Lucene search
+L

2884 matches found

attackerkb
attackerkb
•added 2021/03/31 2:15 p.m.•12 views

CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.5CVSS6.8AI score0.01506EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/03/31 1:41 p.m.•54 views

CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.9AI score0.01506EPSS
SaveExploits0References2
Mend
Mend
•added 2021/03/31 1:41 p.m.•7 views

CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

7.1CVSS0.01506EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/31 12:00 a.m.•10 views

CVE-2021-23985: Undefined Security Weakness

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.5CVSS5.9AI score0.01506EPSS
SaveExploits0References1
Ubuntu
Ubuntu
•added 2021/03/25 10:36 p.m.•161 views

USN-4893-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, or execute arbitrary code. CVE-2021-23981, CVE-2021-23982, CVE-2021-23983,...

8.8CVSS8.2AI score0.01506EPSS
SaveExploits0
Veracode
Veracode
•added 2021/03/25 1:22 a.m.•31 views

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists due to the Devtools remote debugging feature which could be enabled in a way that was unnoticable to the user, which allow an attacker to make direct network connection to the victim to monitor the user's browsing activity...

6.5CVSS2.4AI score0.01506EPSS
SaveExploits0References4Affected Software7
osv_ubuntu
osv_ubuntu
•added 2021/03/25 12:00 a.m.•30 views

UBUNTU-CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.5CVSS6.8AI score0.01506EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2021/03/24 9:15 p.m.•27 views

CVE-2021-1381

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could...

6.1CVSS7.1AI score0.00277EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/24 9:15 p.m.•38 views

Design/Logic Flaw

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could...

3.6CVSS6.2AI score0.00277EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/03/24 8:20 p.m.•16 views

CVE-2021-1381 Cisco IOS XE Software Active Debug Code Vulnerability

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could...

6.1CVSS6.8AI score0.00277EPSS
SaveExploits0References1
CVE
CVE
•added 2021/03/24 8:20 p.m.•123 views

CVE-2021-1381

Cisco IOS XE Software contains a vulnerability due to insufficient command authorization restrictions that could allow an authenticated, high-privilege local attacker or an unauthenticated attacker with physical access to open a debugging console by executing commands on the hardware. The issue e...

6.1CVSS6.2AI score0.00277EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/03/24 4:00 p.m.•12 views

CVE-2021-1381

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could...

6.1CVSS6.7AI score0.00277EPSS
SaveExploits0References2
Cisco
Cisco
•added 2021/03/24 4:00 p.m.•113 views

Cisco IOS XE Software Active Debug Code Vulnerability

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could...

6.1CVSS6.3AI score0.00277EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/24 12:00 a.m.•5 views

CVE-2021-1381: Active Debug Code

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could...

6.1CVSS6AI score0.00277EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/03/24 12:00 a.m.•4 views

PT-2021-2509

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description The issue is related to insufficient command authorization restrictions in Cisco IOS XE Software, allowing an authenticated, local attacker with high privileges or an...

6.6CVSS0.00277EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2021/03/23 12:00 a.m.•5 views

PT-2021-15640

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 87 Description: The issue allows an attacker to enable the Devtools remote debugging feature unnoticed by the user, potentially by altering specific about:config values, such as those modified by malware running on t...

6.5CVSS0.01506EPSS
SaveExploits0
CloudLinux
CloudLinux
•added 2021/03/16 4:48 p.m.•56 views

Update of python-perf, kernel-firmware, perf, kernel-debug-devel, kernel-devel, kernel-debug-devel, kernel-headers, kernel-firmware, kernel, kernel-debug

...

2.1AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2021/03/15 5:37 p.m.•246 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Sudo Baron Samedit This repository is CVE-202...

7.8CVSS7.1AI score0.99962EPSS
SaveExploits83
Packet Storm
Packet Storm
•added 2021/02/23 12:00 a.m.•844 views

HFS (HTTP File Server) 2.3.x Remote Code Execution

Exploit Title: HFS HTTP File Server 2.3.x - Remote Command Execution 3 Google Dork: intext:"httpfileserver 2.3" Date: 20/02/2021 Exploit Author: Pergyz Vendor Homepage: http://www.rejetto.com/hfs/ Software Link: https://sourceforge.net/projects/hfs/ Version: 2.3.x Tested on: Microsoft Windows...

7.5CVSS9.5AI score0.99323EPSS
SaveExploits25
BDU FSTEC
BDU FSTEC
•added 2021/02/23 12:00 a.m.•17 views

Intel Information Disclosure

The vulnerability of Intel microprogramming software is related to the transmission of confidential information in debugging messages. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

4CVSS5.5AI score0.00296EPSS
SaveExploits0References3
Rows per page
Query Builder