Lucene search
+L

5394 matches found

CNNVD
CNNVD
added 2024/08/13 12:0 a.m.16 views

Microsoft Project 输入验证错误漏洞

Microsoft Project is a suite of project management software from Microsoft USA. The software is used to assist project managers in developing plans, assigning resources to tasks, tracking progress, managing budgets, and analyzing workloads. An input validation error vulnerability exists in...

8.8CVSS6.7AI score0.08194EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/08/13 12:0 a.m.10 views

Microsoft Windows Common Log File System Driver 输入验证错误漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. An...

7.8CVSS6.9AI score0.05722EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/08/06 3:41 p.m.13 views

CVE-2023-28806 Signature validation error in DLL allows disabling anti-tampering protection

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows 4.2.0.190...

5.7CVSS7AI score0.00188EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/08/05 12:0 a.m.11 views

JFrog Artifactory 输入验证错误漏洞

JFrog Artifactory is a solution from JFrog for managing and delivering binaries in the software supply chain. An input validation error vulnerability exists in JFrog Artifactory that stems from vulnerability to incorrect input validation, which can lead to cache poisoning...

9.3CVSS6.7AI score0.00595EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/02 12:0 a.m.9 views

Siemens Omnivise T3000 输入验证错误漏洞

The Omnivise T3000 is a distributed control system for fossil fuel and large renewable energy power plants. An improper input validation vulnerability exists in the Siemens Omnivise T3000 Application Server due to an affected system exposing an internal application port on a public network...

9.8CVSS7AI score0.00768EPSS
SaveExploits3References3
CNNVD
CNNVD
added 2024/08/02 12:0 a.m.10 views

Changing TCBServiSign 输入验证错误漏洞

Changing TCBServiSign is a cross-platform security control component from Changing, China. An input validation error vulnerability exists in versions prior to Changing TCBServiSign 1.0.24.0318. The vulnerability stems from a specific API that does not properly validate server-side input, which...

8.8CVSS7.5AI score0.00593EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/07/30 12:0 a.m.11 views

Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-35169)

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an input validation error vulnerability that stems from accepting characters that are not allowed by the HTTP field name and forwarding a...

7.5CVSS6.5AI score0.00987EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/30 12:0 a.m.31 views

Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-35170)

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an input validation error vulnerability that stems from forwarding the tail end of an incorrectly formatted HTTP chunk to the origin server. ...

9.1CVSS6.6AI score0.0097EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/30 12:0 a.m.48 views

Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-35671)

Apache Traffic Server is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. An input validation error vulnerability exists in Apache Traffic Server, which can be exploited by an attacker to cause a denial of service condition by sending a specially crafted...

8.2CVSS6.5AI score0.01085EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/29 3:47 p.m.30 views

CVE-2024-41083 netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfspagemkwrite to check folio-mapping is valid Fix netfspagemkwrite to check that folio-mapping is valid once it has taken the folio lock as filemappagemkwrite does. Without this, generic/247 occasionally oopses with...

0.00196EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/29 9:15 a.m.10 views

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

7.8CVSS5.8AI score0.00117EPSS
SaveExploits0References2
NVD
NVD
added 2024/07/29 9:15 a.m.20 views

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

7.8CVSS0.00117EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/29 8:51 a.m.14 views

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

7.2AI score0.00117EPSS
SaveExploits0References2
CVE
CVE
added 2024/07/29 8:51 a.m.65 views

CVE-2024-41143

CVE-2024-41143 is a vulnerability in SKYSEA Client View (Windows client) caused by an origin validation error in shared memory/data exchanges. Affected versions are 3.013.00 through 19.210.04e . If exploited by a user who can log in to the PC, an arbitrary process may execute with SYSTEM privileg...

7.8CVSS7AI score0.00117EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/07/29 8:51 a.m.33 views

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

0.00117EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/07/29 6:28 a.m.8 views

Multiple vulnerabilities in SKYSEA Client View

Overview SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool. SKYSEA Client View contains multiple vulnerabilities listed below. Improper access control in the specific process CWE-266 - CVE-2024-41139 Origin validation error in shared memory data exchanges CWE-3...

7.8CVSS7.5AI score0.00501EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.10 views

SKYSEA Client View 安全漏洞

SKYSEA Client View is a software that supports information leakage countermeasures and IT operations management from SKYSEA Japan. A security vulnerability exists in SKYSEA Client View versions 3.013.00 through 19.210.04e, which stems from the presence of an Origin Validation Error vulnerability...

7.8CVSS7.7AI score0.00117EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/07/29 12:0 a.m.11 views

PT-2024-29292 · Unknown · Skysea Client View

Name of the Vulnerable Software and Affected Versions: SKYSEA Client View versions 3.013.00 through 19.210.04e Description: The issue allows an arbitrary process to be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed. This is due to...

7.8CVSS7AI score0.00117EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/07/29 12:0 a.m.27 views

JVN#84326763: Multiple vulnerabilities in SKYSEA Client View

SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool. SKYSEA Client View contains multiple vulnerabilities listed below. Improper access control in the specific process CWE-266 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8 CVE-2024-41139 Origin...

7.8CVSS8.1AI score0.00501EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/07/26 12:0 a.m.11 views

Apache Traffic Server 输入验证错误漏洞

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an input validation error vulnerability that stems from forwarding the tail end of an incorrectly formatted HTTP chunk to the origin server. ...

9.1CVSS6.9AI score0.0097EPSS
SaveExploits0References3
Rows per page
Query Builder