Lucene search
+L

1070 matches found

CNVD
CNVD
•added 2020/10/23 12:00 a.m.•19 views

Ghisler Total Commander Elevation of Privilege Vulnerability

Ghisler Total Commander is a file manager software from the American company Ghisler. The program offers file compression, management, ftp sharing and more. An elevation of privilege vulnerability exists in Ghisler Total Commander version 9.51, which stems from insufficient access restrictions in...

7.3CVSS7.1AI score0.00394EPSS
SaveExploits1References1
OSV
OSV
•added 2020/10/21 3:15 p.m.•17 views

CVE-2020-14802

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

6.1CVSS7.2AI score0.00923EPSS
SaveExploits0References1
OSV
OSV
•added 2020/10/21 3:15 p.m.•17 views

CVE-2020-14801

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

6.1CVSS6.8AI score0.0096EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/10/21 12:00 a.m.•14 views

SAP NetWeaver Enterprise Portal Cross-Site Scripting Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver Enterprise Portal Fiori Framework Page versions 7.5...

6.1CVSS6.1AI score0.00648EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2020/09/23 9:07 a.m.•7 views

A New Hacking Group Hitting Russian Companies With Ransomware

As ransomware attacks against critical infrastructure continue to spike in recent months, cybersecurity researchers have uncovered a new entrant that has been actively trying to conduct multistage attacks on large corporate networks of medical labs, banks, manufacturers, and software developers i...

5.9AI score
SaveExploits0
OSV
OSV
•added 2020/09/21 6:21 p.m.•12 views

OPENSUSE-SU-2020:1497-1 Security update for singularity

This update for singularity fixes the following issues: New version 3.6.3, addresses the following security issues: - CVE-2020-25039, boo1176705 When a Singularity action command run, shell, exec is run with the fakeroot or user namespace option, Singularity will extract a container image to a...

8.8CVSS8.7AI score0.0204EPSS
SaveExploits0References5
CNVD
CNVD
•added 2020/09/18 12:00 a.m.•13 views

SAP NetWeaver Cross-Site Scripting Vulnerability (CNVD-2020-52934)

SAP NetWeaver is an integrated application platform based on professional standards that dramatically reduces the complexity of system integration. Its components include portals, application servers, business intelligence solutions as well as system integration and data integration technologies....

5.4CVSS6.4AI score0.00648EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/09/14 12:00 a.m.•16 views

SAP NetWeaver Application Server Java Cross-Site Scripting Vulnerability

SAP NetWeaver Application Server is an application server from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server Java XML Forms versions 7.30, 7.31, 7.40, 7.50, which arises from a lack of proper validation of client-side data in the web application. An...

6.5CVSS6.2AI score0.00721EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2020/08/25 9:46 a.m.•14 views

Get Lifetime Access to 1000+ Premium Online Training Courses for Just $59

"In today's knowledge economy, continual learning is an imperative." — Those words from Aytekin Tank, the founder of JotForm, are particularly important for anyone working in IT or development. With over 1,000 premium courses complete list from top instructors, StackSkills Unlimited provides...

5.8AI score
SaveExploits0
CNVD
CNVD
•added 2020/08/25 12:00 a.m.•18 views

DBHcms Cross-Site Scripting Vulnerability (CNVD-2020-49088)

DBHcms is a small, free and open source content management system for personal and small business websites. A stored cross-site scripting vulnerability exists in DBHcms 1.2.0. The vulnerability stems from the failure of a security filter for userlogin to exist in dbhcmsmodmod.users.view.php on li...

4.8CVSS6.1AI score0.00851EPSS
SaveExploits1References1
OSV
OSV
•added 2020/08/21 4:15 a.m.•18 views

CVE-2020-24571

NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal...

7.5CVSS7.2AI score0.17959EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/08/14 12:00 a.m.•11 views

Artifex Software Ghostscript Buffer Overflow Vulnerability (CNVD-2020-46257)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

5.5CVSS8.1AI score0.02252EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/08/14 12:00 a.m.•7 views

Artifex Software Ghostscript Resource Management Error Vulnerability (CNVD-2020-46247)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

5.5CVSS7.8AI score0.01775EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/08/14 12:00 a.m.•8 views

Artifex GhostScript buffer overflow vulnerability (CNVD-2020-46239)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

5.5CVSS8.1AI score0.0187EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/08/14 12:00 a.m.•8 views

Artifex Software Ghostscript Resource Management Error Vulnerability

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

5.5CVSS7.8AI score0.01775EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/08/14 12:00 a.m.•19 views

Artifex Software Ghostscript Numeric Error Vulnerability (CNVD-2020-46251)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

5.5CVSS7.9AI score0.01833EPSS
SaveExploits1References1
OSV
OSV
•added 2020/08/13 4:15 a.m.•17 views

CVE-2020-8720

Buffer overflow in a subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable denial of service via local access...

5.5CVSS6.1AI score0.00327EPSS
SaveExploits0References2
OSV
OSV
•added 2020/08/13 3:15 a.m.•4 views

DEBIAN-CVE-2020-16305

A buffer overflow vulnerability in pcxwriterle in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

5.5CVSS6.6AI score0.02252EPSS
SaveExploits1References1
OSV
OSV
•added 2020/08/13 3:15 a.m.•10 views

ALPINE-CVE-2020-16305

A buffer overflow vulnerability in pcxwriterle in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

5.5CVSS7AI score0.02252EPSS
SaveExploits1References1
OSV
OSV
•added 2020/08/13 3:15 a.m.•5 views

DEBIAN-CVE-2020-16301

A buffer overflow vulnerability in okiibmprintpage1 in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

5.5CVSS6.6AI score0.0191EPSS
SaveExploits1References1
Rows per page
Query Builder