Lucene search
+L

3980 matches found

NVD
NVD
added 2019/04/25 4:29 p.m.16 views

CVE-2018-20053

An issue was discovered on Cerner Connectivity Engine CCE 4 devices. The hostname, timezone, and NTP server configurations on the CCE device are vulnerable to command injection by sending a crafted configuration file over the network...

9.8CVSS9.7AI score0.02203EPSS
SaveExploits0References1
NVD
NVD
added 2019/04/25 4:29 p.m.19 views

CVE-2018-20052

An issue was discovered on Cerner Connectivity Engine CCE 4 devices. The user running the main CCE firmware has NOPASSWD sudo privileges to several utilities that could be used to escalate privileges to root. One example is the "sudo ln -s /tmp/script /etc/cron.hourly/script" command...

7.8CVSS7.7AI score0.00378EPSS
SaveExploits0References1
CVE
CVE
added 2019/04/25 3:43 p.m.40 views

CVE-2018-20053

CVE-2018-20053 affects Cerner Connectivity Engine (CCE) 4 devices. The hostname, timezone, and NTP server configurations on the CCE are vulnerable to command injection when a crafted configuration file is sent over the network. The available documents do not specify affected versions beyond “CCE ...

9.8CVSS9.5AI score0.02203EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/04/25 3:43 p.m.22 views

CVE-2018-20053

An issue was discovered on Cerner Connectivity Engine CCE 4 devices. The hostname, timezone, and NTP server configurations on the CCE device are vulnerable to command injection by sending a crafted configuration file over the network...

9.7AI score0.02203EPSS
SaveExploits0References1
CVE
CVE
added 2019/04/25 3:40 p.m.44 views

CVE-2018-20052

The CVE-2018-20052 entry concerns Cerner Connectivity Engine (CCE) 4 devices where the user running the main CCE firmware has NOPASSWD sudo privileges to several utilities, enabling potential root privilege escalation. A concrete example is the command: sudo ln -s /tmp/script /etc/cron.hourly/scr...

7.8CVSS7.7AI score0.00378EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/04/25 3:40 p.m.27 views

CVE-2018-20052

An issue was discovered on Cerner Connectivity Engine CCE 4 devices. The user running the main CCE firmware has NOPASSWD sudo privileges to several utilities that could be used to escalate privileges to root. One example is the "sudo ln -s /tmp/script /etc/cron.hourly/script" command...

7.8AI score0.00378EPSS
SaveExploits0References1
Fedora
Fedora
added 2019/04/17 4:5 p.m.13 views

[SECURITY] Fedora 30 Update: simple-scan-3.32.2-2.fc30

Simple Scan is an easy-to-use application, designed to let users connect th eir scanner and quickly have the image/document in an appropriate format...

3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.7 views

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.10551EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.8 views

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.10505EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.9 views

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.10505EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.9 views

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.10551EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.9 views

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to object processing errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.10551EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/04/11 12:0 a.m.6 views

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability (CNVD-2019-27309)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...

7.8CVSS8.3AI score0.10551EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/11 12:0 a.m.5 views

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability (CNVD-2019-27311)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...

7.8CVSS8.5AI score0.10505EPSS
SaveExploits0References1
Akamai Blog
Akamai Blog
added 2019/04/10 4:0 p.m.49 views

Do High Vanity Bitrates Choke Your Live OTT Service Out of the Gate?

Studies show that video consumption demand is growing faster than capacity. While capacity overhead does exist, current trends suggest that we'll see more bottlenecking on last-hop connectivity, especially with regionally targeted content. By pushing "vanity bitrates" -- those topmost speeds that...

0.5AI score
SaveExploits0
CNVD
CNVD
added 2019/04/10 12:0 a.m.8 views

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability (CNVD-2019-14273)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. An input validation error vulnerability...

7.8CVSS6.9AI score0.10505EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/04/10 12:0 a.m.6 views

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. An input validation error vulnerability...

7.8CVSS6.9AI score0.10551EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/04/10 12:0 a.m.47 views

Microsoft Office 2010 Service Pack 2 Multiple Vulnerabilities (KB4464520)

This host is missing an important security update according to Microsoft KB4464520 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.8CVSS7.5AI score0.10551EPSS
SaveExploits0References6
OSV
OSV
added 2019/04/09 9:29 p.m.6 views

CVE-2019-0823

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0824, CVE-2019-0825, CVE-2019-0826,...

7.8CVSS7.7AI score0.10505EPSS
SaveExploits0References1
NVD
NVD
added 2019/04/09 9:29 p.m.24 views

CVE-2019-0825

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0826,...

7.8CVSS7.8AI score0.10551EPSS
SaveExploits0References1
Rows per page
Query Builder