Lucene search
K

31234 matches found

BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.3 views

The vulnerability of the read_section function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the readsection function in the dwarf2.c component of the GNU Binutils development environment relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created ELF file...

7.8CVSS7AI score0.01555EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.5 views

The vulnerability of the bfd_section_from_shdr function in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the bfdsectionfromshdr function in the bfd/elf.c component of the GNU Binutils development environment is related to insufficient input validation. Exploiting this vulnerability allows an attacker to cause service failures remotely...

7.8CVSS6.4AI score0.02057EPSS
Exploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.6 views

The vulnerability of the /bfd/pef.c component of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the /bfd/pef.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure through the use of a specially created file...

7.8CVSS6.4AI score0.01156EPSS
Exploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.3 views

The vulnerability of the bfd_cache_close function in the bfd/cache.c component of the GNU Binutils development environment allows a perpetrator to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the bfdcacheclose function in the bfd/cache.c component of the GNU Binutils development environment is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

10CVSS7AI score0.01989EPSS
Exploits0References6Affected Software2
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.4 views

PT-2023-7106 · NetGear · Netgear Cax30

Name of the Vulnerable Software and Affected Versions: NETGEAR CAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30 routers. The specific flaw exists within the sso binary, resulting fr...

8.8CVSS7.3AI score0.00756EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2023/11/13 12:0 a.m.16 views

Extreme Networks ExtremeXOS Web Detection

Binary data extremenetworksexoswebdetect.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/13 12:0 a.m.7 views

IBM WebSphere Application Server Liberty Installed (Linux / Unix)

Binary data ibmwebsphereapplicationserverlibertynixinstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/10 12:0 a.m.12 views

SolarWinds Network Configuration Manager Installed (Windows)

Binary data solarwindsnetworkconfigurationmanagerwininstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/10 12:0 a.m.11 views

Veeam One Installed (Windows)

Binary data veeamonewininstalled.nbin...

7.3AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2023/11/09 6:30 a.m.31 views

chromedriver Command Injection vulnerability

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

7.5CVSS7.9AI score0.02233EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2023/11/09 6:30 a.m.0 views

GHSA-HM92-VGMW-QFMX chromedriver Command Injection vulnerability

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

5.6CVSS6AI score0.02233EPSS
Exploits1References5
Cvelist
Cvelist
added 2023/11/09 5:0 a.m.20 views

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

5.6CVSS8AI score0.02233EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2023/11/08 3:38 p.m.3 views

mariadb: use-after-poison in Binary_string::free_buffer

A flaw was found in the MariaDB Server. It contains a use-after-free via the component,Binarystring::freebuffer at /sql/sqlstring.h, affecting availability...

7.5CVSS7.3AI score0.0214EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2023/11/08 12:0 a.m.39 views

Atlassian Confluence Authentication Bypass (CONFSERVER-93142) (Direct Check)

Binary data confluencecve-2023-22518.nbin...

10CVSS9.8AI score0.99999EPSS
Exploits14References3
The Hacker News
The Hacker News
added 2023/11/07 8:59 a.m.78 views

SideCopy Exploiting WinRAR Flaw in Attacks Targeting Indian Government Entities

The Pakistan-linked threat actor known as SideCopy has been observed leveraging the recent WinRAR security vulnerability in its attacks targeting Indian government entities to deliver various remote access trojans such as AllaKore RAT, Ares RAT, and DRat. Enterprise security firm SEQRITE describe...

7.8CVSS7.5AI score0.97798EPSS
Exploits49
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:0 a.m.6 views

HPE OneView Detection

Binary data hpeoneviewdetect.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:0 a.m.340 views

HPE OneView Authentication Bypass (CVE-2023-30908)

Binary data hpeoneviewcve-2023-30908.nbin...

9.8CVSS9.7AI score0.01216EPSS
Exploits0References2
Snyk
Snyk
added 2023/11/06 10:0 p.m.0 views

Command Injection

Overview chromedriver is a ChromeDriver for Selenium Affected versions of this package are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attack...

7.5CVSS7.3AI score0.02233EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.277 views

Cisco IOS XE Unauthenticated Remote Command Execution (CVE-2023-20198) (Direct Check)

Binary data ciscoiosxeCVE-2023-20198directcheck.nbin...

10CVSS9.8AI score0.99571EPSS
Exploits26References4
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.17 views

Rocky Linux 8 : qt5 (RLSA-2022:7482)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7482 advisory. - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not...

7.8CVSS7.3AI score0.00334EPSS
Exploits0References4
Rows per page
Query Builder