Lucene search
+L

6114 matches found

BDU FSTEC
BDU FSTEC
•added 2021/02/16 12:00 a.m.•23 views

The vulnerability of the microprogrammed software of Intel Ethernet E810 controllers, related to insufficient input data verification, allows a intruder to trigger a service failure.

The vulnerability of Intel Ethernet E810 controller’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

5.2CVSS5.5AI score0.003EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/16 12:00 a.m.•17 views

The vulnerability of Intel Graphics Driver drivers lies in the lack of data validation, which allows attackers to trigger a service failure.

The vulnerability of Intel Graphics Drivers’ drivers is related to the lack of data validation during return operations. Exploiting this vulnerability can allow a hacker to trigger a service failure...

1.9CVSS5.9AI score0.00243EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/16 12:00 a.m.•16 views

The vulnerability of Intel Graphics Driver drivers lies in insufficient validation of input data, which allows attackers to exploit their privileges.

The vulnerability of Intel Graphics Drivers’ drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

6.1CVSS7.2AI score0.00274EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/02/13 12:00 a.m.•31 views

Horde Groupware Webmail 跨站脚本漏洞

Horde Groupware Webmail is a browser-based, enterprise-class communications suite from Horde, Inc. A cross-site scripting vulnerability exists in Horde Groupware Webmail Edition, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...

6.1CVSS6.5AI score0.04944EPSS
SaveExploits7References14
NVD
NVD
•added 2021/02/12 12:15 a.m.•27 views

CVE-2020-27860

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS0.03554EPSS
SaveExploits0References2
Prion
Prion
•added 2021/02/12 12:15 a.m.•30 views

Deserialization of untrusted data

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of serialized objects provided to the EventCoordinator endpoint...

10CVSS9.8AI score0.81753EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/12 12:00 a.m.•54 views

Microsoft SharePoint Workflow Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the SPWorkflowDataSourceView class. The issue results from...

8.8CVSS4.3AI score0.06303EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/11 12:00 a.m.•25 views

BIG-IP 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in BIG-IP, which stems from the lack of proper validation of client-side data by t...

6.1CVSS6.8AI score0.00604EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/11 12:00 a.m.•24 views

Open Build Service 跨站脚本漏洞

Open Build Service OBS is a general-purpose system for building and distributing packages from source code in an automated, consistent, and repeatable manner, organized by the Open Build Service. A cross-site scripting vulnerability exists in Open Build Service that stems from a lack of proper...

6.3CVSS6.1AI score0.00745EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/02/11 12:00 a.m.•23 views

F5 BIG-IP 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. F5 BIG-IP suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client data by th...

8.3CVSS7.1AI score0.00816EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•16 views

PNPSCADA Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in PNPSCADA that stems from a lack of proper validation of client-side data by the WEB application. An attacker could exploit this vulnerability to execute client-side code...

6.1CVSS6.3AI score0.00711EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•22 views

Wekan 跨站脚本漏洞

Wekan is a highly finished open source kanban tool. wekan suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in WEB applications. An attacker could exploit the vulnerability to execute malicious javascript code...

5.4CVSS6AI score0.00751EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•34 views

Omron CX-One NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

7.8CVSS5.7AI score0.07612EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•20 views

Intel EPID SDK Input Validation Error Vulnerability

An input validation error vulnerability exists in the Intel EPID SDK that arises from a network system or product that does not properly validate incoming data...

7.8CVSS7.1AI score0.00293EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•23 views

Henriquedornas 跨站脚本漏洞

Henriquedornas is a web framework from Henriquedornas Brazil. Provides a framework for building websites. A cross-site scripting vulnerability exists in Henriquedornas that stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerabilit...

5.4CVSS6AI score0.00662EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•21 views

McAfee McAfee Endpoint Security Cross-Site Scripting Vulnerability

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports control of the entire threat defense lifecycle for real-time communications and actionable threat forensics, among other...

4.8CVSS5.8AI score0.00637EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•49 views

Adobe Photoshop TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS4AI score0.03043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•45 views

Adobe Illustrator DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Illustrator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of D...

7.8CVSS4.4AI score0.02329EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•46 views

Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the camera codec...

7.8CVSS3.7AI score0.0251EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/02/10 12:00 a.m.•45 views

Microsoft Windows Camera Codec Pack Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS3.6AI score0.03375EPSS
SaveExploits1References1
Rows per page
Query Builder