Lucene search
+L

11737 matches found

OSV
OSV
added 2021/12/17 7:15 p.m.10 views

UBUNTU-CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5.3CVSS6.8AI score0.01561EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.11 views

The vulnerability of the Moodle administration system, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Moodle administration system is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

10CVSS8.2AI score0.02383EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.10 views

The vulnerability of the Squid caching proxy server, related to authentication errors, allows a hacker to carry out a type of “man-in-the-middle” attack.

The vulnerability of the Squid application is related to authentication errors. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...

6.4CVSS7.2AI score0.02948EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.10 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.01387EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.9 views

The vulnerability of Microsoft Bing Search for Android, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Bing Search for Android relates to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spearishing attacks...

7.1CVSS6AI score0.01914EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.10 views

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR GC108P, NETGEAR GC108PP, NETGEAR GS108Tv3, NETGEAR GS110TPP, NETGEAR GS110TPv3, NETGEAR GS110TUP, NETGEAR GS308T, NETGEAR GS310TP, NETGEAR GS710TUP, NETGEAR GS716TP, NETGEAR GS716TPP, NETGEAR GS724TPP, NETGEAR GS724TPv2, NETGEAR GS728TPPv2, NETGEAR GS728TPv2, NETGEAR GS750E, NETGEAR GS752TPP, NETGEAR GS752TPv2, NETGEAR MS510TXM, and NETGEAR MS510TXUP arises due to synchronization errors when using a shared resource. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR GC108P, NETGEAR GC108PP, NETGEAR GS108Tv3, NETGEAR GS110TPP, NETGEAR GS110TPv3, NETGEAR GS110TUP, NETGEAR GS308T, NETGEAR GS310TP, NETGEAR GS710TUP, NETGEAR GS716TP, NETGEAR GS716TPP, NETGEAR GS724TPP, NETGEAR GS724TPv2...

7.4CVSS7.1AI score0.01401EPSS
SaveExploits1References4Affected Software19
CNVD
CNVD
added 2021/12/17 12:0 a.m.67 views

YetiForceCrm processing logic error vulnerability

YetiForceCrm is an open source crm system from the Polish company YetiForce. Yetiforcecrm suffers from a processing logic error vulnerability, which stems from Yetiforcecrm being vulnerable to business logic errors. No detailed vulnerability details are currently available...

7.7CVSS2.7AI score0.00708EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/16 9:1 p.m.50 views

GHSA-7V7W-F7C6-F829 YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number

YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number...

7.3CVSS4.3AI score0.0062EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/12/16 9:1 p.m.35 views

YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product

YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number...

7.7CVSS3.2AI score0.00708EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/12/16 9:1 p.m.89 views

GHSA-CXG7-84WP-8PCQ YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product

YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number...

4.3CVSS4.3AI score0.00708EPSS
SaveExploits1References4
CNVD
CNVD
added 2021/12/16 12:0 a.m.65 views

Discourse has an unspecified vulnerability (CNVD-2022-05508)

Discourse is an open source community discussion platform that includes community, email and chat room features. The platform includes community, email and chat room features. discourse-footnote has a security vulnerability that could be exploited to trigger null-reference javascript errors...

4.3CVSS1.9AI score0.00803EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.8 views

The vulnerability of the nginx.ingress.kubernetes.io/auth-type controller in the Kubernetes ingress-nginx cluster arises from improper external management of the file name. This allows attackers to access, create, modify, or delete data.

The vulnerability of the nginx.ingress.kubernetes.io/auth-type controller in the Kubernetes ingress-nginx cluster is related to errors in processing hypertext links. Exploiting this vulnerability may allow an attacker to gain access to the ability to create, modify, or delete data...

5.9CVSS6.2AI score0.00894EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.9 views

The vulnerability of the Omnibox address bar in Google Chrome allows a hacker to manipulate the content of the address bar using a specially created URL.

The vulnerability of the Omnibox address bar in Google Chrome is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to manipulate the content of the address bar using a specially created URL...

6.5CVSS6.9AI score0.01296EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.8 views

The vulnerability of the WS-Addressing plugin in the gSOAP software development environment allows a attacker to trigger a service failure.

The vulnerability of the WS-Addressing plugin in the gSOAP software development environment is related to errors in pointer manipulation during SOAP request processing. Exploiting this vulnerability allows an attacker to cause service failures by sending specially crafted HTTP requests...

7.5CVSS7.1AI score0.03048EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.7 views

The vulnerability of the WS-Security plugin in the gSOAP software development environment allows a attacker to cause a service failure.

The vulnerability of the WS-Security plugin in the gSOAP software development environment is related to errors in pointer assignment during SOAP request processing. Exploiting this vulnerability allows an attacker to cause service failures by sending specially crafted HTTP requests...

7.5CVSS7.2AI score0.03048EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.9 views

The vulnerability of Remote Desktop Services (RDS) on the Microsoft Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of Remote Desktop Services RDS on the Microsoft Windows operating system arises due to errors in checking RDS service requests when connecting via the RDP protocol. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.07586EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.13 views

The vulnerability of Google Chrome’s browser QR scanner function, which allows a hacker to circumvent existing access restrictions

The vulnerability of the Google Chrome browser’s QR scanner is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions...

4.3CVSS6.6AI score0.01127EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.9 views

The vulnerability of Microsoft Exchange Server servers, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

6.5CVSS6.5AI score0.93877EPSS
SaveExploits3References3
OpenVAS
OpenVAS
added 2021/12/16 12:0 a.m.37 views

OpenSSL: Invalid handling of X509_verify_cert() internal errors (20211214) - Linux

OpenSSL is prone to an invalid handling of X509verifycert internal errors vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...

7.5CVSS7.4AI score0.50099EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/12/16 12:0 a.m.28 views

OpenSSL: Invalid handling of X509_verify_cert() internal errors (20211214) - Windows

OpenSSL is prone to an invalid handling of X509verifycert internal errors vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...

7.5CVSS7.4AI score0.50099EPSS
SaveExploits0References1
Rows per page
Query Builder