Lucene search
+L

8441 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.8 views

The vulnerability of the PostScript Printer Driver (Pscript) and PCL6 Class Printer drivers for Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the PostScript Printer Driver PScript and PCL6 Class Printer drivers for Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.0052EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.9 views

The vulnerability of the BkreProcessThread class in the system for managing, diagnosing, and optimizing the operation of network devices. ProSafe Network Management NMS300 allows a hacker to execute arbitrary code.

The vulnerability of the BkreProcessThread class in the system for managing, diagnosing, and optimizing network device operations is related to the absence of authentication procedures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.5AI score0.02135EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.10 views

The vulnerability of the PostScript Printer Driver (Pscript) and PCL6 Class Printer operating systems for Windows allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PostScript Printer Driver Pscript and PCL6 Class Printer operating systems for Windows is related to insufficient protection of operational data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.0052EPSS
SaveExploits0References3
Prion
Prion
added 2023/07/25 8:15 p.m.29 views

Design/Logic Flaw

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers derives from, allows for the upload of arbitrary files. If the HTTP request is a multipart/form-data POST request, any...

5CVSS7.6AI score0.00816EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2023/07/25 12:0 a.m.29 views

CVE-2022-46899

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers derives from, allows for the upload of arbitrary files. If the HTTP request is a multipart/form-data POST request, any...

7.8AI score0.0049EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/25 12:0 a.m.12 views

CVE-2022-46899

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers derives from, allows for the upload of arbitrary files. If the HTTP request is a multipart/form-data POST request, any...

7.1AI score0.00816EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/07/21 12:0 a.m.76 views

Microsoft Windows Multiple Vulnerabilities (KB5028182)

This host is missing an important security update according to Microsoft KB5028182 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.8AI score0.43409EPSS
SaveExploits7References3
OSV
OSV
added 2023/07/20 8:15 p.m.10 views

CVE-2023-3793

A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the file filelFileDownloadForOutDoc.class of the component HTTP POST Request Handler. The manipulation of the argument fileid with the input 1+WAITFOR+DELAY leads to sql...

9.8CVSS5.7AI score0.00496EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/07/20 4:12 p.m.52 views

Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.11.9 security and bug fix update

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.11.9 on Red Hat Enterprise Linux 8 from Red Hat Container Registry. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS bas...

7.5CVSS6.5AI score0.0052EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/07/20 12:0 a.m.13 views

Omnis Studio 安全漏洞

Omnis Studio is a rapid application development tool from Omnis. A security vulnerability exists in Omnis Studio version 10.22.00 that stems from a locked class in the Omnis library that unlocks and modifies the browser via Omnis Studio...

6.5CVSS6.5AI score0.00881EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.15 views

The vulnerability of the USB Audio Class System driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the USB Audio Class System driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.1AI score0.01454EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/13 12:0 a.m.6 views

PT-2025-43611

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to network packet scheduling with the class identifier cls u32. Specifically, if the u32 replace hw knode function fails, the associated tcf bin...

6CVSS6.3AI score0.00141EPSS
SaveExploits0
OSV
OSV
added 2023/07/12 7:31 p.m.19 views

USN-6223-1 linux-azure-fde vulnerabilities

It was discovered that the TUN/TAP driver in the Linux kernel did not properly initialize socket data. A local attacker could use this to cause a denial of service system crash. CVE-2023-1076 It was discovered that the Real-Time Scheduling Class implementation in the Linux kernel contained a type...

7.8CVSS6.7AI score0.01377EPSS
SaveExploits5References12
Ubuntu
Ubuntu
added 2023/07/12 7:31 p.m.70 views

USN-6223-1: Linux kernel (Azure CVM) vulnerabilities

It was discovered that the TUN/TAP driver in the Linux kernel did not properly initialize socket data. A local attacker could use this to cause a denial of service system crash. CVE-2023-1076 It was discovered that the Real-Time Scheduling Class implementation in the Linux kernel contained a type...

7.8CVSS6.7AI score0.01377EPSS
SaveExploits5References2
Ubuntu
Ubuntu
added 2023/07/12 7:9 p.m.82 views

USN-6222-1: Linux kernel (Xilinx ZynqMP) vulnerabilities

Jiasheng Jiang discovered that the HSA Linux kernel driver for AMD Radeon GPU devices did not properly validate memory allocation in certain situations, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-3108...

7.8CVSS7.2AI score0.16642EPSS
SaveExploits13
Hacker One
Hacker One
added 2023/07/12 11:4 a.m.53 views

Internet Bug Bounty: jdbc apache airflow provider code execution vulnerability

A code execution vulnerability was discovered in the Apache Airflow JDBC Provider before version 4.0.0. The vulnerability allowed for privilege escalation by exploiting controllable parameters in the JDBC connection, enabling the execution of arbitrary Java code...

8.1AI score
SaveExploits0
CNVD
CNVD
added 2023/07/12 12:0 a.m.9 views

IBM DB2 Code Execution Vulnerability

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A code execution vulnerability exists in IBM DB2 that stems from unchecked class instantiation. An...

8.8CVSS7.5AI score0.01628EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/07/12 12:0 a.m.70 views

Microsoft Windows Multiple Vulnerabilities (KB5028169)

This host is missing an important security update according to Microsoft KB5028169 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.5AI score0.43409EPSS
SaveExploits7References3
ATTACKERKB
ATTACKERKB
added 2023/07/11 6:15 p.m.4 views

CVE-2023-35303

USB Audio Class System Driver Remote Code Execution Vulnerability...

8.8CVSS5.8AI score0.01454EPSS
SaveExploits0References2Affected Software21
NVD
NVD
added 2023/07/11 6:15 p.m.24 views

CVE-2023-35303

USB Audio Class System Driver Remote Code Execution Vulnerability...

8.8CVSS9.3AI score0.01454EPSS
SaveExploits0References1
Rows per page
Query Builder