Lucene search
+L

1243 matches found

NVD
NVD
•added 2022/04/29 12:15 p.m.•44 views

CVE-2021-44595

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges...

9CVSS0.21118EPSS
SaveExploits4References3
attackerkb
attackerkb
•added 2022/04/29 12:15 p.m.•12 views

CVE-2021-44596

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" servicethe service is running under SYSTEM privileges and manipulate it to execute malicious...

10CVSS8.7AI score0.22929EPSS
SaveExploits4References6
attackerkb
attackerkb
•added 2022/04/29 12:15 p.m.•10 views

CVE-2021-44595

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges...

9CVSS8.1AI score0.21118EPSS
SaveExploits4References6
Prion
Prion
•added 2022/04/29 12:15 p.m.•43 views

Remote code execution

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" servicethe service is running under SYSTEM privileges and manipulate it to execute malicious...

10CVSS10AI score0.22929EPSS
SaveExploits4References4Affected Software1
CVE
CVE
•added 2022/04/29 11:23 a.m.•142 views

CVE-2021-44596

CVE-2021-44596 affects Wondershare Dr. Fone (as of 2021-12-06) with a flaw in the InstallAssistService.exe that runs under SYSTEM privileges. An unauthenticated attacker can send UDP traffic to this service and manipulate it to execute a malicious executable remotely, yielding SYSTEM-level code e...

10CVSS8.7AI score0.22929EPSS
SaveExploits4References3Affected Software1
Cvelist
Cvelist
•added 2022/04/29 11:23 a.m.•66 views

CVE-2021-44596

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" servicethe service is running under SYSTEM privileges and manipulate it to execute malicious...

10AI score0.22929EPSS
SaveExploits4References2
Cvelist
Cvelist
•added 2022/04/29 11:23 a.m.•63 views

CVE-2021-44595

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges...

9.2AI score0.21118EPSS
SaveExploits4References2
CVE
CVE
•added 2022/04/29 11:23 a.m.•160 views

CVE-2021-44595

CVE-2021-44595 affects Wondershare Dr. Fone (latest as of 2021-12-06): Incorrect Access Control allows a normal user to send crafted packets to ElevationService.exe and execute arbitrary code with SYSTEM privileges. Documented as a privilege-escalation vulnerability; several public references des...

9CVSS8.1AI score0.21118EPSS
SaveExploits4References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/29 12:00 a.m.•6 views

CVE-2021-44595: Missing Authorization

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges...

9CVSS8.1AI score0.21118EPSS
SaveExploits4References4
Positive Technologies
Positive Technologies
•added 2022/04/29 12:00 a.m.•23 views

PT-2022-12182

Name of the Vulnerable Software and Affected Versions Wondershare LTD Dr. Fone as of 2021-12-06 version Description The issue is related to remote code execution due to software design flaws. An unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service, which runs...

10CVSS8.8AI score0.22929EPSS
SaveExploits4References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/29 12:00 a.m.•4 views

CVE-2021-44596: Undefined Security Weakness

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" servicethe service is running under SYSTEM privileges and manipulate it to execute malicious...

10CVSS8.7AI score0.22929EPSS
SaveExploits4References3
osv_gsd
osv_gsd
•added 2022/04/24 8:41 p.m.•21 views

GSD-2022-1001033 habanalabs: fix possible memory leak in MMU DR fini

habanalabs: fix possible memory leak in MMU DR fini This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•3 views

PT-2022-29306

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A possible memory leak was identified in the MMU DR fini function of the habanalabs module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•4 views

PT-2022-29649

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A possible memory leak was identified in the MMU DR fini of habanalabs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•4 views

PT-2022-29977

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A possible memory leak was identified in the MMU DR fini function of the habanalabs module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

5.5AI score
SaveExploits0References1
NVD
NVD
•added 2022/04/07 2:15 a.m.•32 views

CVE-2020-27375

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars...

6.5CVSS0.00602EPSS
SaveExploits1References2
NVD
NVD
•added 2022/04/07 2:15 a.m.•35 views

CVE-2020-27374

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to BP Monitoring...

7.9CVSS0.00802EPSS
SaveExploits1References2
NVD
NVD
•added 2022/04/07 2:15 a.m.•40 views

CVE-2020-27376

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication...

8.8CVSS0.00987EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/04/07 2:15 a.m.•26 views

CVE-2020-27376

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication...

8.8CVSS5.8AI score0.00987EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/04/07 2:15 a.m.•24 views

CVE-2020-27374

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to BP Monitoring...

7.5CVSS7.1AI score0.00802EPSS
SaveExploits1References3
Rows per page
Query Builder