Lucene search
K

11215 matches found

CNNVD
CNNVD
added 2023/02/09 12:0 a.m.2 views

SAMSUNG Mobile devices 缓冲区错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jan-2023 Release 1 and earlier, which stems from an out-of-bounds read vulnerability in the...

7.8CVSS7.4AI score0.00057EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/02/08 12:0 a.m.3 views

The vulnerability of the Atlassian Jira Service Management and Data Center data processing software, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of the Atlassian Jira Service Management and Data Center data processing software lies in authentication errors. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

9.7CVSS8AI score0.0236EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/08 12:0 a.m.1 views

The execution environment vulnerability for JavaScript and TypeScript Deno, related to synchronization errors when using a shared resource, allows a perpetrator to execute arbitrary code.

The vulnerability of the execution environment for JavaScript and TypeScript in Deno is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.00336EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/07 12:0 a.m.2 views

The vulnerability of the ImageMagick graphic editor lies in errors during the processing of input data, allowing attackers to gain access to protected information.

The vulnerability of the ImageMagick graphic editor is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information using the “profile” parameter...

7.8CVSS7.4AI score0.88528EPSS
Exploits28References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/02/06 12:0 a.m.1 views

The vulnerability of the libssh2 library, which implements Git methods in C language using Libgit2, allows a attacker to perform a type of “man-in-the-middle” attack.

The vulnerability of the libssh2 library, which implements Git methods in C using Libgit2, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

10CVSS6.1AI score0.00121EPSS
Exploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/02/06 12:0 a.m.1 views

The vulnerability of the Upload component of the software environment for working with Oracle Web Applications desktop integrations allows a hacker to gain full control over the application.

The vulnerability of the Upload component of the software environment for working with Oracle Web Applications Desktop Integrator relates to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

10CVSS8.1AI score0.94397EPSS
Exploits7References4Affected Software2
Code423n4
Code423n4
added 2023/02/01 12:0 a.m.11 views

No-check liquidity is != 0

Lines of code Vulnerability details Impact Proof of Concept Tools Used manual Recommended Mitigation Steps --- The text was updated successfully, but these errors were encountered: All reactions...

7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/02/01 12:0 a.m.2 views

The vulnerability of the Edge AutoFill Protection() function in the Microsoft Edge browser allows a perpetrator to disclose protected information.

The vulnerability of the Edge AutoFill Protection function in the Microsoft Edge browser is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created link...

7.8CVSS6.5AI score0.11431EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/31 12:0 a.m.1 views

The vulnerability of the Damage Cleanup Engine in the Trend Micro Maximum Security antivirus protection software allows a malicious actor to enhance their privileges.

The vulnerability of the Damage Cleanup Engine in the Trend Micro Maximum Security antivirus software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.1AI score0.0007EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/01/31 12:0 a.m.1 views

The vulnerability of the mobile application for collaborative work with documents, IBM Navigator Mobile for Android operating systems, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Navigator Mobile mobile application for collaborative document work on Android operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.5AI score0.00036EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/01/30 12:30 a.m.12 views

GHSA-VQQM-C9GX-773Q Froxlor contains Business Logic Errors

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...

4.9CVSS5.1AI score0.00207EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/01/30 12:30 a.m.22 views

Froxlor contains Business Logic Errors

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...

5.5CVSS5.5AI score0.00207EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:0 a.m.1 views

The vulnerability of the Overlay Filter component in Windows operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Overlay Filter component in Windows operating systems is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.7CVSS6.4AI score0.0644EPSS
Exploits0References3
NVD
NVD
added 2023/01/29 10:15 p.m.9 views

CVE-2023-0565

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...

5.5CVSS5.4AI score0.00207EPSS
Exploits1References2
Prion
Prion
added 2023/01/29 10:15 p.m.12 views

Code injection

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...

3.3CVSS5.1AI score0.00207EPSS
Exploits1References2Affected Software1
Code423n4
Code423n4
added 2023/01/29 12:0 a.m.6 views

Mitigation of H-05: Issue not mitigated

Lines of code Vulnerability details The sponsor confirmed the issue, but did not provide any PRs addressing it, so the same issue remains in the new code. --- The text was updated successfully, but these errors were encountered: All reactions...

6.9AI score
Exploits0
CNNVD
CNNVD
added 2023/01/29 12:0 a.m.3 views

Froxlor 安全漏洞

Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor versions prior to 2.0.10 that stems from certain errors in the business logic...

5.5CVSS5.3AI score0.00207EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/01/29 12:0 a.m.4 views

PT-2023-16369 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.10 Description: The issue concerns Business Logic Errors in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.10, update to version 2.0.10 or later to resolve the issue...

5.5CVSS5AI score0.00207EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2023/01/29 12:0 a.m.3 views

CVE-2023-0565 Business Logic Errors in froxlor/froxlor

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...

5.5CVSS5.4AI score0.00207EPSS
Exploits1References2
CVE
CVE
added 2023/01/29 12:0 a.m.69 views

CVE-2023-0565

CVE-2023-0565 targets Froxlor/Froxlor prior to version 2.0.10, with the described issue arising from business logic errors in the repository. Connected sources consistently identify the affected software and the remediation: upgrade to version 2.0.10 or later to resolve the issue. The available d...

5.5CVSS5.1AI score0.00207EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder