Lucene search
K

47 matches found

BDU FSTEC
BDU FSTEC
added 2024/03/28 12:0 a.m.4 views

The vulnerability of the WP Crontrol plugin of the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the WP Crontrol plugin of the WordPress content management system is related to the loading of code without checking its integrity. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

8.1CVSS7.8AI score0.00165EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/02/27 12:0 a.m.43 views

MikroTik RouterOS Download of Code Without Integrity Check (CVE-2019-3977)

RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are download from when using the autoupgrade feature. Therefore, a remote attacker can trick the router into upgrading to an older version of RouterOS and possibly reseting all the system's...

8.5CVSS7.8AI score0.01059EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:0 a.m.6 views

The vulnerability of Microprogrammed Software for Power Measurement and Energy Meters from Schneider Electric’s PowerLogic ION8650 and PowerLogic ION8800 arises from loading code without verifying its integrity. This allows a malicious actor to alter the firmware version with administrator privileges.

The vulnerability of Microprogrammed Software for Power Measurement Devices and Energy Meters from Schneider Electric’s PowerLogic ION8650 and PowerLogic ION8800 lies in the fact that code can be loaded without checking its integrity. Exploiting this vulnerability could allow an attacker to...

8.3CVSS5.6AI score0.00306EPSS
Exploits0References3
OSV
OSV
added 2023/08/11 7:15 a.m.3 views

CVE-2023-40254

Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through...

9.8CVSS5.8AI score0.00174EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2023/07/29 7:0 a.m.3 views

The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.

...

7.8CVSS7.2AI score0.00316EPSS
Exploits0
OSV
OSV
added 2023/07/20 1:15 a.m.4 views

AZL-27551 CVE-2022-28735 affecting package grub2 for versions less than 2.06-12

The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain...

7.8CVSS6.9AI score0.00316EPSS
Exploits0References1
OSV
OSV
added 2023/07/20 1:15 a.m.1 views

UBUNTU-CVE-2022-28735

The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain...

7.8CVSS7AI score0.00316EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/07/20 12:22 a.m.22 views

CVE-2022-28735

The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain...

6.7CVSS7.6AI score0.00316EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/01 12:0 a.m.7 views

The vulnerability of the PostgreSQL database management system, related to the loading of code without checking its integrity, allows a perpetrator to execute arbitrary code.

The vulnerability of the PostgreSQL database management system lies in the loading of code without checking its integrity. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code remotely...

8.1CVSS7.7AI score0.04915EPSS
Exploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:26 a.m.5 views

SUSE CVE-2022-28735

The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain...

8.4CVSS8.3AI score0.00316EPSS
Exploits0References14
BDU FSTEC
BDU FSTEC
added 2023/02/14 12:0 a.m.5 views

The vulnerability of the Live Update Wizard component of EMCO software products lies in the ability to load code without verifying its integrity. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code.

The vulnerability of the Live Update Wizard component of EMCO software products lies in the ability to load code without verifying its integrity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

10CVSS8AI score0.01689EPSS
Exploits2References2Affected Software8
RedHat Linux
RedHat Linux
added 2022/06/16 3:49 p.m.5 views

grub2: shim_lock verifier allows non-kernel files to be loaded

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

7.8CVSS7.3AI score0.00316EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 3:39 p.m.4 views

grub2: shim_lock verifier allows non-kernel files to be loaded

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

7.8CVSS7.3AI score0.00316EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 3:26 p.m.3 views

grub2: shim_lock verifier allows non-kernel files to be loaded

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

7.8CVSS7.3AI score0.00316EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 2:57 p.m.6 views

grub2: shim_lock verifier allows non-kernel files to be loaded

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

7.8CVSS7.3AI score0.00316EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 1:52 p.m.5 views

grub2: shim_lock verifier allows non-kernel files to be loaded

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

7.8CVSS7.3AI score0.00316EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2022/06/07 5:19 p.m.40 views

CVE-2022-28735

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

7.8CVSS3.4AI score0.00316EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.4 views

The vulnerability in the software interface of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server’s API packages allows a perpetrator to execute arbitrary code.

The vulnerability of the software interface APIs of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the loading of code without checking its integrity. Exploiting this vulnerability allows an attacker to execute arbitrary code...

9.9CVSS8.1AI score0.01954EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.10 views

The vulnerability of the RouterOS operating system’s automatic update function in MikroTik routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the RouterOS operating system’s automatic update function for MikroTik routers involves loading code without checking its integrity. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information by resetting t...

8.5CVSS7.5AI score0.01059EPSS
Exploits0References2
Cvelist
Cvelist
added 2019/07/25 4:33 p.m.33 views

CVE-2019-2281

An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675...

8.4AI score0.00234EPSS
Exploits0References1
Rows per page
Query Builder