Lucene search
+L

5071 matches found

AlpineLinux
AlpineLinux
added 2021/11/03 12:4 a.m.82 views

CVE-2021-29993

Firefox for Android allowed navigations through the intent:// protocol, which could be used to cause crashes and UI spoofs. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 92...

8.1CVSS7.4AI score0.00703EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/11/02 12:0 a.m.3 views

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozilla Firefox is vulnerable to a resource management error that can be exploited by attackers to cause memory corruption and potentially exploitable crashes...

8.8CVSS5.7AI score0.01586EPSS
SaveExploits0References37
Tenable Nessus
Tenable Nessus
added 2021/10/28 12:0 a.m.48 views

F5 Networks BIG-IP : OpenSSL vulnerability (K24624116)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.6 / 15.1.5.1 / 16.1.2.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K24624116 advisory. Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length...

7.5CVSS6.8AI score0.50732EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/10/28 12:0 a.m.37 views

openSUSE 15 Security Update : virtualbox (openSUSE-SU-2021:1393-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1393-1 advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Pri...

7.8CVSS6.9AI score0.004EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2021/10/28 12:0 a.m.59 views

F5 Networks BIG-IP : Node.js vulnerabilities (K53225395)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the K53225395 advisory. CVE-2021-3672Missing input validation of host names returned by Domain Name Servers DNS in the c-ares libra...

9.8CVSS7.2AI score0.21952EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2021/10/27 12:0 a.m.22 views

OpenLDAP < 2.4.57 Multiple DoS Vulnerabilities

OpenLDAP is prone to multiple denial of service DoS vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

7.5CVSS7.8AI score0.84224EPSS
SaveExploits0References10
OSV
OSV
added 2021/10/20 11:17 a.m.6 views

AZL-6707 CVE-2021-35596 affecting package mysql for versions less than 8.0.28-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Error Handling. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

4.9CVSS6.4AI score0.02125EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2021/10/20 10:50 a.m.22 views

CVE-2021-35575

Removed by vendor...

4.9CVSS6.3AI score0.02068EPSS
SaveExploits0
CNVD
CNVD
added 2021/10/20 12:0 a.m.37 views

Oracle Solaris Denial of Service Vulnerability

Oracle Solaris is a Unix-like operating system, and a denial-of-service vulnerability exists in the Filesystem component of Oracle Solaris version 11. An attacker could exploit this vulnerability to cause Oracle Solaris to hang or crash repeatedly and frequently...

6.5CVSS4AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.19 views

Oracle Virtualization和Oracle VM VirtualBox 安全漏洞

Oracle VM VirtualBox is a virtual machine management software from Oracle. A denial of service vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.28, which can be exploited by an attacker to cause Oracle VM VirtualBox to hang or crash frequently and repeatedl...

5.5CVSS5.6AI score0.00379EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.7 views

Oracle Outside In Technology 输入验证错误漏洞

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. A denial of service vulnerability in the Outside In Filters...

7.5CVSS5.6AI score0.01418EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.3 views

Oracle MySQL Server输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A denial of service vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to cause the MySQL server to hang or crash frequently and repeatedly...

6.5CVSS5.2AI score0.02278EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2021/10/19 12:0 a.m.35 views

SUSE SLES12 Security Update : kernel (Live Patch 39 for SLE 12 SP3) (SUSE-SU-2021:3459-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3459-1 advisory. This update for the Linux Kernel 4.4.180-94144 fixes several issues. The following security issues were fixed: - CVE-2021-3715: Fix...

7.8CVSS6.9AI score0.00395EPSS
SaveExploits4References13
Positive Technologies
Positive Technologies
added 2021/10/19 12:0 a.m.5 views

PT-2021-21022 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.7.35 and prior Oracle MySQL versions 8.0.26 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in...

10CVSS6.9AI score0.87816EPSS
SaveExploits22References831
Veracode
Veracode
added 2021/10/18 2:27 p.m.26 views

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service. A high privileged attacker with network access via multiple protocols can compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash complete DOS of MySQL Server...

4.9CVSS3.2AI score0.02402EPSS
SaveExploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/10/15 12:0 a.m.281 views

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9485)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9485 advisory. - fuse: fix live lock in fuseiget Amir Goldstein Orabug: 33396682 CVE-2021-28950 - Bluetooth: defer cleanup of resources in hciunregisterdev Tetsuo Han...

7.8CVSS6.8AI score0.00734EPSS
SaveExploits2References9
Tenable Nessus
Tenable Nessus
added 2021/10/15 12:0 a.m.29 views

SUSE SLES15 Security Update : kernel (Live Patch 21 for SLE 15) (SUSE-SU-2021:3440-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3440-1 advisory. This update for the Linux Kernel 4.12.14-15063 fixes several issues. The following security issues were fixed: - CVE-2021-3715: Fixed a...

7.8CVSS6.9AI score0.00395EPSS
SaveExploits4References13
Tenable Nessus
Tenable Nessus
added 2021/10/13 12:0 a.m.27 views

SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2021:3338-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3338-1 advisory. The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2020-3702: Fixed a bug which could be...

7.9CVSS6.8AI score0.01736EPSS
SaveExploits2References73
Cvelist
Cvelist
added 2021/10/06 2:12 p.m.41 views

CVE-2021-0636

When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:...

7.7AI score0.00311EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/05 10:15 p.m.5 views

CVE-2021-31986

User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage...

6.8CVSS6.8AI score0.00805EPSS
SaveExploits0References2
Rows per page
Query Builder