Lucene search
+L

10438 matches found

BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•13 views

The vulnerability of the Ceph software object storage network, related to authentication procedures that allow attackers to access confidential data, compromise the integrity of those data, and cause service failures.

The vulnerability of the Ceph software object networking system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data, compromise its integrity, and even cause service failures...

7.2CVSS6.6AI score0.02128EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•14 views

The vulnerability of the Midnight Commander file manager, related to deficiencies in authentication procedures, allows attackers to compromise data integrity.

The vulnerability of the Midnight Commander file manager is related to the lack of checks and display of server timestamps. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

7.8CVSS7.1AI score0.0199EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•16 views

The vulnerability of the Node.js module for processing tar archives using Node-tar lies in the shortcomings of the pathname limitation, which allows attackers to compromise the integrity of the data and cause service failures.

The vulnerability of the Node.js module for processing tar archives using Node-tar is related to improper filtering of the '/' character sequence. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

8.1CVSS6.8AI score0.15133EPSS
SaveExploits1References8Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•14 views

The vulnerability of the Node.js module for processing tar archives, Node-tar, is related to shortcomings in pathname restrictions for directories. This allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Node.js module for processing tar archives with the Node-tar module is related to the possibility of bypassing the symbolic link checks for directories. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

8.1CVSS6.7AI score0.07795EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•18 views

The vulnerability of the svn module in the Ansible configuration management system, related to the disclosure of information, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the svn module in the Ansible configuration management system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to access confidential data and compromise its integrity...

3.9CVSS6.5AI score0.00361EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•13 views

The vulnerability of the Ansible configuration management system, related to the exposure of information, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Ansible configuration management system is related to the exposure of sensitive information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

5.5CVSS6.3AI score0.01774EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•18 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...

6.1CVSS6.7AI score0.011EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•10 views

The vulnerability of elements in iframe modules for web page rendering in WebKitGTK and WPE WebKit allows attackers to exploit it to compromise the integrity of web page data. This vulnerability is related to the lack of protection for the structure of web pages.

The vulnerability of elements in iframe modules for displaying web pages in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...

6.1CVSS6.7AI score0.01155EPSS
SaveExploits0References8Affected Software5
Tenable Nessus
Tenable Nessus
•added 2022/01/13 12:00 a.m.•40 views

openSUSE 15 Security Update : python39-pip (openSUSE-SU-2022:0064-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0064-1 advisory. - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to...

5.7CVSS7.1AI score0.01829EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
•added 2022/01/13 12:00 a.m.•31 views

SUSE SLED15 / SLES15 Security Update : python39-pip (SUSE-SU-2022:0064-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0064-1 advisory. - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references bsc1186819. Tenable has extracted the...

5.7CVSS6.8AI score0.01829EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
•added 2022/01/12 12:00 a.m.•16 views

The vulnerability of the IBM Tivoli Workload Scheduler software arises from buffer overflows in the stack, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the IBM Tivoli Workload Scheduler software arises from buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

5.9CVSS6.2AI score0.00254EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2022/01/10 2:10 p.m.•26 views

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS0.00562EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/10 2:10 p.m.•10 views

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS7.1AI score0.00562EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/01/10 2:10 p.m.•11 views

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS7.1AI score0.00562EPSS
SaveExploits0References1
Prion
Prion
•added 2022/01/10 2:10 p.m.•25 views

Design/Logic Flaw

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

5CVSS7.6AI score0.00562EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/01/10 12:00 a.m.•10 views

The vulnerability of the fr-archive-libarchive.c component in the File Roller archiver program allows a perpetrator to compromise the integrity and accessibility of the protected information.

The vulnerability of the fr-archive-libarchive.c component of the File Roller archiver program is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a attacker to compromise the integrity and accessibility of the protected...

3.9CVSS5.4AI score0.00611EPSS
SaveExploits1References7Affected Software6
Cvelist
Cvelist
•added 2022/01/07 10:39 p.m.•33 views

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

7.8AI score0.00562EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/07 10:39 p.m.•60 views

CVE-2021-40028

CVE-2021-40028 affects Huawei HarmonyOS eID/SeID module. The vulnerability is an out-of-bounds memory write in the eID/SeID component, with potential impact to data integrity. Documents indicate the issue exists in HarmonyOS’s SeID/eID implementation; no concrete exploit details or versions are p...

7.5CVSS7.5AI score0.00562EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/01/06 12:00 a.m.•47 views

EulerOS Virtualization 3.0.2.6 : samba (EulerOS-SA-2021-2883)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN...

7.5CVSS6.4AI score0.04328EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/01/06 12:00 a.m.•39 views

EulerOS Virtualization 3.0.2.6 : rpm (EulerOS-SA-2021-2876)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a...

7CVSS6.6AI score0.00794EPSS
SaveExploits0References3
Rows per page
Query Builder