Lucene search
+L

2046 matches found

Positive Technologies
Positive Technologies
•added 2022/01/11 12:00 a.m.•7 views

PT-2022-1506 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Resilient File System ReFS. It allows remote attackers to execute arbitrary code,...

7.2CVSS9.5AI score0.0074EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2022/01/11 12:00 a.m.•8 views

PT-2022-1658 · Microsoft · Windows Geolocation Service +1

Name of the Vulnerable Software and Affected Versions: Windows Geolocation Service affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Geolocation Service of Windows operating systems. It allows remote attackers to execute...

9.3CVSS9.6AI score0.02661EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2022/01/11 12:00 a.m.•8 views

PT-2022-1689 · Microsoft · Windows Internet Key Exchange (Ike) Protocol Extensions +1

Name of the Vulnerable Software and Affected Versions: Windows Internet Key Exchange IKE Protocol Extensions affected versions not specified Description: The issue is related to the incorrect management of code generation in the Windows IKE protocol extension, which can be exploited by a remote...

9.8CVSS9.6AI score0.06242EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2022/01/11 12:00 a.m.•6 views

PT-2022-1670

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A vulnerability in Microsoft Office allows remote attackers to execute arbitrary code. The issue is related to incorrect code generation management. This can allow a remote attacker ...

9.3CVSS7.8AI score0.03101EPSS
SaveExploits0References14
OSV
OSV
•added 2022/01/10 2:10 p.m.•17 views

CVE-2021-38957

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040...

7.5CVSS7.1AI score0.00969EPSS
SaveExploits0References2
Prion
Prion
•added 2022/01/10 2:10 p.m.•29 views

Input validation

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040...

5CVSS7.5AI score0.00969EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/01/07 5:55 p.m.•57 views

CVE-2021-38957

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040...

3.1CVSS7.2AI score0.00969EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/01/07 12:00 a.m.•1 views

PT-2022-10820

Name of the Vulnerable Software and Affected Versions IBM Security Verify versions 10.0.0 through 10.0.2.0 Description The issue is related to hazardous input validation during QR code generation, which could disclose sensitive information. Recommendations For versions 10.0.0 through 10.0.2.0,...

7.5CVSS0.00969EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/07 12:00 a.m.•7 views

CVE-2021-38957: Improper Input Validation

IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code generation. IBM X-Force ID: 212040...

7.5CVSS5.7AI score0.00969EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/01/04 12:00 a.m.•24 views

The vulnerability of the Unraid operating system, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Unraid operating system is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.6AI score0.95844EPSS
SaveExploits7References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/01/04 12:00 a.m.•30 views

The vulnerability in the index.php script of the D-Link DSL-3782 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the index.php script in the D-Link DSL-3782 router microprogramming system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/01/04 12:00 a.m.•14 views

The vulnerability of the Media Foundation component in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

7.8CVSS7.7AI score0.02668EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•19 views

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.9CVSS8.2AI score0.02499EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•17 views

The vulnerability of the Identity Service in operating systems such as tvOS, iOS, iPadOS, and watchOS allows a hacker to bypass security restrictions.

The vulnerability of the Identity Service for operating systems tvOS, iOS, iPadOS, and watchOS is related to incorrect code generation. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

5.5CVSS6AI score0.01142EPSS
SaveExploits0References5Affected Software4
Positive Technologies
Positive Technologies
•added 2021/12/17 12:00 a.m.•1 views

PT-2021-30944

Уязвимость программного средства QVPN Service связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

10CVSS5.8AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•13 views

The vulnerability of the CommCell storage management software lies in its flawed code generation mechanism, which allows an attacker to execute arbitrary code.

The vulnerability of the CommCell storage management software is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request remotely...

9CVSS8AI score0.05789EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•15 views

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploitation of this vulnerability allows a malicious actor to execute arbitrary code remotely and completely compromise the vulnerable system by using specially crafted requests...

9CVSS8.4AI score0.02338EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•17 views

Microsoft Edge browser vulnerability, related to improper code generation management, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

4.2CVSS6AI score0.01141EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•18 views

The vulnerability of HEVC Video Extensions relates to improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02361EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•18 views

The vulnerability of the Moodle administration system, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Moodle administration system is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

10CVSS8.2AI score0.02462EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder