Lucene search
+L

3644 matches found

CNNVD
CNNVD
•added 2022/06/23 12:00 a.m.•16 views

Bosch Ethernet switch PRA-ES8P2S 安全漏洞

Bosch Ethernet switch PRA-ES8P2S is a switch from Bosch, Germany.Bosch Ethernet switch PRA-ES8P2S Web service elevation of privilege vulnerability can be exploited by remote attackers to submit special requests that can elevate privileges to execute arbitrary commands in root context...

10CVSS6.1AI score0.00774EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/06/22 12:00 a.m.•55 views

IBM Robotic Process Automation Information Disclosure Vulnerability (CNVD-2022-55661)

IBM Robotic Process Automation is a robotic process automation product from IBM, Inc. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation version 21.0.2 is vulnerable to an information disclosure vulnerability th...

5.5CVSS1.9AI score0.00223EPSS
SaveExploits0References1
Broadcom
Broadcom
•added 2022/06/22 12:00 a.m.•51 views

BSA-2022-1980

Security Advisory ID : BSA-2022-1980 Component : Oracle Java SE Revision : 1.1 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.01; Oracle GraalVM...

5.3CVSS4.9AI score0.02896EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:10 p.m.•10 views

Malicious code in lx-web-service-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a9676ed22e29be42ae7faaceed16dad8d08e78ad4660bf04037f182f09857dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv-mal
osv-mal
•added 2022/06/20 8:10 p.m.•14 views

MAL-2022-4432 Malicious code in lx-web-service-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a9676ed22e29be42ae7faaceed16dad8d08e78ad4660bf04037f182f09857dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 5:15 p.m.•19 views

CVE-2022-22414

IBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service configuration credentials from system memory. IBM X-Force ID: 223026...

5.5CVSS5.8AI score0.00223EPSS
SaveExploits0References2
NVD
NVD
•added 2022/06/20 5:15 p.m.•36 views

CVE-2022-22414

IBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service configuration credentials from system memory. IBM X-Force ID: 223026...

5.5CVSS0.00223EPSS
SaveExploits0References2
Prion
Prion
•added 2022/06/20 5:15 p.m.•24 views

Design/Logic Flaw

IBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service configuration credentials from system memory. IBM X-Force ID: 223026...

2.1CVSS5.1AI score0.00223EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2022/06/20 6:15 a.m.•21 views

CVE-2021-45918

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without...

7.8CVSS0.015EPSS
SaveExploits0References1
Prion
Prion
•added 2022/06/20 6:15 a.m.•27 views

Heap overflow

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without...

7.8CVSS7.7AI score0.015EPSS
SaveExploits0References1
CVE
CVE
•added 2022/06/20 5:30 a.m.•76 views

CVE-2021-45918

CVE-2021-45918 affects NHI’s health insurance web service component, where insufficient validation of input string length can cause a heap-based buffer overflow. The vulnerability is exploitable remotely over a network with no authentication and low attack complexity, potentially flooding the pro...

7.8CVSS7.7AI score0.015EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2022/06/20 5:16 a.m.•10 views

CVE-2021-45918

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without...

7.8CVSS5.9AI score0.015EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/06/20 12:00 a.m.•14 views

PT-2022-12468 · Unknown · Nhi'S Health Insurance Web Service

Name of the Vulnerable Software and Affected Versions: NHI's health insurance web service component affected versions not specified Description: The issue is related to insufficient validation for input string length in the health insurance web service component, which can lead to a heap-based...

7.8CVSS7.6AI score0.015EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/06/20 12:00 a.m.•12 views

PT-2022-15417 · Ibm · Ibm Robotic Process Automation

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation version 21.0.2 Description: The issue allows a local user to obtain sensitive web service configuration credentials from system memory. Recommendations: For IBM Robotic Process Automation version 21.0.2, at the...

5.5CVSS4.9AI score0.00223EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/20 12:00 a.m.•5 views

CVE-2022-22414: Undefined Security Weakness

IBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service configuration credentials from system memory. IBM X-Force ID: 223026...

5.5CVSS6AI score0.00223EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/20 12:00 a.m.•7 views

CVE-2021-45918: Heap-based Buffer Overflow

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without...

7.8CVSS7.4AI score0.015EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/06/20 12:00 a.m.•21 views

IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from IBM, Inc. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation version 21.0.2 is vulnerable to an information disclosure vulnerability th...

5.5CVSS5.6AI score0.00223EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2022/06/17 12:00 a.m.•10 views

CVE-2022-22414

IBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service configuration credentials from system memory. IBM X-Force ID: 223026...

5.5CVSS6AI score0.00223EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•43 views

Siemens SINEMA Remote Connect Server Access Control Error Vulnerability (CNVD-2022-45225)

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.An access control error vulnerability exists in Siemens SINEMA Remote Connect Server, which stems from the...

5.3CVSS3AI score0.00835EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•46 views

Siemens SINEMA Remote Connect Server Access Control Error Vulnerability (CNVD-2022-45224)

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.An access control error vulnerability exists in Siemens SINEMA Remote Connect Server, which stems from the...

6.5CVSS3.5AI score0.00681EPSS
SaveExploits0References1
Rows per page
Query Builder