Lucene search
+L

9480 matches found

UbuntuCve
UbuntuCve
•added 2021/04/14 2:15 p.m.•45 views

CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

5.5CVSS6.9AI score0.0156EPSS
SaveExploits1References7
osv_ubuntu
osv_ubuntu
•added 2021/04/14 2:15 p.m.•24 views

UBUNTU-CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

5.5CVSS6.9AI score0.0156EPSS
SaveExploits1References8
Prion
Prion
•added 2021/04/14 2:15 p.m.•39 views

Integer overflow

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

4.3CVSS6.2AI score0.0156EPSS
SaveExploits1References5Affected Software3
Cvelist
Cvelist
•added 2021/04/14 1:52 p.m.•36 views

CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

6.4AI score0.0156EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2021/04/14 1:52 p.m.•39 views

CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

5.5CVSS6.7AI score0.0156EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2021/04/14 12:00 a.m.•28 views

Windows cmd.exe Code Execution

The vulnerability of the cmd.exe command-line interpreter of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...

5.3CVSS6AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/04/14 12:00 a.m.•24 views

JunOS CLI DoS

The vulnerability of the command-line interface CLI of the JunOS operating system for EX2300 and EX3400 routers is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.5CVSS5.9AI score0.00354EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2021/04/13 4:15 p.m.•20 views

CVE-2021-21730

A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0TY.T6...

9.8CVSS7.3AI score0.01002EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/13 12:00 a.m.•26 views

ZTE ZXHN H168N security vulnerability

The ZTE ZXHN H168N is a router from ZTE Corporation ZTE, China. A security vulnerability exists in the ZXHN H168N 3.5.0 TY.T6, which allows attackers to access the CLI via a strong attack...

9.8CVSS8.3AI score0.01002EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/04/13 12:00 a.m.•21 views

Cisco IOS XR Command Execution

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to the implementation or modification of arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the Linux kernel with root privileges...

6.6CVSS7.5AI score0.00322EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/04/13 12:00 a.m.•6 views

PT-2021-14741

Name of the Vulnerable Software and Affected Versions ZTE ZXHN H168N version 3.5.0 TY.T6 Description The issue is related to improper access control, allowing an attacker to exploit it and access the Command Line Interface CLI using brute force attacks. Recommendations For version 3.5.0 TY.T6,...

9.8CVSS0.01002EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2021/04/12 5:15 p.m.•30 views

CVE-2020-7924

Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB skipping all certificate validation. This may result in accepting invalid certificates.This issue affects: MongoDB Inc. MongoDB Database Tools 3.6 versions...

6.5CVSS6.6AI score0.00743EPSS
SaveExploits0References2
Prion
Prion
•added 2021/04/12 5:15 p.m.•21 views

Design/Logic Flaw

Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB skipping all certificate validation. This may result in accepting invalid certificates.This issue affects: MongoDB Inc. MongoDB Database Tools 3.6 versions...

6.4CVSS6.4AI score0.00743EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2021/04/12 4:25 p.m.•38 views

CVE-2020-7924 Specific command line parameter might result in accepting invalid certificate

Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB skipping all certificate validation. This may result in accepting invalid certificates.This issue affects: MongoDB Inc. MongoDB Database Tools 3.6 versions...

4.2CVSS6.4AI score0.00743EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2021/04/12 4:25 p.m.•71 views

CVE-2020-7924

Removed by vendor...

6.5CVSS6.5AI score0.00743EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/04/12 12:00 a.m.•22 views

MongoDB Server Trust Management Vulnerability

Mongodb Server is the United States Mongodb company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A security vulnerability exists in MongoDB Database Tools, which stems from t...

6.5CVSS5.7AI score0.00743EPSS
SaveExploits0References4
Fedora
Fedora
•added 2021/04/09 3:17 p.m.•56 views

[SECURITY] Fedora 33 Update: clamav-0.103.2-1.fc33

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

1.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2021/04/07 8:33 p.m.•64 views

Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible

A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl...

5.5CVSS6.1AI score0.0051EPSS
SaveExploits1References14Affected Software1
osv_ghsa
osv_ghsa
•added 2021/04/07 8:33 p.m.•49 views

GHSA-86HP-CJ9J-33VV Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible

A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl...

6.8CVSS6.3AI score0.0051EPSS
SaveExploits1References15
osv_ghsa
osv_ghsa
•added 2021/04/07 8:30 p.m.•30 views

GHSA-923P-FR2C-G5M2 Exposure of Sensitive Information to an Unauthorized Actor in Ansible

A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from...

3.9CVSS6.5AI score0.00361EPSS
SaveExploits0References17
Rows per page
Query Builder