Lucene search
+L

9445 matches found

AlpineLinux
AlpineLinux
•added 2021/04/19 12:00 a.m.•54 views

CVE-2021-29458

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

5.5CVSS6.3AI score0.01568EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/04/19 12:00 a.m.•39 views

CVE-2021-29457

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An...

7.8CVSS6.8AI score0.02152EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/04/19 12:00 a.m.•31 views

CVE-2021-29458

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

5.5CVSS6.3AI score0.01568EPSS
SaveExploits1
Gitee
Gitee
•added 2021/04/15 8:51 p.m.•14 views

pocsuite3

This is a Python package called pocsuite3 that provides a framework for remote vulnerability testing and proof-of-concept development. It is designed to be used by penetration testers and security researchers. The package has a powerful proof-of-concept engine and comes with many features,...

6.7AI score
SaveExploits0
CNVD
CNVD
•added 2021/04/15 12:00 a.m.•23 views

OpenJPEG integer overflow vulnerability (CNVD-2021-30596)

OpenJPEG is an open source JPEG 2000 codec written in C language . An integer overflow vulnerability exists in OpenJPEG version v2.4.0. An attacker can exploit the vulnerability by using the command line option "-ImgDir" on a directory containing 1048576 files to crash the program...

5.5CVSS6.8AI score0.0156EPSS
SaveExploits1References1
Prion
Prion
•added 2021/04/14 2:15 p.m.•39 views

Integer overflow

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

4.3CVSS6.2AI score0.0156EPSS
SaveExploits1References5Affected Software3
UbuntuCve
UbuntuCve
•added 2021/04/14 2:15 p.m.•45 views

CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

5.5CVSS6.9AI score0.0156EPSS
SaveExploits1References7
osv_ubuntu
osv_ubuntu
•added 2021/04/14 2:15 p.m.•19 views

UBUNTU-CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

5.5CVSS6.9AI score0.0156EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2021/04/14 1:52 p.m.•36 views

CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

6.4AI score0.0156EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2021/04/14 1:52 p.m.•39 views

CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

5.5CVSS6.7AI score0.0156EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2021/04/14 12:00 a.m.•28 views

Windows cmd.exe Code Execution

The vulnerability of the cmd.exe command-line interpreter of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...

5.3CVSS6AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/04/14 12:00 a.m.•24 views

JunOS CLI DoS

The vulnerability of the command-line interface CLI of the JunOS operating system for EX2300 and EX3400 routers is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.5CVSS5.9AI score0.00354EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2021/04/13 4:15 p.m.•20 views

CVE-2021-21730

A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0TY.T6...

9.8CVSS7.3AI score0.01002EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/13 12:00 a.m.•25 views

ZTE ZXHN H168N 安全漏洞

The ZTE ZXHN H168N is a router from ZTE Corporation ZTE, China. A security vulnerability exists in the ZXHN H168N 3.5.0 TY.T6, which allows attackers to access the CLI via a strong attack...

9.8CVSS8.3AI score0.01002EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/04/13 12:00 a.m.•21 views

Cisco IOS XR Command Execution

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to the implementation or modification of arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the Linux kernel with root privileges...

6.6CVSS7.5AI score0.00322EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/04/13 12:00 a.m.•6 views

PT-2021-14741

Name of the Vulnerable Software and Affected Versions ZTE ZXHN H168N version 3.5.0 TY.T6 Description The issue is related to improper access control, allowing an attacker to exploit it and access the Command Line Interface CLI using brute force attacks. Recommendations For version 3.5.0 TY.T6,...

9.8CVSS0.01002EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2021/04/12 5:15 p.m.•30 views

CVE-2020-7924

Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB skipping all certificate validation. This may result in accepting invalid certificates.This issue affects: MongoDB Inc. MongoDB Database Tools 3.6 versions...

6.5CVSS6.6AI score0.00743EPSS
SaveExploits0References2
Prion
Prion
•added 2021/04/12 5:15 p.m.•21 views

Design/Logic Flaw

Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB skipping all certificate validation. This may result in accepting invalid certificates.This issue affects: MongoDB Inc. MongoDB Database Tools 3.6 versions...

6.4CVSS6.4AI score0.00743EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2021/04/12 4:25 p.m.•35 views

CVE-2020-7924 Specific command line parameter might result in accepting invalid certificate

Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB skipping all certificate validation. This may result in accepting invalid certificates.This issue affects: MongoDB Inc. MongoDB Database Tools 3.6 versions...

4.2CVSS6.4AI score0.00743EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2021/04/12 4:25 p.m.•71 views

CVE-2020-7924

Removed by vendor...

6.5CVSS6.5AI score0.00743EPSS
SaveExploits0
Rows per page
Query Builder