Lucene search
K

11 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/10 9:40 a.m.2 views

Malicious code in bdc-materials (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d108cafc0d7325ba2087b67333527f3ac25c28fb5eae98206051d6777be29f6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References1
Microsoft KB
Microsoft KB
added 2024/09/10 7:0 a.m.98 views

Description of the security update for SharePoint Server 2019: September 10, 2024 (KB5002639)

Description of the security update for SharePoint Server 2019: September 10, 2024 KB5002639 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability, and Microsoft SharePoint Server denial of service vulnerability. To learn more about the...

8.8CVSS7.6AI score0.63887EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2022/05/20 11:1 p.m.23 views

CVE-2019-13290

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fzappenddisplaynode located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node...

7.8CVSS7.9AI score0.01081EPSS
Exploits1References1
Openbugbounty
Openbugbounty
added 2022/03/22 4:1 p.m.11 views

bdc-online.com Cross Site Scripting vulnerability OBB-2441440

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploits0
Oracle linux
Oracle linux
added 2021/06/15 12:0 a.m.221 views

Unbreakable Enterprise kernel security update

5.4.17-2102.202.5 - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 CVE-2021-23133 - dm ioctl: fix out of bounds array access when no devices Mikulas Patocka Orabug: 32860491 CVE-2021-31916 - uek-rpm: update kABI lists for the new symbols Saeed...

8.1CVSS8.1AI score0.00305EPSS
Exploits1
Veracode
Veracode
added 2020/12/06 4:18 a.m.25 views

Buffer Overflow

MuPDF is vulnerable to buffer overflow. This vulnerability allow attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node...

7.8CVSS7.4AI score0.01081EPSS
Exploits1References11Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/09/09 12:0 a.m.54 views

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1382)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-14314: Fixed potential negative array index in dosplit in ext4 bsc1173798. - CVE-2020-14386: Fixed an overflow in afpacket, which could lead to local privilege...

7.8CVSS7AI score0.00635EPSS
Exploits1References44
Prion
Prion
added 2019/07/04 10:15 p.m.20 views

Heap overflow

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fzappenddisplaynode located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node...

6.8CVSS7.9AI score0.01081EPSS
Exploits1References7Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:0 a.m.70 views

Microsoft SharePoint BDC Import Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the Business Data Connectivity Service Application. The issue results from the lack o...

7.2CVSS3.5AI score0.25766EPSS
Exploits29References1
Cvelist
Cvelist
added 2017/09/03 7:0 p.m.16 views

CVE-2017-10793

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAN TCP service on port 61001 with the bdctest account and the bdctest password, which allows remote attackers to obtain sensitive...

7.9AI score0.00494EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2015/03/25 12:0 a.m.7 views

IT-Grundschutz M4.334: SMB Message Signing und Samba

IT-Grundschutz M4.334: SMB Message Signing und Samba Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4334.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.334 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks GmbH,...

7.3AI score
Exploits0References1
Rows per page
Query Builder