Lucene search
K

10 matches found

ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.2 views

CVE-2023-34290

Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...

7.8CVSS6.2AI score0.00648EPSS
Exploits0References2
OSV
OSV
added 2022/02/18 8:15 p.m.2 views

CVE-2021-46623

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

5.5CVSS4.9AI score0.00547EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.4 views

CVE-2021-46595

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

5.5CVSS4.1AI score0.00547EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/02/18 8:15 p.m.2 views

CVE-2021-46595

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

5.5CVSS4.9AI score
Exploits0References2
hackapp
hackapp
added 2016/04/20 11:37 a.m.15 views

DS file - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application DS file published at the 'play' market has multiple vulnerabilities...

0.3AI score
Exploits0References1Affected Software1
NVD
NVD
added 2014/09/30 5:55 p.m.14 views

CVE-2014-6848

The DS file aka com.synology.DSfile application 4.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00134EPSS
Exploits0References3
Prion
Prion
added 2014/09/30 5:55 p.m.18 views

Design/Logic Flaw

The DS file aka com.synology.DSfile application 4.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2014/09/30 5:0 p.m.42 views

CVE-2014-6848

The CVE-2014-6848 entry affects the DS file (com.synology.DSfile) Android app, version 4.1.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Th...

5.4CVSS6AI score0.00134EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2014/09/30 5:0 p.m.21 views

CVE-2014-6848

The DS file aka com.synology.DSfile application 4.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00134EPSS
Exploits0References3
OSV
OSV
added 2010/01/15 5:30 p.m.0 views

DEBIAN-CVE-2010-0280

Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c...

9.3CVSS7.9AI score0.0348EPSS
Exploits1References1
Rows per page
Query Builder