Lucene search
+L

976 matches found

OSV
OSV
added 2021/04/12 5:15 p.m.4 views

CVE-2020-15734

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

5.5CVSS6.1AI score0.00157EPSS
Exploits0References1
Prion
Prion
added 2021/04/12 5:15 p.m.22 views

Design/Logic Flaw

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

2.1CVSS5.5AI score0.00157EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/04/12 4:50 p.m.44 views

CVE-2020-15734

CVE-2020-15734 describes an Origin Validation Error in Bitdefender Safepay that lets an attacker manipulate the browser’s file upload capability to access other files in the same directory or sub-directories. Affected: Bitdefender Safepay versions prior to 25.0.7.29. Root cause: origin validation...

5.5CVSS5.4AI score0.00157EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/12 4:50 p.m.20 views

CVE-2020-15734 Same-origin policy vulnerability in Bitdefender Safepay

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

5.5CVSS5.5AI score0.00157EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/04/12 12:0 a.m.7 views

Bitdefender SafePay 访问控制错误漏洞

Bitdefender SafePay is a secure browser. The Access Control Error vulnerability, which previously existed in Bitdefender Safepay version 25.0.7.29, stems from an Authentication Error vulnerability in Bitdefender Safepay, which can be exploited by an attacker to manipulate the browser's file uploa...

5.5CVSS5.6AI score0.00157EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2021/01/27 1:59 p.m.43 views

Warning Issued Over Hackable ADT's LifeShield Home Security Cameras

Newly discovered security vulnerabilities in ADT's Blue formerly LifeShield home security cameras could have been exploited to hijack both audio and video streams. The vulnerabilities tracked as CVE-2020-8101 were identified in the video doorbell camera by Bitdefender researchers in February 2020...

8.8CVSS0.6AI score0.01219EPSS
Exploits0
CNVD
CNVD
added 2020/12/18 12:0 a.m.9 views

Bitdefender Hypervisor Introspection Code Execution Vulnerability

Bidefender Hypervisor Introspection HVI is a software from Bidefender Romania that checks the memory safety of running virtual machines at the Hypervisor layer using the VM self-test APIs of the Xen and KVM hypervisors. The software blocks code execution in abnormal memory by virtualizing the...

7.8CVSS8.1AI score0.00289EPSS
Exploits0References1
NVD
NVD
added 2020/12/17 5:15 p.m.25 views

CVE-2020-15294

Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condition where the generated code would...

7.8CVSS7.9AI score0.00289EPSS
Exploits0References1
OSV
OSV
added 2020/12/17 5:15 p.m.6 views

CVE-2020-15294

Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condition where the generated code would...

7CVSS7.2AI score0.00289EPSS
Exploits0References1
Prion
Prion
added 2020/12/17 5:15 p.m.21 views

Race condition

Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condition where the generated code would...

4.4CVSS7.2AI score0.00289EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/17 4:50 p.m.28 views

CVE-2020-15293 Memory corruption in Bitdefender Hypervisor Introspection (VA-9336)

Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input validation may lead to denial of service conditions...

6.1CVSS6.4AI score0.00271EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/12/17 4:50 p.m.28 views

CVE-2020-15294 Compiler Optimization Removal or Modification of Security-Critical Code vulnerability in Bitdefender Hypervisor Introspection (VA-9339)

Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condition where the generated code would...

7.8CVSS7.9AI score0.00289EPSS
Exploits0References1
CVE
CVE
added 2020/12/17 4:50 p.m.52 views

CVE-2020-15294

CVE-2020-15294 refers to a vulnerability in Bitdefender Hypervisor Introspection (HVI) prior to version 1.132.2. The root cause is a compiler optimization issue in IntPeParseUnwindData(), which can trigger multiple dereferences of the same pointer—potentially when that pointer is memory-mapped fr...

7.8CVSS7.3AI score0.00289EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/17 4:45 p.m.18 views

CVE-2020-15292 Lack of validation on data read from guest memory in Bitdefender HVI (VA-9333)

Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymExpandSymbol and IntLixTaskDumpTree may lead to out-of-bounds read or it could cause DoS due to integer-overflor IntPeGetDirectory, TOCTOU IntPeParseUnwindData or insufficie...

5.5CVSS5.5AI score0.00271EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/17 12:0 a.m.7 views

Bitdefender Hypervisor Introspection Input Validation Error Vulnerability

Bitdefender Hypervisor Introspection is a Hypervisor Introspection HVI security solution from Bitdefender Romania. It protects business-sensitive data before it is exposed by detecting and blocking cyberattacks in real-time. Bitdefender Hypervisor Introspection suffers from an input validation...

5.5CVSS6.1AI score0.00271EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/17 12:0 a.m.12 views

Bitdefender Hypervisor Introspection 安全漏洞

Bidefender Hypervisor Introspection HVI is a software from Bidefender Romania that checks the memory safety of running virtual machines at the Hypervisor layer using the VM self-test APIs of the Xen and KVM hypervisors. The software blocks code execution in abnormal memory by virtualizing the...

7.8CVSS7.7AI score0.00289EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/17 12:0 a.m.7 views

Bitdefender Hypervisor Introspection Input Validation Error Vulnerability

Bitdefender Hypervisor Introspection is a Hypervisor Introspection HVI security solution from Bitdefender Romania. It protects business-sensitive data before it is exposed by detecting and blocking cyberattacks in real-time. Bitdefender Hypervisor Introspection suffers from an Input Validation...

6.1CVSS6.1AI score0.00271EPSS
Exploits0References2
CNVD
CNVD
added 2020/12/16 12:0 a.m.44 views

Bitdefender Antivirus Plus Access Control Error Vulnerability

Bitdefender Antivirus Plus is a suite of antivirus software from the Romanian company Bitdefender that provides mainly cyber threat detection and ransomware protection. An access control error vulnerability exists in versions prior to Bitdefender Antivirus Plus 25.0.7.29, which stems from a sourc...

6.5CVSS6.6AI score0.00566EPSS
Exploits0References1
NVD
NVD
added 2020/12/14 5:15 p.m.22 views

CVE-2020-15733

An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29...

6.5CVSS6.3AI score0.00566EPSS
Exploits0References1
OSV
OSV
added 2020/12/14 5:15 p.m.5 views

CVE-2020-15733

An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29...

6.5CVSS6.6AI score0.00566EPSS
Exploits0References1
Rows per page
Query Builder