Lucene search
+L

9718 matches found

OSV
OSV
added 2022/01/11 8:15 p.m.10 views

CVE-2021-43972

An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root with an arbitrary filename via the tempFile and fileName parameters in the HTTP POST body...

6.5CVSS6AI score0.01465EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/01/11 8:15 p.m.7 views

CVE-2021-43972

An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root with an arbitrary filename via the tempFile and fileName parameters in the HTTP POST body...

6.8CVSS6.8AI score0.01465EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/01/11 7:19 p.m.36 views

CVE-2021-43972

An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root with an arbitrary filename via the tempFile and fileName parameters in the HTTP POST body...

6.5AI score0.01465EPSS
SaveExploits0References3
CVE
CVE
added 2022/01/11 7:19 p.m.74 views

CVE-2021-43972

CVE-2021-43972 concerns SysAid ITIL 20.4.74 b10. The vulnerability is an unrestricted file copy in /UserSelfServiceSettings.jsp, exploitable by a remote authenticated attacker who can copy arbitrary server files to the web root via tempFile and fileName in the HTTP POST body. The root cause is in...

6.8CVSS6.2AI score0.01465EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/01/11 12:00 a.m.9 views

Sysaid Technologies SysAid 安全漏洞

Sysaid Technologies SysAid is an IT service management solution from the Israeli company SysAid Technologies Sysaid Technologies.A security vulnerability exists in SysAid ITIL, which could be exploited by an attacker to copy arbitrary files on the server file system to the Web root via the HTTP...

6.8CVSS5.9AI score0.01465EPSS
SaveExploits0References4
Citrix
Citrix
added 2022/01/11 12:00 a.m.14 views

Copy paste for some data works with Citrix Receiver 14.x but NOT with Citrix Workspace app.

Post upgrade from Citrix Receiver 14.x to Citrix Workspace app, copy and paste no longer works for some data from the published application to local workstation. Some types of data for example simple text do work as expected, but other data doesn't like, Copy tables data and paste it to Excel at...

6.9AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.11 views

CVE-2022-22271

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

5.5CVSS6.2AI score0.0011EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/10 2:12 p.m.26 views

CVE-2022-22271

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

5.5CVSS0.0011EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/10 2:12 p.m.7 views

CVE-2022-22271

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

5.5CVSS5.9AI score0.0011EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.8 views

CVE-2022-22844

LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tifunix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field...

5.5CVSS6.8AI score0.01336EPSS
SaveExploits1References7
Prion
Prion
added 2022/01/10 2:12 p.m.20 views

Input validation

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

2.1CVSS5.5AI score0.0011EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/01/10 10:29 a.m.80 views

Security Bulletin: Vulnerability in Linux Kernel affects IBM Spectrum Copy Data Management (CVE-2021-29650)

Summary A denial of service vulnerability in the Linux Kernel may affect IBM Spectrum Copy Data Management Vulnerability Details CVEID: CVE-2021-29650 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by the lack of a full memory barrier upon the assignment of a new table val...

5.5CVSS6.2AI score0.00413EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.30 views

WordPress plugin RegistrationMagic SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.The WordPress RegistrationMagic plugin was vulnerable to SQL injection before 5.0.1.6, which stems from the la...

7.2CVSS6.1AI score0.73293EPSS
SaveExploits6References6
CVE
CVE
added 2022/01/07 10:39 p.m.71 views

CVE-2022-22271

CVE-2022-22271 concerns Samsung TIMA Trustlet where a missing input validation before memory copy allows copying data from arbitrary memory. Connected sources (e.g., PT-2022-15317) specify that TIMA Trustlet versions prior to SMR Jan-2022 Release 1 are affected; remediation is to update to SMR Ja...

5.5CVSS5.5AI score0.0011EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/07 10:39 p.m.27 views

CVE-2022-22271

A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory...

5.5CVSS5.8AI score0.0011EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/01/07 12:00 a.m.8 views

PT-2022-15317 · Unknown · Tima Trustlet

Name of the Vulnerable Software and Affected Versions: TIMA trustlet versions prior to SMR Jan-2022 Release 1 Description: A missing input validation before memory copy in the TIMA trustlet allows attackers to copy data from arbitrary memory. Recommendations: For versions prior to SMR Jan-2022...

5.5CVSS5.5AI score0.0011EPSS
SaveExploits0References3
Citrix
Citrix
added 2022/01/07 12:00 a.m.9 views

Copy & Paste of files is not working through RDP proxy session

Textual data can be copied through RDP session but copying a file is not working, paste icon is greyed out In the downloaded rdp file, only clipboard redirection is enabled, drive redirection is disabled redirectclipboard:i:1 redirectdrives:i:0...

7.1AI score
SaveExploits0
CNNVD
CNNVD
added 2022/01/07 12:00 a.m.4 views

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that can be exploited by an attacker to trigger a memory corruption in the Linux kernel via RCU file reference GC to trigger a denial of service and possibly run...

7CVSS6.7AI score0.0031EPSS
SaveExploits0References71
Github Security Blog
Github Security Blog
added 2022/01/06 8:35 p.m.27 views

Prototype Pollution in copy-props

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

9.8CVSS8.9AI score0.01697EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/01/06 8:35 p.m.25 views

GHSA-897M-RJF5-JP39 Prototype Pollution in copy-props

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

7.3CVSS9.4AI score0.01697EPSS
SaveExploits1References5
Rows per page
Query Builder