4466 matches found
CVE-2022-24493: Undefined Security Weakness
Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...
CVE-2022-24527: Undefined Security Weakness
Microsoft Endpoint Configuration Manager Elevation of Privilege Vulnerability...
Exploit for Code Injection in Vmware Spring_Framework
CVE-2022-22965Spring4Shell CVE-2022-22965 Spring4Shell, Spr...
Exploit for Code Injection in Vmware Spring_Framework
go-scan-spring Vulnerability scanner to find Spring4Shel...
Exploit for Code Injection in Vmware Spring_Framework
CVE-2022-22965 aka "Spring4Shell" Vulnerabilidad RCE en Spri...
RHEL 8 : Red Hat OpenStack Platform 16.2 (numpy) (RHSA-2022:1000)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1000 advisory. A fast multidimensional array facility for Python Security Fixes: buffer overflow in the PyArrayNewFromDescrint in ctors.c CVE-2021-33430...
WordPress 5.9.x < 5.9.2 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A stored cross-site scripting XSS vulnerability exists via wpfilterglobalstylespost. - A prototype pollution exists via the Gutenberg wordpress/url package. Note that the...
Exploit for Improper Initialization in Linux Linux_Kernel
!Dirty Pipehttps://forum.hackersploit.org/uploads/default/ori...
0x-relayer-cat (>=0.0.3, <=0.0.10), @0x-klaytn/asset-swapper (>=4.2.1, <=4.2.2) +4610 more potentially affected by CVE-2022-0512 via url-parse (>=0.1.5, <=1.5.4)
url-parse NPM version =0.1.5, =0.0.3, =4.2.1, =2.1.0-beta.4, =5.0.0-beta, =0.1.0-beta.2, =0.0.1, =0.0.31, =0.0.1, =1.0.2, =0.1.0, =0.1.0, =1.6.1, =0.2.0, =1.0.3, =2.1.1 and more Source cves: CVE-2022-0512 Source advisory: OSV:GHSA-RQFF-837H-MM52...
AlmaLinux 8 : libX11 (ALSA-2021:4326)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4326 advisory. - LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request intended f...
Mitsubishi Electric MELSEC iQ-R Series Uncontrolled Resource Consumption (CVE-2021-20591)
Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules R00/01/02CPU all versions, R04/08/16/32/120ENCPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions allows a remote unauthenticated...
Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules Missing Authentication For Critical Function (CVE-2018-17924)
Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...
MobileIron Core Log4Shell Direct Check (CVE-2021-44228)
Binary data mobileironlog4shell.nbin...
CVE-2021-36199
Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop...
CVE-2021-36199
Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop...
Design/Logic Flaw
Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop...
CVE-2021-36199 VideoEdge
Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop...
CVE-2021-36199
CVE-2021-36199 affects VideoEdge NVRs (VideoEdge) with versions 5.4.1–5.7.1. It is due to improper handling of syntactically invalid structure, potentially causing a denial-of-service condition (availability impact listed as LOW). No public exploits are documented in the provided sources. Johnson...
CVE-2021-21909: Improper Limitation of a Pathname to a Restricted Directory
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...