Lucene search
+L

22213 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/25 12:00 a.m.•7 views

CVE-2021-30193: Out-of-bounds Write

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write...

9.8CVSS5.7AI score0.01119EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/25 12:00 a.m.•7 views

CVE-2021-30191: Buffer Copy without Checking Size of Input

CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input...

7.5CVSS5.8AI score0.0099EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/25 12:00 a.m.•8 views

CVE-2021-30190: Missing Authentication for Critical Function

CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control...

9.8CVSS5.7AI score0.01391EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/25 12:00 a.m.•24 views

3S-Smart Software Solutions CODESYS V2 Web-server buffer error vulnerability

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An out-of-bounds read vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the...

9.1CVSS5.9AI score0.01119EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/05/25 12:00 a.m.•24 views

3S-Smart Software Solutions CODESYS V2 Web-server buffer error vulnerability

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An out-of-bounds write vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with a...

9.8CVSS5.9AI score0.01119EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/05/25 12:00 a.m.•23 views

3S-Smart Software Solutions CODESYS V2 Web-Server security vulnerabilities

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. A buffer overflow vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the help ...

7.5CVSS6AI score0.0099EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/05/25 12:00 a.m.•24 views

3S-Smart Software Solutions CODESYS V2 Web-Server security vulnerabilities

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. A security check bypass vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker to bypas...

9.8CVSS5.7AI score0.01119EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/05/25 12:00 a.m.•25 views

CODESYS V2 Web-server: Buffer error vulnerability

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. A buffer overflow vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the help ...

9.8CVSS6.4AI score0.01236EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2021/05/25 12:00 a.m.•12 views

embedded web server software Stack Buffer Overflow

The vulnerability of the webSettingProfileGeneral function in the embedded web server software is related to buffer overflows in the stack due to deficiencies in input data processing. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or caus...

9.1CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/25 12:00 a.m.•16 views

MtcSetDataItem Function Privilege Escalation

The vulnerability of the MtcSetDataItem function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and cause service failures using a specially crafted package...

7.8CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/25 12:00 a.m.•15 views

MtcSetDataItemt Function Privilege Escalation

The vulnerability of the MtcSetDataItemt function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute system commands of the operating system...

10CVSS5.6AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/25 12:00 a.m.•23 views

embedded web server Heap Buffer Overflow Privilege Escalation

The vulnerability of the webSetFrmUpgrade function in the embedded web server is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions using a specially crafte...

6.8CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/25 12:00 a.m.•16 views

embedded web server software Stack Buffer Overflow

The vulnerability of the webSettingProfileGeneral function in the embedded web server software is related to buffer overflows in the stack due to deficiencies in input data processing. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or caus...

9.1CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/25 12:00 a.m.•16 views

embedded web server software Stack Buffer Overflow

The vulnerability of the webSetWizardVariablesl function in the embedded web server software is related to buffer overflows in the stack due to deficiencies in input data processing. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or cause...

9.1CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/25 12:00 a.m.•24 views

webSetSerialOpModel Buffer Overflow

The vulnerability of the webSetSerialOpModel function in the embedded software of the web server is related to buffer overflows in the stack due to deficiencies in input data processing. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or...

9.1CVSS6.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/25 12:00 a.m.•22 views

webSetEMailAlert Privilege Escalation Command Injection

The vulnerability of the webSetEMailAlert function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute system commands of the operating system...

10CVSS5.6AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2021/05/25 12:00 a.m.•471 views

Joomla 3.0.x < 3.9.27 Multiple Vulnerabilities (5836-joomla-3-9-27)

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.0.x prior to 3.9.27. It is, therefore, affected by multiple vulnerabilities. - HTML was missing in the executable block list of MediaHelper::canUpload, leading to XSS attack vectors. CVE-2021-260...

6.5CVSS6.4AI score0.00808EPSS
SaveExploits1References7
osv_ubuntu
osv_ubuntu
•added 2021/05/25 12:00 a.m.•15 views

UBUNTU-CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.7CVSS7.4AI score0.53461EPSS
SaveExploits11References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/25 12:00 a.m.•7 views

CVE-2021-30189: Out-of-bounds Write

CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow...

9.8CVSS5.7AI score0.01236EPSS
SaveExploits0References2
ArchLinux
ArchLinux
•added 2021/05/25 12:00 a.m.•218 views

[ASA-202105-26] gupnp: information disclosure

Arch Linux Security Advisory ASA-202105-26 ========================================== Severity: Medium Date : 2021-05-25 CVE-ID : CVE-2021-33516 Package : gupnp Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-1985 Summary ======= The package gupnp before versi...

8.1CVSS0.7AI score0.01084EPSS
SaveExploits0References6
Rows per page
Query Builder