Lucene search
+L

3363 matches found

Cvelist
Cvelist
added 2021/10/12 9:49 a.m.38 views

CVE-2021-33732

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

7.6AI score0.27685EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/10/12 9:49 a.m.36 views

CVE-2021-33731

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

7.6AI score0.46587EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/10/12 9:49 a.m.27 views

CVE-2021-33730

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

7.6AI score0.27685EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/11 5:15 p.m.7 views

CVE-2021-20121

The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and...

4CVSS5.9AI score0.00498EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/10/11 5:15 p.m.8 views

CVE-2021-20121

The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and...

4CVSS5.6AI score0.00498EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/10/11 4:48 p.m.33 views

CVE-2021-20121

The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and...

4.5AI score0.00498EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/10/07 9:15 p.m.5 views

CVE-2021-42084

An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a series of crafted requests that cause an endless loop and thus cause denial of service...

6.5CVSS6.6AI score0.00928EPSS
SaveExploits0References2
Prion
Prion
added 2021/10/07 9:15 p.m.24 views

Denial of service

An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a series of crafted requests that cause an endless loop and thus cause denial of service...

4CVSS6.4AI score0.00928EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/10/07 7:37 p.m.116 views

CVE-2021-42084

CVE-2021-42084 affects Zammad prior to 4.1.1. An attacker with valid agent credentials can send a series of crafted requests that triggers an endless loop, causing a denial of service. Connected sources consistently describe a denial-of-service impact for versions before 4.1.1. The initial docume...

6.5CVSS6.4AI score0.00928EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/10/07 12:00 a.m.11 views

Zammad 安全漏洞

Zammad is an open source web-based help desk/customer support system. a denial of service vulnerability exists in versions of Zammad prior to 4.1.1. An attacker could exploit the vulnerability by sending a series of specially crafted requests to cause an infinite loop, which could lead to a denia...

6.5CVSS6.6AI score0.00928EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/10/05 3:15 p.m.13 views

CVE-2021-39880

A Denial Of Service vulnerability in the apollouploadserver Ruby gem in GitLab CE/EE all versions starting from 11.9 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to deny access to all users via specially crafted...

6.5CVSS6.6AI score0.01372EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2021/10/05 3:15 p.m.21 views

Denial of service

A Denial Of Service vulnerability in the apollouploadserver Ruby gem in GitLab CE/EE all versions starting from 11.9 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to deny access to all users via specially crafted...

4CVSS6.1AI score0.01372EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2021/10/05 2:01 p.m.78 views

CVE-2021-39880

A Denial Of Service vulnerability in the apollouploadserver Ruby gem in GitLab CE/EE all versions starting from 11.9 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to deny access to all users via specially crafted...

6.5CVSS6.1AI score0.01372EPSS
SaveExploits0
OSV
OSV
added 2021/10/04 6:15 p.m.7 views

DEBIAN-CVE-2021-32675

Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol RESP request, Redis allocates memory according to user-specified values which determine the number of elements in the multi-bulk header and size of each element in the bulk header. ...

7.5CVSS6.2AI score0.16904EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/04 6:15 p.m.6 views

ALPINE-CVE-2021-32675

Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol RESP request, Redis allocates memory according to user-specified values which determine the number of elements in the multi-bulk header and size of each element in the bulk header. ...

7.5CVSS7.1AI score0.16904EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/04 6:15 p.m.6 views

CVE-2021-32675

Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol RESP request, Redis allocates memory according to user-specified values which determine the number of elements in the multi-bulk header and size of each element in the bulk header. ...

7.5CVSS6.7AI score0.16904EPSS
SaveExploits0References15Affected Software1
Debian CVE
Debian CVE
added 2021/10/04 5:50 p.m.28 views

CVE-2021-32675

Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol RESP request, Redis allocates memory according to user-specified values which determine the number of elements in the multi-bulk header and size of each element in the bulk header. ...

7.5CVSS7.5AI score0.16904EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/10/04 12:00 a.m.6 views

Redis Labs Redis 安全漏洞

Redis Labs Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis Labs, Inc. that provides APIs in multiple languages. A security vulnerability exists in Redis where, when parsing an incoming Redis Standard Protocol RESP...

7.5CVSS6.5AI score0.16904EPSS
SaveExploits0References35
NVD
NVD
added 2021/09/30 4:15 p.m.26 views

CVE-2021-24017

An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler...

5.4CVSS0.00554EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/30 3:21 p.m.37 views

CVE-2021-24017

An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler...

5.4CVSS6AI score0.00554EPSS
SaveExploits0References1
Rows per page
Query Builder