Lucene search
K

11189 matches found

Debian CVE
Debian CVE
added 2021/12/23 7:48 p.m.24 views

CVE-2021-44542

A memory leak vulnerability was found in Privoxy when handling errors...

7.5CVSS3.2AI score0.00633EPSS
Exploits0
CNVD
CNVD
added 2021/12/22 12:0 a.m.14 views

GPAC null pointer dereference vulnerability (CNVD-2022-03622)

GPAC is an open source multimedia framework. gfisomparsemovieboxesinternal function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS4.6AI score0.00288EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/22 12:0 a.m.18 views

GPAC null pointer dereference vulnerability (CNVD-2022-03625)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC has a null pointer dereference vulnerability in the BDCheckSFTimeOffset function, which can be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS4.6AI score0.00149EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/12/22 12:0 a.m.0 views

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software, related to session management errors, allows a intruder to gain unauthorized access to the device.

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software is related to session management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely...

10CVSS5.5AI score
Exploits0References1
CNVD
CNVD
added 2021/12/22 12:0 a.m.18 views

GPAC null pointer dereference vulnerability (CNVD-2022-03618)

GPAC is an open source multimedia framework. gfsgvrmlmfalloc function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS4.6AI score0.00266EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/22 12:0 a.m.17 views

GPAC null pointer dereference vulnerability (CNVD-2022-03623)

GPAC is an open source multimedia framework. gfdumpvrmldynfield.isra function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS4.7AI score0.00138EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/22 12:0 a.m.17 views

GPAC null pointer dereference vulnerability (CNVD-2022-03620)

GPAC is an open source multimedia framework. gfnodegetfield function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS4.7AI score0.00149EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/22 12:0 a.m.19 views

GPAC null pointer dereference vulnerability (CNVD-2022-03616)

GPAC is an open source multimedia framework. gfsvggetattributename function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS4.6AI score0.00288EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/22 12:0 a.m.15 views

GPAC null pointer dereference vulnerability (CNVD-2022-03624)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability in the dumpodtosaf.isra function, which can be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS4.8AI score0.00149EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/22 12:0 a.m.19 views

GPAC null pointer dereference vulnerability (CNVD-2022-03619)

GPAC is an open source multimedia framework. gfnodegettag function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

5.5CVSS4.6AI score0.00138EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2021/12/21 12:0 a.m.7 views

PT-2022-4510 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a driver vulnerability in the Linux kernel's netback component, which is associated with resource release errors. Exploitation of this issue could allow an...

9.8CVSS7.3AI score0.81981EPSS
Exploits339References1451
Positive Technologies
Positive Technologies
added 2021/12/21 12:0 a.m.8 views

PT-2022-3658 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The netback driver vulnerability in the Linux kernel is related to resource release errors. Exploitation of this issue may allow an attacker to cause a denial of service...

9.8CVSS7.4AI score0.81981EPSS
Exploits339References1440
CNNVD
CNNVD
added 2021/12/21 12:0 a.m.2 views

Pimcore 跨站脚本漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications. pimcore suffers from a cross-site scriptin...

9CVSS4.9AI score0.00027EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.1 views

The vulnerability of the loader components in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Loader components in Microsoft Edge and Google Chrome is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code or cause a service failure through a specially created malicious web page...

10CVSS0.0146EPSS
Exploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.1 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to type mixing errors, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9.3CVSS0.00243EPSS
Exploits0References17Affected Software14
OSV
OSV
added 2021/12/19 7:43 p.m.22 views

GSD-2021-1002582 serial: liteuart: fix minor-number leak on probe errors

serial: liteuart: fix minor-number leak on probe errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2021/12/17 7:15 p.m.0 views

UBUNTU-CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5.3CVSS6.8AI score0.00064EPSS
Exploits1References5
CNVD
CNVD
added 2021/12/17 12:0 a.m.20 views

YetiForceCrm processing logic error vulnerability

YetiForceCrm is an open source crm system from the Polish company YetiForce. Yetiforcecrm suffers from a processing logic error vulnerability, which stems from Yetiforcecrm being vulnerable to business logic errors. No detailed vulnerability details are currently available...

7.7CVSS2.7AI score0.00186EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.0 views

The vulnerability of the Moodle administration system, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Moodle administration system is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

10CVSS0.01188EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.1 views

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR GC108P, NETGEAR GC108PP, NETGEAR GS108Tv3, NETGEAR GS110TPP, NETGEAR GS110TPv3, NETGEAR GS110TUP, NETGEAR GS308T, NETGEAR GS310TP, NETGEAR GS710TUP, NETGEAR GS716TP, NETGEAR GS716TPP, NETGEAR GS724TPP, NETGEAR GS724TPv2, NETGEAR GS728TPPv2, NETGEAR GS728TPv2, NETGEAR GS750E, NETGEAR GS752TPP, NETGEAR GS752TPv2, NETGEAR MS510TXM, and NETGEAR MS510TXUP arises due to synchronization errors when using a shared resource. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR GC108P, NETGEAR GC108PP, NETGEAR GS108Tv3, NETGEAR GS110TPP, NETGEAR GS110TPv3, NETGEAR GS110TUP, NETGEAR GS308T, NETGEAR GS310TP, NETGEAR GS710TUP, NETGEAR GS716TP, NETGEAR GS716TPP, NETGEAR GS724TPP, NETGEAR GS724TPv2...

7.4CVSS0.00162EPSS
Exploits1References4Affected Software19
Rows per page
Query Builder