Lucene search
+L

9656 matches found

CVE
CVE
added 2023/07/11 5:31 p.m.46 views

CVE-2023-3625

Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System (up to 20230706) has a vulnerability in the Duty Write-UploadFile component: the /Duty/AjaxHandle/Write/UploadFile.ashx endpoint processes Filedata and allows unrestricted upload. This can be exploited remotely and i...

9.8CVSS8.1AI score0.00957EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2023/07/11 5:15 p.m.26 views

CVE-2023-3623

A vulnerability was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230704. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Duty/AjaxHandle/UploadHandler.ashx of the component Duty Module. The...

9.8CVSS7.1AI score0.00909EPSS
SaveExploits1References3
CVE
CVE
added 2023/07/11 4:31 p.m.72 views

CVE-2023-3623

CVE-2023-3623 affects Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System (versions up to 20230704). The vulnerability is in the Duty Module, specifically the file path /Duty/AjaxHandle/UploadHandler.ashx, where manipulating the Filedata argument enables unrestricted ...

9.8CVSS7.1AI score0.00909EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/11 4:31 p.m.11 views

CVE-2023-3623 Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System Duty Module UploadHandler.ashx unrestricted upload

A vulnerability was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230704. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Duty/AjaxHandle/UploadHandler.ashx of the component Duty Module. The...

6.5CVSS7AI score0.00909EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/07/11 4:31 p.m.58 views

CVE-2023-3623 Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System Duty Module UploadHandler.ashx unrestricted upload

A vulnerability was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230704. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Duty/AjaxHandle/UploadHandler.ashx of the component Duty Module. The...

6.5CVSS9.6AI score0.00909EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2023/07/11 9:29 a.m.197 views

Exploit for Out-of-bounds Write in Microsoft

Windows Privilege Escalation Exploit for CVE-2021-1732 Win32k...

7.8CVSS8.5AI score0.78376EPSS
SaveExploits57
CNNVD
CNNVD
added 2023/07/11 12:00 a.m.10 views

Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System 代码问题漏洞

Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System is a flash flood prevention monitoring and early warning system from Suncreate. A code issue vulnerability exists in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System 20230706 and earli...

9.8CVSS7AI score0.00957EPSS
SaveExploits1References4
CISA KEV Catalog
CISA KEV Catalog
added 2023/07/11 12:00 a.m.85 views

Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt...

8.8CVSS6.7AI score0.04156EPSS
SaveIn wildExploits0
Positive Technologies
Positive Technologies
added 2023/07/11 12:00 a.m.10 views

PT-2023-25494 · Suncreate · Suncreate Mountain Flood Disaster Prevention Monitoring/Early Warning System

Name of the Vulnerable Software and Affected Versions: Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230706 Description: A critical issue was discovered, affecting the /Duty/AjaxHandle/Write/UploadFile.ashx file of the Duty Write-UploadFile component. Th...

9.8CVSS6.4AI score0.00957EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
added 2023/07/11 12:00 a.m.4 views

VulnCheck KEV: CVE-2023-32049

Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt...

8.8CVSS7.4AI score0.04156EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2023/07/10 8:05 a.m.448 views

Exploit for Out-of-bounds Write in Polkit_Project Polkit

Exploit for CVE-2021-4034 Pkexec - Local Privilege Escalatio...

7.8CVSS8AI score0.94921EPSS
SaveExploits190
GithubExploit
GithubExploit
added 2023/07/10 6:38 a.m.372 views

Exploit for Improper Privilege Management in Sudo_Project Sudo

Linux Privilege Escalation Exploit for CVE-2021-3560 Sudoedit a...

7.8CVSS8.5AI score0.55367EPSS
SaveExploits57
SUSE CVE
SUSE CVE
added 2023/07/07 2:18 a.m.3 views

SUSE CVE-2023-37208

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13...

7.8CVSS6.5AI score0.00234EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/07/07 12:00 a.m.8 views

PT-2023-36316 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a spurious warning introduced in the IPv6 subsystem of the Linux kernel after an update that fixed vulnerabilities. This warning is undesired and has been addressed ...

7AI score
SaveExploits0References3
Malwarebytes
Malwarebytes
added 2023/07/06 3:00 a.m.38 views

Warning issued over vulnerability in cardiac device monitoring software

The Cybersecurity and Infrastructure Security Agency CISA has issued a warning about a vulnerability that could result in remote code execution or a denial-of-service DoS condition impacting a healthcare delivery organizations Paceart Optima system. Paceart Optima is a software application that...

6.5CVSS8AI score0.28495EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2023/07/06 12:00 a.m.19 views

Ubuntu: Security Advisory (USN-6201-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.9AI score0.00755EPSS
SaveExploits1References2
OSV
OSV
added 2023/07/05 9:15 a.m.3 views

DEBIAN-CVE-2023-37208

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13...

7.8CVSS7.6AI score0.00234EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/05 9:15 a.m.13 views

CVE-2023-37208

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13...

7.8CVSS7.5AI score0.00234EPSS
SaveExploits0References8
AlpineLinux
AlpineLinux
added 2023/07/05 8:54 a.m.25 views

CVE-2023-37208

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13...

7.8CVSS7.9AI score0.00234EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2023/07/05 6:47 a.m.40 views

CVE-2023-37208

The Mozilla Foundation Security Advisory describes this flaw as: When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code...

7.8CVSS7AI score0.00234EPSS
SaveExploits0References4
Rows per page
Query Builder