running 5.7.1.4145 are affected by CVE-2018-17875, a remote code execution vulnerability in the ping command that allows remote authenticated users to execute commands via unspecified vectors. Impact is high for unauthenticated? No, authenticated users per description; CVSS...

8.8CVSS8.8AI score0.02683EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/12/28 12:28 p.m.34 views

CVE-2018-17875

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

8.9AI score0.02683EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/12/28 12:0 a.m.74 views

Mozilla Rust has an unspecified vulnerability (CNVD-2022-03126)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. security vulnerabilities exist in versions of Rust tremor-script crate prior to 0.11.6, which can lead to resource management errors. No details of the vulnerability are currently available...

9.8CVSS3.9AI score0.01191EPSS
SaveExploits0References1
Rows per page
Query Builder