CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2771 matches found

BDU FSTEC•added 2021/04/21 12:00 a.m.•12 views

The vulnerability of the Knowledge Management component of the SAP NetWeaver software integration platform allows a perpetrator to gain access, modify, or make existing files inaccessible.

The vulnerability of the Knowledge Management component of the SAP NetWeaver software integration platform is related to the absence of restrictions on file loading. Exploiting this vulnerability allows a malicious actor to remotely gain access, modify, or make existing files inaccessible using a...

7.5CVSS6.9AI score0.00934EPSS

SaveExploits0References3Affected Software1

Positive Technologies•added 2021/04/14 12:00 a.m.•8 views

PT-2021-8851 · Cloud Foundry +3 · Archiver +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is caused by improper path sanitization, allowing archives with relative file paths to write or overwrite files outside the intended directory...

9.1CVSS8.9AI score0.01188EPSS

SaveExploits0References10

BDU FSTEC•added 2021/04/14 12:00 a.m.•16 views

The vulnerability of the file system filter driver of the Secret Net Studio protection system allows a intruder to gain unauthorized access to protected information, or to have control over the creation, addition, or deletion of files.

The vulnerability of the file system filter driver of the Secret Net Studio security system is related to incorrect handling of hard links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, or to have control over the ability to modify, add,...

6.7CVSS5.5AI score

SaveExploits0References1Affected Software2

Cvelist•added 2021/04/13 6:31 p.m.•34 views

CVE-2021-22716

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit V1.15.9 and prior...

7.8CVSS8.2AI score0.00765EPSS

SaveExploits0References2

OSV•added 2021/03/30 2:15 a.m.•12 views

CVE-2021-25159

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below...

6.5CVSS5.9AI score0.12573EPSS

SaveExploits4References3

NVD•added 2021/03/30 2:15 a.m.•32 views

CVE-2021-25159

8.5CVSS0.12573EPSS

SaveExploits4References3

NVD•added 2021/03/30 2:15 a.m.•44 views

CVE-2021-25160

4.9CVSS0.06607EPSS

SaveExploits3References3

Prion•added 2021/03/30 2:15 a.m.•29 views

Design/Logic Flaw

8.5CVSS7.3AI score0.12573EPSS

SaveExploits4References3Affected Software2

ATTACKERKB•added 2021/03/30 2:15 a.m.•17 views

CVE-2021-25159

8.5CVSS7.3AI score0.12573EPSS

SaveExploits4References4

Prion•added 2021/03/30 2:15 a.m.•25 views

Design/Logic Flaw

4CVSS6.6AI score0.06607EPSS

SaveExploits3References3Affected Software2

Cvelist•added 2021/03/30 1:42 a.m.•43 views

CVE-2021-25160

5.7AI score0.06607EPSS

SaveExploits3References3

CVE•added 2021/03/30 1:42 a.m.•160 views

CVE-2021-25160

CVE-2021-25160 is a remote arbitrary file-write vulnerability in Aruba Instant (IAP) web UI/exposed interfaces. Multiple Aruba Instant versions are affected (e.g., 6.4.x up to 6.4.4.8-4.2.4.17; 6.5.x up to 6.5.4.18; 8.3.x up to 8.3.0.14; 8.5.x up to 8.5.0.11; 8.6.x up to 8.6.0.7; 8.7.x up to 8.7....

4.9CVSS5.3AI score0.06607EPSS

SaveExploits3References3Affected Software1

Cvelist•added 2021/03/30 1:35 a.m.•38 views

CVE-2021-25159

6.8AI score0.12573EPSS

SaveExploits4References3

CVE•added 2021/03/30 1:35 a.m.•167 views

CVE-2021-25159

CVE-2021-25159 refers to a remote arbitrary file write vulnerability in Aruba Instant Access Point (IAP) products. Affected lines include Aruba Instant 6.4.x (6.4.4.8-4.2.4.17 and below), 6.5.x (6.5.4.18 and below), 8.3.x (8.3.0.14 and below), 8.5.x (8.5.0.11 and below), 8.6.x (8.6.0.7 and below)...

8.5CVSS6.6AI score0.12573EPSS

SaveExploits4References3Affected Software1

NVD•added 2021/03/30 1:15 a.m.•22 views

CVE-2021-25155

8.5CVSS0.1242EPSS

SaveExploits6References4

Prion•added 2021/03/30 1:15 a.m.•23 views

Design/Logic Flaw

8.5CVSS6.8AI score0.1242EPSS

SaveExploits6References4Affected Software2

OSV•added 2021/03/30 12:15 a.m.•10 views

CVE-2021-25148

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba h...

8.1CVSS5.9AI score0.00918EPSS

SaveExploits0References2

NVD•added 2021/03/30 12:15 a.m.•24 views

CVE-2021-25148

8.5CVSS0.00918EPSS

SaveExploits0References2

Prion•added 2021/03/30 12:15 a.m.•22 views

Design/Logic Flaw

8.5CVSS8.6AI score0.00918EPSS

SaveExploits0References2Affected Software2

CVE•added 2021/03/30 12:13 a.m.•173 views

CVE-2021-25155

CVE-2021-25155 affects Aruba Instant IAPs with a remote arbitrary file modification vulnerability exposed via the Web UI. Affected versions include Aruba Instant 6.4.x (6.4.4.8-4.2.4.17 and below), 6.5.x (6.5.4.18 and below), 8.3.x (8.3.0.14 and below), 8.5.x (8.5.0.11 and below), 8.6.x (8.6.0.6 ...

8.5CVSS6.5AI score0.1242EPSS

SaveExploits6References4Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by