Lucene search
+L

626 matches found

CNNVD
CNNVD
added 2021/10/26 12:00 a.m.7 views

Penguin Aurora TV Box 41502 安全漏洞

Skyworth Digital Penguin Aurora Tv Box is a high-end network HD set-top box from China's Skyworth Digital, produced by Tencent Video in conjunction with Skyworth Digital. A security vulnerability exists in Penguin Aurora TV Box 41502, which can be exploited by an attacker to gain unauthorized...

10CVSS8.1AI score0.00961EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2021/09/27 1:46 p.m.13 views

aurora-pm.co.uk Cross Site Scripting vulnerability OBB-2150794

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.11 views

The vulnerability of the glibc library in the Aurora operating system, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the glibc library in the Aurora operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.1CVSS7AI score0.03522EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.11 views

The vulnerability of the `glob` function in the glibc library of the Aurora operating system, related to the use of memory after it is freed, allows a hacker to increase their privileges and execute arbitrary code.

The vulnerability of the glob function in the glibc library of the Aurora operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7CVSS7.1AI score0.00535EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.10 views

The vulnerability of the PackageKit package for the Aurora operating system, related to authentication flaws, allows attackers to escalate their privileges.

The vulnerability of PackageKit in the Aurora operating system is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to increase their privileges...

5.5CVSS5.9AI score0.00443EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.11 views

The vulnerability of the uglify-js library in the Aurora application software involves an uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerability of the uglify-js library in Aurora application software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to deny services through the use of a specially crafted regular expression...

7.5CVSS7.2AI score0.02206EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.11 views

The vulnerability of the Aurora Center’s application software library involves uncontrolled changes to object prototypes’ attributes, allowing attackers to execute “prototype pollution” attacks.

The vulnerability of the Aurora Application Programming Library involves uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability allows a remote attacker to execute an “infection of the prototype” attack...

6.8CVSS7.2AI score0.01931EPSS
SaveExploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.7 views

The vulnerability of the Aurora Application Programming Library’s ini library involves uncontrolled changes to object prototype attributes, allowing attackers to execute “prototype pollution” attacks.

The vulnerability of the Aurora Application Programming Library’s ini configuration library is related to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype pollution” attack remotely...

7.5CVSS6.8AI score0.03612EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.18 views

The vulnerability of the Lodash application library of Aurora Center lies in the failure to take measures to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary commands.

The vulnerability of the Lodash application library in Aurora Software Solutions relates to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

7.2CVSS7.3AI score0.21333EPSS
SaveExploits3References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.8 views

The vulnerability of the Aurora Center’s application software library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Aurora Center’s application software library, related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.7AI score0.0472EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.13 views

The vulnerability of the y18n application library at Avora Center lies in the uncontrolled modification of object prototypes’ attributes, allowing attackers to execute “prototype pollution” attacks.

The vulnerability of the y18n application library in Aurora Software Center is related to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype contamination” attack remotely...

7.5CVSS6.8AI score0.69377EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.12 views

The vulnerability of the Apache Thrift application programming library at Aurora Center, related to insufficient input data validation, allows attackers to trigger service failures.

The vulnerability of the Apache Thrift application programming interface at Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.9AI score0.06849EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.12 views

The vulnerability of the set function in the object-path library of the Aurora Application Software Center, related to uncontrolled changes to prototype attributes of objects, allows attackers to execute a “prototype pollution” attack.

The vulnerability of the set function in the object-path library of the Aurora application software is related to uncontrolled changes in object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute an “infection of the prototype” attack...

9.8CVSS7.3AI score0.01546EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.11 views

The vulnerability of the toNumber, trim, and trimEnd functions in the lodash library for application software from Aurora Center involves an uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerability of the toNumber, trim, and trimEnd functions in the lodash library for application software from Aurora Center involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.6AI score0.07336EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.19 views

The vulnerability of the GJSON library in Aurora Application Software, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the GJSON library in Aurora software applications is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially crafted GET request...

7.5CVSS7.2AI score0.01387EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.10 views

The vulnerability of the PostCSS library in Aurora Application Software, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the PostCSS application library in Aurora Software Center, related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.3CVSS6.6AI score0.0354EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.14 views

The vulnerability of the yargs-parser library in application software of Aurora Center involves uncontrolled changes to object prototypes’ attributes, allowing attackers to execute “prototype pollution” attacks.

The vulnerability of the yargs-parser library in application software developed by Avora Center relates to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype compromise” attack...

5.3CVSS6.8AI score0.00514EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.11 views

The vulnerability of the kind-of application software library “Aurora Center” is related to insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the kind-of application software library Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.4AI score0.02342EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.14 views

The vulnerability of the GoLang development tool for application software “Aurora Center” relates to the execution of a loop with an unavailable exit condition, allowing attackers to cause service failures.

The vulnerability of the GoLang development tool used by Aurora Application Software involves executing a loop with an exit condition that is not met. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.8AI score0.0473EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:00 a.m.13 views

The vulnerability of the dot-prop library in application software, Aurora Center, arises from uncontrolled changes to object prototypes’ attributes. This allows attackers to execute “prototype pollution” attacks.

The vulnerability of the dot-prop library in application software, Aurora Center, involves uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype contamination” attack...

7.5CVSS7.6AI score0.03079EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder