Lucene search
+L

1224 matches found

Redos
Redos
added 2021/12/24 12:0 a.m.17 views

ROS-2-872

2.872 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...

5.5CVSS6.3AI score0.02642EPSS
SaveExploits0
Redos
Redos
added 2021/12/24 12:0 a.m.16 views

ROS-2-1514

2.1514 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...

7.3AI score0.02642EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.8 views

The vulnerability in the implementation of the SDP service for the Bluetooth protocol stack for the Linux BlueZ operating system allows a attacker to disclose protected information.

The vulnerability of the SDP service implementation for the Bluetooth protocol stack for the Linux BlueZ operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

6.5CVSS6.5AI score0.00936EPSS
SaveExploits1References7Affected Software4
Cvelist
Cvelist
added 2021/12/08 12:1 p.m.18 views

CVE-2021-26103

An insufficient verification of data authenticity vulnerability CWE-345 in the user interface of FortiProxy verison 2.0.3 and below, 1.2.11 and below and FortiGate verison 7.0.0, 6.4.6 and below, 6.2.9 and below of SSL VPN portal may allow a remote, unauthenticated attacker to conduct a cross-sit...

6.3CVSS9AI score0.00422EPSS
SaveExploits0References1
Fortinet
Fortinet
added 2021/12/07 12:0 a.m.33 views

Protect

An insufficient verification of data authenticity vulnerability CWE-345 in the user interface of FortiProxy and FortiGate SSL VPN portal may allow a remote, unauthenticated attacker to conduct a cross-site request forgery CSRF attack . Only SSL VPN in web mode or full mode are impacted by this...

5.1CVSS8.4AI score0.00422EPSS
SaveExploits0Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/11/11 12:0 a.m.70 views

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2021-2663)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that received...

9.8CVSS7.5AI score0.78684EPSS
SaveExploits28References16
OSV
OSV
added 2021/11/10 10:15 p.m.4 views

DEBIAN-CVE-2020-23906

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.5CVSS6.4AI score0.00355EPSS
SaveExploits1References1
OSV
OSV
added 2021/11/10 10:15 p.m.18 views

CVE-2020-23906

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.5CVSS6.6AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/11/10 10:15 p.m.27 views

CVE-2020-23906

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.5CVSS6.7AI score0.00355EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/11/10 9:26 p.m.28 views

CVE-2020-23906

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.3AI score0.00355EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2021/11/10 9:26 p.m.45 views

CVE-2020-23906

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

5.5CVSS5.2AI score0.00355EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.6 views

FFmpeg 数据伪造问题漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg Ffmpeg team. FFmpeg N-98388-g76a3ee996b contains a security vulnerability that could be exploited by an attacker to cause a denial of service DoS via a crafted audio file due to insufficient...

5.5CVSS7.7AI score0.00355EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/10/31 12:0 a.m.10 views

HarmonyOS Security Bypass Vulnerability (CNVD-2021-87048)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security bypass vulnerability exists in HarmonyOS versions prior to 2.0, where a component of HarmonyOS does not adequately validate data authenticity...

5.5CVSS6.6AI score0.00105EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/28 1:15 p.m.6 views

CVE-2021-22460

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...

5.5CVSS5.8AI score0.00105EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/28 1:15 p.m.21 views

Security feature bypass

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...

2.1CVSS5.5AI score0.00105EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/10/28 12:31 p.m.60 views

CVE-2021-22460

HarmonyOS vulnerability CVE-2021-22460 involves insufficient verification of data authenticity in a HarmonyOS component. The issue enables a local attacker to bypass control mechanisms. Affected versions are HarmonyOS prior to 2.0 (per connected Red Hat/CNVD/CNNVD entries). The exact vulnerable c...

5.5CVSS5.4AI score0.00105EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/28 12:31 p.m.31 views

CVE-2021-22460

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to bypass the control mechanism...

5.7AI score0.00105EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/28 12:0 a.m.7 views

Huawei HarmonyOS 数据伪造问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security bypass vulnerability exists in HarmonyOS versions prior to 2.0, where a component of HarmonyOS does not adequately validate data authenticity...

5.5CVSS5.7AI score0.00105EPSS
SaveExploits0References2
HackRead
HackRead
added 2021/10/12 9:33 a.m.17 views

Why You Should Use Dynamic QR Code Generator

By Owais Sultan To make your brand more authentic, you need to have a dynamic QR code generator generating customized codes for your brand. This is a post from HackRead.com Read the original post: Why You Should Use Dynamic QR Code Generator...

2.6AI score
SaveExploits0
Huntr
Huntr
added 2021/10/05 2:26 p.m.16 views

Use of a Broken or Risky Cryptographic Algorithm in anonaddy/anonaddy

Description MD5 and SHA-1 are popular cryptographic hash algorithms often used to verify the integrity of messages and other data. Recent advances in cryptanalysis have discovered weaknesses in both algorithms. Consequently, MD5 and SHA-1 should no longer be relied upon to verify the authenticity...

0.2AI score
SaveExploits0References2
Rows per page
Query Builder