Lucene search
+L

5480 matches found

OSV
OSV
added 2023/09/25 8:15 p.m.8 views

DEBIAN-CVE-2022-4245

A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...

4.3CVSS5.5AI score0.00694EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/09/22 12:0 a.m.27 views

Fedora: Security Advisory for golang-github-prometheus-exporter-toolkit (FEDORA-2023-c1318fb7f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.01157EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/09/22 12:0 a.m.24 views

Fedora: Security Advisory for golang-github-prometheus-exporter-toolkit (FEDORA-2023-1b25579262)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.01157EPSS
SaveExploits1References2
Fedora
Fedora
added 2023/09/21 1:33 a.m.23 views

[SECURITY] Fedora 38 Update: golang-github-prometheus-exporter-toolkit-0.10.0-1.fc38

Utility package to build exporters...

8.8CVSS7AI score0.01157EPSS
SaveExploits1
Fedora
Fedora
added 2023/09/21 1:22 a.m.37 views

[SECURITY] Fedora 37 Update: golang-github-prometheus-exporter-toolkit-0.10.0-1.fc37

Utility package to build exporters...

8.8CVSS7AI score0.01157EPSS
SaveExploits1
Fedora
Fedora
added 2023/09/20 12:20 a.m.33 views

[SECURITY] Fedora 39 Update: golang-github-prometheus-exporter-toolkit-0.10.0-1.fc39

Utility package to build exporters...

8.8CVSS7AI score0.01157EPSS
SaveExploits1
NVD
NVD
added 2023/09/18 12:15 p.m.20 views

CVE-2023-41929

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows to exploit this vulnerability...

7.3CVSS7.2AI score0.0018EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/18 12:15 p.m.6 views

CVE-2023-41929

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows to exploit this vulnerability...

7.3CVSS5.8AI score0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/18 12:0 a.m.42 views

CVE-2023-41929

CVE-2023-41929 is a DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software prior to version 1.0.1. It enables a local attacker with valid Windows user privileges to escalate privileges. The issue is caused by loading a malicious DLL before the legitimate one, ...

7.3CVSS7.2AI score0.0018EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/18 12:0 a.m.8 views

PT-2023-28166 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Samsung Memory Card & UFD Authentication Utility PC Software versions prior to 1.0.1 Description: A DLL hijacking vulnerability could allow a local attacker to escalate privileges, given that the attacker already has user privileges on Window...

7.3CVSS7.2AI score0.0018EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/09/16 12:0 a.m.20 views

The vulnerability of the free_stream utility for converting files with the .fig and .fig2dev extensions involves a memory reclamation error, which allows an attacker to cause a service failure.

The vulnerability of the freestream function in the file conversion utility for files with the .fig and .fig2dev extensions is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.00748EPSS
SaveExploits1References3Affected Software2
OSV
OSV
added 2023/09/12 7:15 a.m.6 views

CVE-2023-3039

SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

7.8CVSS6.3AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/12 7:15 a.m.23 views

CVE-2023-3039

SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

7.8CVSS7.6AI score0.00164EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/12 7:15 a.m.21 views

Improper access control

SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

4.3CVSS7.9AI score0.00164EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/12 6:6 a.m.8 views

CVE-2023-3039

SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

7.3CVSS7.7AI score0.00164EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/12 6:6 a.m.31 views

CVE-2023-3039

SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

7.3CVSS8.1AI score0.00164EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/12 6:6 a.m.49 views

CVE-2023-3039

CVE-2023-3039 concerns Dell SD ROM Utility. Multiple connected sources confirm an Impaired Access Control vulnerability in versions prior to 1.0.2.0, allowing a low-privileged attacker to potentially perform arbitrary code execution with limited access rights. The root issue is an improper access...

7.8CVSS7.8AI score0.00164EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/09/12 12:0 a.m.9 views

Dell SD ROM Utility Access Control Error Vulnerability

Dell SD ROM Utility is a tool from Dell USA that helps to permanently write-protect SD cards. An access control error vulnerability exists in Dell SD ROM Utility versions prior to 1.0.2.0, which can be exploited by an attacker to execute arbitrary code with limited access rights...

7.8CVSS7.5AI score0.00164EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/11 9:30 p.m.28 views

GHSA-M5Q8-58WH-XXQ4 Drools Core Deserialization of Untrusted Data vulnerability

A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects usually called gadgets and achieve code execution on the server...

6.8CVSS8.2AI score0.01044EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/09/11 9:30 p.m.43 views

Drools Core Deserialization of Untrusted Data vulnerability

A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects usually called gadgets and achieve code execution on the server...

8.8CVSS8.6AI score0.01044EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder