Lucene search
+L

6067 matches found

CNVD
CNVD
•added 2020/10/21 12:00 a.m.•18 views

SAP NetWeaver Application Server Java Input Validation Error Vulnerability

SAP NetWeaver Application Server Java is a German SAP SAP company provides a Java runtime environment of the application server. The product is mainly used to develop and run Java EE applications. A security vulnerability exists in SAP NetWeaver Application Server Java. No detailed vulnerability...

6.1CVSS6.8AI score0.01093EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/10/19 12:00 a.m.•16 views

Juniper Networks Mist Cloud UI Input Validation Error Vulnerability

Juniper Networks Mist Cloud is a Juniper Networks USA platform that simplifies cloud management and helps users prevent vendor and complexity lock-in. It provides cost and utilization reporting, RBAC, management, provisioning, orchestration, monitoring and automation for servers across public and...

7.2CVSS6.8AI score0.00887EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/16 12:00 a.m.•5 views

CVE-2020-9903: Origin Validation Error

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2. A malicious attacker may cause Safari to suggest a password for the wrong domain...

7.5CVSS7.2AI score0.00507EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/10/13 12:00 a.m.•67 views

KB4580330: Windows 10 Version 1803 October 2020 Security Update

The remote Windows host is missing security update 4580330. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

9.3CVSS7.7AI score0.13454EPSS
SaveExploits12References49
CNVD
CNVD
•added 2020/10/09 12:00 a.m.•19 views

Cisco Small Business SPA500 Series IP Phones Input Validation Error Vulnerability

Cisco Small Business SPA500 Series IP Phones is an SPA500 series IP phone from Cisco USA. An input validation error vulnerability exists in Cisco Small Business SPA500 Series IP Phones using firmware version 7.6.2SR5 and earlier. The vulnerability stems from the fact that the device comes with...

6.6CVSS7.5AI score0.00386EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/10/09 12:00 a.m.•17 views

Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CNVD-2020-61955)

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A cross-site scripting...

4.8CVSS6.2AI score0.00617EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/02 12:00 a.m.•9 views

CVE-2020-26527: Origin Validation Error

An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7. Cross-origin resource sharing trusts random origins by accepting the arbitrary 'Origin: example.com' header and responding with 200 OK and a wildcard 'Access-Control-Allow-Origin: ' header...

9.8CVSS5.9AI score0.00912EPSS
SaveExploits1References2
CNVD
CNVD
•added 2020/09/28 12:00 a.m.•17 views

Pexip Infinity Input Validation Error Vulnerability (CNVD-2020-55174)

Pexip Infinity is a video conferencing cloud collaboration platform from Norway's pexip, a video communications software that organizations can deploy in their IT infrastructure, public or private cloud, or any hybrid combination to enable everyone to have their own personal high-quality video,...

7.5CVSS6.8AI score0.01075EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/09/28 12:00 a.m.•49 views

Google TensorFlow Input Validation Error Vulnerability (CNVD-2020-55182)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Tensorflow versions prior to 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1, and 2.3.1, which stems from the program's failure to adequately perform path...

9CVSS6.8AI score0.00956EPSS
SaveExploits1References1
osv_pysec
osv_pysec
•added 2020/09/25 7:15 p.m.•23 views

PYSEC-2020-272

In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to dlpack.todlpack there is a memory leak following an expected validation failure. The issue occurs because the status argument during validation failures is not properly checked. Since each of the above methods ca...

4.3CVSS5.8AI score0.00834EPSS
SaveExploits1References4
CNVD
CNVD
•added 2020/09/25 12:00 a.m.•3 views

VITToken Number Error Vulnerability

VITToken is an Ether-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in VITToken's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

7AI score
SaveExploits0References1
CNVD
CNVD
•added 2020/09/25 12:00 a.m.•128 views

Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30571)

Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2. The vulnerability stems from the Chunk implementation, where unit is executed without checking the size of the array. No details of the vulnerability are availab...

7.5CVSS6.5AI score0.01767EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/09/25 12:00 a.m.•9 views

SmartHomeCoin Digital Error Vulnerability

SmartHomeCoin is an Ether-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in SmartHomeCoin's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

7AI score
SaveExploits0References1
CNVD
CNVD
•added 2020/09/23 12:00 a.m.•9 views

Mozilla Firefox Input Validation Error Vulnerability (CNVD-2020-55000)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An input validation error vulnerability exists in Mozilla Firefox. The vulnerability originates from a network system or product that does not properly validate input data. A remote attacker could...

6.1CVSS8.7AI score0.01657EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/09/22 12:00 a.m.•25 views

Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30574)

Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2, which can be exploited by an attacker to cause an error in the Chunk implementation when constructing arrays using without checking the array size...

7.5CVSS6.5AI score0.01666EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/09/18 12:00 a.m.•20 views

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53159)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker to cause an application crash via a specially crafted HPGL file...

4.3CVSS6.8AI score0.01623EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/09/18 12:00 a.m.•21 views

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53158)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker to cause an application crash via a specially crafted HPGL file...

4.3CVSS6.8AI score0.01623EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/18 12:00 a.m.•10 views

CVE-2020-15773: Origin Validation Error

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user for the duration of the browser session after previously explicitly authenticating with the API...

6.5CVSS5.8AI score0.00422EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/09/18 12:00 a.m.•24 views

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53170)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker to cause an application crash via a specially crafted PDF file...

4.3CVSS6.8AI score0.01623EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/09/18 12:00 a.m.•20 views

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53174)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker via a specially crafted SKP file to cause the application to crash...

4.3CVSS6.8AI score0.01623EPSS
SaveExploits0References1
Rows per page
Query Builder