Lucene search
+L

567 matches found

Cvelist
Cvelist
added 2021/03/25 8:33 p.m.24 views

CVE-2021-29094 ArcGIS Server image service and raster analytics security update: buffer overflow

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.4CVSS7.2AI score0.01002EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/25 8:32 p.m.62 views

CVE-2021-29093

Esri ArcGIS Server (10.8.1 and earlier) contains a use-after-free vulnerability in the parser for a specially crafted file, allowing an authenticated attacker with specialized permissions to execute arbitrary code in the service account. Affected product is Esri ArcGIS Server; root cause is a use...

6.8CVSS6.7AI score0.00948EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/25 8:32 p.m.23 views

CVE-2021-29093 ArcGIS Server image service and raster analytics security update: use-after-free

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.4CVSS7AI score0.00948EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/03/25 12:00 a.m.7 views

PT-2021-18081 · Esri · Esri Arcgis Server

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server versions 10.8.1 and earlier Description: A use-after-free issue occurs when parsing a specially crafted file, allowing an authenticated attacker with specialized permissions to achieve arbitrary code execution in the contex...

6.8CVSS6.7AI score0.00948EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/25 12:00 a.m.7 views

Esri ArcGIS Server 资源管理错误漏洞

ArcGIS Server is the back-end server software component of ArcGIS Enterprise from Esri that makes your geographic information available to others in your organization, and optionally makes it available to anyone with an Internet connection. A post-release reuse vulnerability exists in Esri ArcGIS...

6.8CVSS6.4AI score0.00948EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/03/25 12:00 a.m.7 views

PT-2021-18082 · Esri · Esri Arcgis Server

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server versions 10.8.1 and earlier Description: The issue arises from multiple buffer overflow vulnerabilities when parsing a specially crafted file, allowing an authenticated attacker with specialized permissions to achieve...

6.8CVSS7AI score0.01002EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/25 12:00 a.m.9 views

Esri Arcgis Server 代码问题漏洞

ArcGIS Server is the back-end server software component of ArcGIS Enterprise from Esri that makes your geographic information available to others in your organization, and optionally makes it available to anyone with an Internet connection. A buffer overflow vulnerability exists in Esri ArcGIS...

6.8CVSS6.7AI score0.01002EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/03/25 12:00 a.m.9 views

PT-2021-18083 · Esri · Esri Arcgis Server

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server versions 10.8.1 and earlier Description: The issue arises from multiple uninitialized pointer vulnerabilities when parsing a specially crafted file. This allows an authenticated attacker with specialized permissions to...

6.8CVSS6.9AI score0.00883EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/03/25 12:00 a.m.12 views

Esri 多款产品缓冲区错误漏洞

ESRI ArcGIS Enterprise and so on are the products of the U.S. Environmental Systems Research Institute ESRI, Inc. ArcGIS Enterprise is a set of GIS geographic information system basic software system. Esri Arcgis Server and so on are the products of the U.S. Esri Esri, Inc. Server is a Web-orient...

7.8CVSS6.8AI score0.01952EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/03/25 12:00 a.m.18 views

Esri ArcGIS Server 缓冲区错误漏洞

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A buffer overflow vulnerability exists in Esri ArcGIS Server 10.8.1 and earlier, which can be exploited by an attacker to achieve arbitrar...

6.8CVSS6.8AI score0.00883EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/03/16 4:00 a.m.5 views

CVE-2021-29094

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.8CVSS7.5AI score0.01002EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/03/16 4:00 a.m.5 views

CVE-2021-29095

Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.8CVSS7.2AI score0.00883EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/16 4:00 a.m.6 views

CVE-2021-29093

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.8CVSS7.3AI score0.00948EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/02/06 12:00 a.m.7 views

ArcGIS Server has an Arbitrary File Read Vulnerability

ArcGIS Server is ESRI released to provide Web-oriented spatial data services for an enterprise-class GIS software platform. ArcGIS Server has an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2020/12/28 12:00 a.m.11 views

Esri Arcgis Server Server-Side Request Forgery Vulnerability

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A security vulnerability exists in Esri ArcGIS Server versions prior to 10.8, which stems from a configuration that does not adequately...

9.8CVSS6.7AI score0.01644EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/26 12:15 a.m.26 views

CVE-2020-35712

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations...

9.8CVSS9.4AI score0.01644EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/26 12:15 a.m.9 views

CVE-2020-35712

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations...

9.8CVSS7.3AI score0.01644EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/12/25 11:46 p.m.28 views

CVE-2020-35712

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations...

9.4AI score0.01644EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2020/12/25 12:00 a.m.12 views

Esri Arcgis Server 代码问题漏洞

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A security vulnerability exists in Esri ArcGIS Server versions prior to 10.8, which stems from a configuration that does not adequately...

9.8CVSS7.3AI score0.01644EPSS
SaveExploits0References4
CNVD
CNVD
added 2019/11/21 12:00 a.m.2 views

Unauthorized Access Vulnerability in ArcGIS Server

ArcGIS Server is ESRI released to provide Web-oriented spatial data services for an enterprise-class GIS software platform. An unauthorized access vulnerability exists in ArcGIS Server, which can be exploited by an attacker to obtain sensitive information...

6.7AI score
SaveExploits0
Rows per page
Query Builder