Lucene search
+L

14664 matches found

Github Security Blog
Github Security Blog
added 2023/04/14 4:14 p.m.32 views

matrix-js-sdk vulnerable to invisible eavesdropping in group calls

Impact An attacker present in a room where an MSC3401 group call is taking place can eavesdrop on the video and audio of participants using matrix-js-sdk, without their knowledge. To affected matrix-js-sdk users, the attacker will not appear to be participating in the call. This attack is possibl...

5.3CVSS5.4AI score0.00543EPSS
SaveExploits0References5Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/04/14 12:00 a.m.32 views

Schneider Electric APC Easy UPS Online getMacAddressByIP Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric APC Easy UPS Online. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getMacAddressByIP function. The issue results from the lack o...

9.8CVSS9.3AI score0.01223EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/13 7:15 a.m.35 views

CVE-2022-25739

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call...

7.5CVSS7.5AI score0.00383EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/12 9:15 p.m.3 views

DEBIAN-CVE-2023-1992

RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.7AI score0.0462EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2023/04/12 2:12 a.m.7 views

SUSE CVE-2023-1981

A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash...

5.5CVSS5.6AI score0.00386EPSS
SaveExploits1References13
UbuntuCve
UbuntuCve
added 2023/04/12 12:00 a.m.38 views

CVE-2023-1981

A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash...

5.5CVSS6.5AI score0.00386EPSS
SaveExploits1References4
OSV
OSV
added 2023/04/12 12:00 a.m.9 views

UBUNTU-CVE-2023-1981

A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash...

5.5CVSS6.5AI score0.00386EPSS
SaveExploits1References5
Zero Day Initiative
Zero Day Initiative
added 2023/04/12 12:00 a.m.132 views

ManageEngine ADManager Plus ChangePasswordAction Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ManageEngine ADManager Plus. Authentication is required to exploit this vulnerability. The specific flaw exists within the ChangePasswordAction function. The issue results from the lack of proper...

7.2CVSS7.3AI score0.98167EPSS
SaveExploits2References1
OSV
OSV
added 2023/04/11 9:15 p.m.10 views

CVE-2023-28297

Windows Remote Procedure Call Service RPCSS Elevation of Privilege Vulnerability...

8.8CVSS7.3AI score0.0166EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/11 9:15 p.m.26 views

CVE-2023-28297

Windows Remote Procedure Call Service RPCSS Elevation of Privilege Vulnerability...

8.8CVSS8.8AI score0.0166EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/11 9:15 p.m.9 views

CVE-2023-28216

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

7CVSS7.1AI score0.00372EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/11 9:15 p.m.2 views

CVE-2023-21729

Remote Procedure Call Runtime Information Disclosure Vulnerability...

5.3CVSS6.7AI score0.01348EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/11 9:15 p.m.4 views

CVE-2023-21727

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.0164EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/11 9:15 p.m.25 views

CVE-2023-21727

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

8.8CVSS9.4AI score0.0164EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/11 9:15 p.m.22 views

Information disclosure

Remote Procedure Call Runtime Information Disclosure Vulnerability...

5CVSS5.2AI score0.01348EPSS
SaveExploits0References1Affected Software9
Prion
Prion
added 2023/04/11 9:15 p.m.20 views

Remote code execution

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

6.5CVSS9AI score0.0164EPSS
SaveExploits0References1Affected Software9
Cvelist
Cvelist
added 2023/04/11 7:13 p.m.36 views

CVE-2023-21729 Remote Procedure Call Runtime Information Disclosure Vulnerability

...

4.3CVSS7.4AI score0.01348EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/04/11 7:13 p.m.20 views

CVE-2023-21727 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

8.8CVSS6.7AI score0.0164EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2023/04/11 7:00 a.m.41 views

Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

8.8CVSS9.1AI score0.0164EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/04/11 1:55 a.m.10 views

SUSE CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

7.5CVSS9.3AI score0.01418EPSS
SaveExploits1References3
Rows per page
Query Builder