Lucene search
+L

14664 matches found

NVD
NVD
added 2021/07/08 7:15 p.m.28 views

CVE-2021-1562

A vulnerability in the XSI-Actions interface of Cisco BroadWorks Application Server could allow an authenticated, remote attacker to access sensitive information on an affected system. This vulnerability is due to improper input validation and authorization of specific commands that a user can...

4.3CVSS0.00873EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/08 7:15 p.m.28 views

Input validation

A vulnerability in the XSI-Actions interface of Cisco BroadWorks Application Server could allow an authenticated, remote attacker to access sensitive information on an affected system. This vulnerability is due to improper input validation and authorization of specific commands that a user can...

4CVSS4.8AI score0.00873EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/08 6:35 p.m.39 views

CVE-2021-1562 Cisco BroadWorks Application Server Information Disclosure Vulnerability

A vulnerability in the XSI-Actions interface of Cisco BroadWorks Application Server could allow an authenticated, remote attacker to access sensitive information on an affected system. This vulnerability is due to improper input validation and authorization of specific commands that a user can...

4.3CVSS5.1AI score0.00873EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/07/08 6:35 p.m.15 views

CVE-2021-1562 Cisco BroadWorks Application Server Information Disclosure Vulnerability

A vulnerability in the XSI-Actions interface of Cisco BroadWorks Application Server could allow an authenticated, remote attacker to access sensitive information on an affected system. This vulnerability is due to improper input validation and authorization of specific commands that a user can...

4.3CVSS6.9AI score0.00873EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/07 4:00 p.m.7 views

CVE-2021-1562

A vulnerability in the XSI-Actions interface of Cisco BroadWorks Application Server could allow an authenticated, remote attacker to access sensitive information on an affected system. This vulnerability is due to improper input validation and authorization of specific commands that a user can...

4.3CVSS5.7AI score0.00873EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/07 2:15 p.m.12 views

CVE-2020-25868

Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote attacker can trigger a software abort temporary loss of service...

7.5CVSS5.8AI score0.01328EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/07 1:42 p.m.59 views

CVE-2020-25868

CVE-2020-25868 affects Pexip Infinity 22.x through 24.x before 24.2, with an improper input validation flaw in call setup. An unauthenticated remote attacker can trigger a software abort, causing temporary service disruption. Public references in the provided documents confirm the impact and affe...

7.5CVSS7.6AI score0.01328EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/07/07 12:00 a.m.11 views

Cisco BroadWorks Application 输入验证错误漏洞

Cisco BroadWorks Application is an enterprise-class calling and collaboration platform from Cisco USA. An input validation error vulnerability exists in Cisco BroadWorks Application Server that could be exploited by an authenticated, remote attacker to gain access to sensitive information on an...

4.3CVSS5.5AI score0.00873EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/07/07 12:00 a.m.13 views

PT-2021-3599 · Cisco · Cisco Broadworks Application Server

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks Application Server affected versions not specified Description: The issue is related to insufficient protection of internal data in the XSI-Actions interface of the Cisco BroadWorks Application Server. This could allow a remo...

4.3CVSS4.6AI score0.00873EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/07/07 12:00 a.m.14 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2021-2173)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00386EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/07/07 12:00 a.m.22 views

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2021-2153)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02178EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/07/06 12:00 a.m.48 views

EulerOS Virtualization 3.0.2.2 : openssh (EulerOS-SA-2021-2153)

According to the version of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - DISPUTED The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which...

7.5CVSS7.5AI score0.02178EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/07/06 12:00 a.m.32 views

EulerOS Virtualization 3.0.2.2 : util-linux (EulerOS-SA-2021-2173)

According to the version of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characte...

7.8CVSS6.3AI score0.00386EPSS
SaveExploits0References2
Rosalinux
Rosalinux
added 2021/07/02 5:14 p.m.39 views

Advisory ROSA-SA-2021-1872

Software: libgxps 0.3.0 OS: Cobalt 7.9 CVE-ID: CVE-2018-10733 CVE-Crit: MEDIUM CVE-DESC: There is a heap-based buffer overflow in the ftfontfacehash function of the gxps-fonts.c file in libgxps before version 0.3.0. The input created will result in a remote denial of service attack. CVE-STATUS:...

6.5CVSS7.5AI score0.0227EPSS
SaveExploits2
OSV
OSV
added 2021/07/01 3:15 a.m.20 views

CVE-2021-36081

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

7.8CVSS6.9AI score
SaveExploits0References3
OSV
OSV
added 2021/07/01 3:15 a.m.10 views

UBUNTU-CVE-2020-36403

HTSlib through 1.10.2 allows out-of-bounds write access in vcfparseformat called from vcfparse and vcfread...

8.8CVSS5.8AI score0.01593EPSS
SaveExploits1References5
OSV
OSV
added 2021/07/01 3:15 a.m.9 views

UBUNTU-CVE-2021-36081

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

7.8CVSS5.8AI score0.00887EPSS
SaveExploits1References5
Prion
Prion
added 2021/07/01 3:15 a.m.19 views

Design/Logic Flaw

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

6.8CVSS7.6AI score0.00887EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2021/07/01 3:15 a.m.28 views

CVE-2021-36081

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

7.8CVSS7.1AI score0.00887EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2021/07/01 2:47 a.m.29 views

CVE-2021-36081

Tesseract OCR 5.0.0-alpha-20201231 has a oneellconflict use-after-free during a strpbrk call...

7.9AI score0.00887EPSS
SaveExploits1References3
Rows per page
Query Builder