Lucene search
+L

1851 matches found

CNNVD
CNNVD
added 2021/01/13 12:0 a.m.10 views

Cisco Anyconnect Secure Mobility Client 权限许可和访问控制问题漏洞

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. An arbitrary file read vulnerability exists in the upgrade component of the Cisco AnyConnect Secure Mobility Client, which can be exploited by a...

5.5CVSS6.2AI score0.00337EPSS
SaveExploits0References7
Citrix
Citrix
added 2021/01/08 12:0 a.m.10 views

Hotfix XS82E010 - for Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX285937 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

7.4AI score
SaveExploits0
Citrix
Citrix
added 2021/01/08 12:0 a.m.14 views

Hotfix XS81E014 - For Citrix Hypervisor 8.1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.1. All customers who are affected by the issues described inCTX286756 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Note: This hotfix is available only to customers on theCustomer...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/12/28 12:0 a.m.6 views

The vulnerability of the command-line interface of the Cisco Connected Mobile Experiences software allows a hacker to escalate their privileges and gain access to the isolated software environment.

The vulnerability of the command-line interface of the Cisco Connected Mobile Experiences software relates to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to the isolated software environment...

5.2CVSS6.1AI score0.00282EPSS
SaveExploits0References3Affected Software1
Gitee
Gitee
added 2020/12/25 12:35 p.m.3 views

pwntools

This repository is an offensive tool for binary exploitation. The primary vulnerability targeted by this tool is not explicitly stated in the provided context, but the tool is designed for binary exploitation, which suggests that it may be targeting a vulnerability that allows for code execution ...

8.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:0 a.m.8 views

The vulnerability of the command-line interface of the StarOS operating system, which allows a hacker to gain increased privileges

The vulnerability of the StarOS command-line interface is related to errors during command input verification. Exploiting this vulnerability can allow an attacker to gain increased privileges...

6.4CVSS6.6AI score0.00387EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:0 a.m.9 views

The vulnerability of the command-line interface of the StarOS operating system, which allows a hacker to gain increased privileges

The vulnerability of the StarOS command-line interface is related to errors during command input verification. Exploiting this vulnerability can allow an attacker to gain increased privileges...

4.6CVSS6.6AI score0.00377EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2020/12/14 12:0 a.m.8 views

IBM Connect:Direct for UNIX 授权问题漏洞

IBM Connect: Direct for UNIX is the United States IBM a point-to-point can support multi-platform transfer of data between the tool software. The software supports z/OS, VSE, AS/400, UNIX IBM, SUN, HP, etc., LINUX, Windows and other 18 platforms, in addition to providing C, C + + +, JAVA,...

9.8CVSS7.1AI score0.02021EPSS
SaveExploits0References5
CNVD
CNVD
added 2020/12/14 12:0 a.m.27 views

Brocade Fabric OS Input Validation Error Vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade in the United States. An improper input validation vulnerability exists in the command line interface of Brocade Fabric OS when invoking seccrypptocfg. An attacker could exploit...

6.7CVSS7.2AI score0.00305EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/11 9:15 p.m.6 views

CVE-2020-15375

Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0CBN3, v7.4.2g contain an improper input validation weakness in the command line interface when secccrypptocfg is invoked. The vulnerability could allow a local authenticated user to run arbitrary commands and perform...

6.7CVSS5.9AI score0.00305EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/11 9:15 p.m.23 views

Input validation

Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0CBN3, v7.4.2g contain an improper input validation weakness in the command line interface when secccrypptocfg is invoked. The vulnerability could allow a local authenticated user to run arbitrary commands and perform...

4.6CVSS6.8AI score0.00305EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/12/11 8:34 p.m.64 views

CVE-2020-15375

The vulnerability CVE-2020-15375 affects Brocade Fabric OS (FOS) prior to targeted versions (v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g). It is an input validation weakness in the command-line interface when secccrypptocfg is invoked, allowing a local authenticated user to run arbitr...

6.7CVSS8.1AI score0.00305EPSS
SaveExploits0References1Affected Software1
Gitee
Gitee
added 2020/12/09 9:42 a.m.4 views

Gopherus

This is a Python script for a tool called Gopherus, which is designed to exploit Server-Side Request Forgery SSRF vulnerabilities in various services. The tool can generate payloads for different services, including MySQL, PostgreSQL, FastCGI, Memcached, Redis, Zabbix, and SMTP. The script uses a...

7.9AI score
SaveExploits0
Citrix
Citrix
added 2020/11/20 12:0 a.m.15 views

Driver Disk for Intel i40e 2.0.23 - For XenServer 7.x CR

Who Should Install this Driver Disk? Customers running a Citrix XenServer 7.x Current Release who use Intel's i40e driver and wish to use the latest version of the following: Driver Module| Version ---|--- i40e| 2.0.23 Issues Resolved In this Driver Disk Includes general enhancements and bug fixe...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/11/20 12:0 a.m.714 views

IBM Tivoli Storage Manager 5.2.0.1 Buffer Overflow

Exploit Title: IBM Tivoli Storage Manager Command Line Administrative Interface 5.2.0.1 - id' Field Stack Based Buffer Overflow Exploit Author: Paolo Stagno aka VoidSec Vendor Homepage: https://www.ibm.com/support/knowledgecenter/en/SSGSG77.1.0/com.ibm.itsm.tsm.doc/welcome.html Version: 5.2.0.1...

1AI score
SaveExploits0
Citrix
Citrix
added 2020/11/20 12:0 a.m.12 views

Driver Disk for Broadcom megaraid sas 07.706.03.00 - For XenServer 7.x CR

Who Should Install this Driver Disk? Customers running a Citrix XenServer Current Release 7.2 or later who use Broadcom's megaraidsas driver and wish to use the latest version of the following: Driver Module| Version ---|--- megaraidsas| 07.706.03.00 Issues Resolved In this Driver Disk Includes...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2020/11/20 12:0 a.m.10 views

Driver Disk for Qlogic qede 8.30.13.0 - For XenServer 7.x CR

Who Should Install this Driver Disk? Customers running a Citrix XenServer 7.x. Current Release who use qlogic's qede driver and wish to use the latest version of the following: Driver Module| Version ---|--- qede| 8.30.13.0 Issues Resolved In this Driver Disk Includes general enhancements and bug...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2020/11/20 12:0 a.m.8 views

Hotfix XS82E009 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX284874 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/11/18 12:0 a.m.8 views

The vulnerability of the command-line interface of the Cisco Integrated Management Controller allows a hacker to discover all existing user names.

The vulnerability of the command-line interface of the Cisco Integrated Management Controller remote management device is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to discover all existing user names...

5.5CVSS5.6AI score0.00606EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:0 a.m.9 views

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to enhance their privileges and execute arbitrary code.

The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to the implementation or modification of arguments. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

6.8CVSS6.9AI score0.00325EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder