Lucene search
+L

11926 matches found

Positive Technologies
Positive Technologies
added 2022/03/30 12:00 a.m.4 views

PT-2022-2653 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description: The issue is related to an out-of-bounds read in the kernel mode layer of the NVIDIA GPU Display Driver. This can be exploited by an unprivileged...

7.7CVSS6.6AI score0.0033EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2022/03/30 12:00 a.m.6 views

PT-2022-3227 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver affected versions not specified Description: The issue is related to an out-of-bounds write in the ECC layer of the NVIDIA GPU Display Driver, which can be exploited by an unprivileged regular user. This may lead to...

7.1CVSS6.7AI score0.00302EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2022/03/30 12:00 a.m.8 views

PT-2022-3250

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows affected versions not specified Description The issue is related to a NULL pointer dereference in the kernel mode layer handler for DxgkDdiEscape, which may lead to a system crash. This can be exploited to...

5.5CVSS5.8AI score0.00281EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2022/03/29 1:15 a.m.5 views

CVE-2022-26269

Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages...

4.6CVSS5.9AI score0.00388EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/03/28 7:15 p.m.9 views

CVE-2022-0751

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands...

8.8CVSS5.6AI score0.01448EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/27 1:15 a.m.4 views

CVE-2022-26205

Marky commit 3686565726c65756e was discovered to contain a remote code execution RCE vulnerability via the Display text fields. This vulnerability allows attackers to execute arbitrary code via injection of a crafted payload...

9.8CVSS6.7AI score0.02014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/03/27 12:00 a.m.7 views

PT-2022-17720 · Marky · Marky

Name of the Vulnerable Software and Affected Versions: Marky commit 3686565726c65756e Description: The issue is related to a remote code execution RCE vulnerability. It allows attackers to execute arbitrary code via injection of a crafted payload through the Display text fields. Recommendations:...

9.8CVSS9.8AI score0.02014EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2022/03/23 10:12 p.m.36 views

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-nova) security update

An update for openstack-nova is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

6.1CVSS6.8AI score0.26792EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2022/03/23 12:00 a.m.12 views

Apple iMessage iOS 安全漏洞

Apple iMessage iOS is an instant messaging service from Apple Inc. in the United States. A security vulnerability exists in Apple iMessage iOS Messages app version 12.4, which stems from a failure of the user interface in iMessage Messages app iOS version 12.4 and earlier to properly present URI...

6.5CVSS6.5AI score0.01323EPSS
SaveExploits2References5
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:00 a.m.15 views

The vulnerability of Visual Studio Code’s source editor, related to errors in information representation on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Visual Studio Code’s source editor is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

6.4CVSS6.8AI score0.01608EPSS
SaveExploits0References6Affected Software1
RedHat Linux
RedHat Linux
added 2022/03/22 5:31 p.m.10 views

credentials: Stored XSS vulnerabilities in jenkins plugin

A flaw was found in the Jenkins credentials plugin. The Jenkins credentials plugin does not escape the name and description of Credentials parameters on views displaying parameters. This issue results in a stored Cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure...

5.4CVSS5.7AI score0.78965EPSS
SaveExploits0References5
NVD
NVD
added 2022/03/21 10:15 p.m.25 views

CVE-2022-26174

A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...

9.8CVSS0.02422EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/21 10:15 p.m.5 views

CVE-2022-26174

A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...

9.8CVSS6.7AI score0.02422EPSS
SaveExploits1References2
Prion
Prion
added 2022/03/21 10:15 p.m.21 views

Remote code execution

A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...

7.5CVSS9.6AI score0.02422EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/03/21 9:54 p.m.110 views

CVE-2022-26174

Beekeeper Studio 3.2.0 is affected by a remote code execution (RCE) via a crafted payload injected into display fields. Multiple connected sources corroborate the vulnerability description (RCE in Beekeeper Studio v3.2.0). The exact root cause is not fully detailed across the provided documents, ...

9.8CVSS9.7AI score0.02422EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/03/21 9:54 p.m.24 views

CVE-2022-26174

A remote code execution RCE vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields...

8.6AI score
SaveExploits0References3
OSV
OSV
added 2022/03/21 10:15 a.m.9 views

CVE-2022-1004

Accounted time is shown in the Ticket Detail View External Interface, even if ExternalFrontend::TicketDetailViewAccountedTimeDisplay is disabled...

4.3CVSS5.8AI score0.00625EPSS
SaveExploits0References1
Prion
Prion
added 2022/03/21 10:15 a.m.29 views

Code injection

Accounted time is shown in the Ticket Detail View External Interface, even if ExternalFrontend::TicketDetailViewAccountedTimeDisplay is disabled...

4CVSS4.8AI score0.00625EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/03/21 9:15 a.m.77 views

CVE-2022-1004

CVE-2022-1004 affects OTRS and concerns an information disclosure where the Billing Time ExternalFrontend::TicketDetailView###AccountedTimeDisplay setting is shown in the Ticket Work Order details view even if the display is disabled. Multiple sources corroborate this, including NVD and CVE recor...

4.3CVSS4.6AI score0.00625EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/21 12:00 a.m.14 views

PT-2022-17707 · Unknown · Beekeeper Studio

Name of the Vulnerable Software and Affected Versions: Beekeeper Studio version 3.2.0 Description: A remote code execution issue allows attackers to execute arbitrary code via a crafted payload injected into the display fields. Recommendations: For Beekeeper Studio version 3.2.0, at the moment,...

9.8CVSS9.7AI score0.02422EPSS
SaveExploits1References5
Rows per page
Query Builder