CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

123 matches found

IBM Security Bulletins•added 2022/02/14 5:33 a.m.•74 views

Security Bulletin: IBM Cloud Pak for Data System 1.0 is vulnerable to remote code execution due to Apache Log4j (CVE-2021-44832)

Summary Apache Log4j is used by IBM Cloud Pak for Data System 1.0 in openshift-logging. This bulletin provides a remediation for the Apache Log4j vulnerability CVE-2021-44832. Vulnerability Details CVEID: CVE-2021-44832 DESCRIPTION: Apache Log4j could allow a remote attacker with permission to...

8.5CVSS8.5AI score0.97906EPSS

SaveExploits9Affected Software1

IBM Security Bulletins•added 2022/01/27 6:33 a.m.•166 views

Security Bulletin: IBM Cloud Pak for Data System 1.0 is vulnerable to arbitrary code execution due to Apache Log4j ( CVE-2021-45046)

Summary Apache Log4j is used by IBM Cloud Pak for Data System 1.0 in openshift-logging. This bulletin provides a remediation and workaround for the Apache Log4j vulnerability CVE-2021-45046. Vulnerability Details CVEID: CVE-2021-45046 DESCRIPTION: Apache Log4j could result in remote code executio...

10CVSS7.4AI score0.99999EPSS

SaveExploits387Affected Software1

IBM Security Bulletins•added 2022/01/21 9:04 a.m.•247 views

Security Bulletin: Log4j vulnerability CVE-2021-44228 affects IBM Cloud Pak for Data System 1.0

Summary Log4j is used by IBM Cloud Pak for Data System 1.0 in openshift-logging. This bulletin provides a remediation and mitigation for the reported Apache Log4j vulnerability, CVE-2021-44228. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to...

10CVSS0.4AI score0.99999EPSS

SaveExploits385Affected Software1

IBM Security Bulletins•added 2022/01/19 6:43 p.m.•119 views

Security Bulletin: IBM Cloud Pak for Data System 2.0 (ICPDS 2.0 ) is vulnerable to denial of service and arbitrary code execution due to Apache Log4j (CVE-2021-45105, CVE-2021-45046)

Summary Log4j is used by IBM Cloud Pak for Data System 2.0 in openshift-logging. This bulletin provides a remediation for the reported Apache Log4j vulnerabilities CVE-2021-45105 and CVE-2021-45046. Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerable to a denial of...

10CVSS7.6AI score0.99999EPSS

SaveExploits389Affected Software1

IBM Security Bulletins•added 2022/01/19 11:35 a.m.•106 views

Security Bulletin: Log4j vulnerability affects IBM Cloud Pak for Data System 2.0

Summary Log4j is used by IBM Cloud Pak for Data System 2.0 in openshift-logging. This bulletin provides a remediation for the reported Apache Log4j vulnerability, CVE-2021-44228. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitra...

10CVSS1.2AI score0.99999EPSS

SaveExploits385Affected Software1

NVD•added 2020/09/18 4:15 p.m.•26 views

CVE-2020-0272

In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130166487...

4.4CVSS0.00143EPSS

SaveExploits0References1

Check Point Advisories•added 2020/09/02 12:00 a.m.•67 views

ERS Data System Remote Code Execution (CVE-2017-14702)

A remote code execution vulnerability exists in ERS Data System. Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on the affected system...

7.5CVSS7.8AI score0.08303EPSS

SaveExploits5

CNVD•added 2020/08/17 12:00 a.m.•30 views

Rapid SCADA Local Elevation of Privilege Vulnerability

Rapid SCADA is a free, open source, full-featured SCADA data acquisition and monitoring system software. A local elevation of privilege vulnerability exists in the ScadaAgentSvc.exe executable file in Rapid SCADA 5.8.0. The vulnerability can be exploited to gain administrator privileges by placin...

7.8CVSS7.1AI score0.00456EPSS

SaveExploits1References1

CNVD•added 2020/06/19 12:00 a.m.•21 views

Baxter PrismaFlex and PrismMax Information Disclosure Vulnerabilities

The Baxter PrismaFlex and PrismMax are both critical care devices from Baxter. An information disclosure vulnerability exists in Baxter PrismaFlex all versions and PrismMax prior to version 3.x. The vulnerability stems from the failure of an affected device to encrypt e.g., TLS/SSL transmitted da...

7.5CVSS6.2AI score0.00496EPSS

SaveExploits0References1

BDU FSTEC•added 2019/07/30 12:00 a.m.•12 views

Tula Access Rights Insufficient

The vulnerability of the automated personal data management system “Tula” is related to insufficient verification of access rights. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information through a specially crafted URL...

7.8CVSS5.5AI score

SaveExploits0Affected Software1

zdt•added 2017/10/04 12:00 a.m.•74 views

ERS Data System 1.8.1 - Java Deserialization Exploit

Exploit for windows platform in category remote exploits Exploit Title: ERS Data System 1.8.1 Deserialize Vulnerability Google Dork: N/A Date: 9/21/2017 Exploit Author: West Shepherd Vendor Homepage: http://www.ersdata.com Software Link: www.ersdata.com/downloads/ErsSetup.exe Version: 1.8.1.0...

7.5CVSS9.2AI score0.08303EPSS

SaveExploits5

Packet Storm•added 2017/10/03 12:00 a.m.•59 views

ERS Data System 1.8.1 Java Deserialization

Exploit Title: ERS Data System 1.8.1 Deserialize Vulnerability Google Dork: N/A Date: 9/21/2017 Exploit Author: West Shepherd Vendor Homepage: http://www.ersdata.com Software Link: www.ersdata.com/downloads/ErsSetup.exe Version: 1.8.1.0 Tested on: Windows 7 x86 CVE : CVE-2017-14702 Description: E...

0.2AI score0.08303EPSS

SaveExploits5

NVD•added 2017/09/30 1:29 a.m.•36 views

CVE-2017-14702