Lucene search
+L

23806 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:0 a.m.39 views

Adobe Flash Player Remote Code Execution Vulnerability

Unspecified vulnerability in Adobe Flash Player allows for remote code execution...

10CVSS3.9AI score0.20211EPSS
SaveIn wildExploits0
ATTACKERKB
ATTACKERKB
added 2022/03/21 8:15 p.m.6 views

CVE-2021-46390

An access control issue in the authentication module of LexarF35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service DoS. An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information...

7.2CVSS6.7AI score0.00491EPSS
SaveExploits1References5
Prion
Prion
added 2022/03/21 8:15 p.m.25 views

Design/Logic Flaw

An access control issue in the authentication module of LexarF35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service DoS. An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information...

7.2CVSS6.8AI score0.00491EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2022/03/21 7:59 p.m.96 views

CVE-2021-46390

CVE-2021-46390 – Lexar_F35 v1.0.34 exhibits an access-control flaw in the authentication module of a Lexar USB flash drive. The vulnerability allows a local attacker with physical access to bypass password authentication by analyzing and manipulating the returned password verification/comparison ...

7.2CVSS6.7AI score0.00491EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2022/03/21 12:0 a.m.10 views

Lexar_F35 授权问题漏洞

LexarF35 is a USB flash drive from Lexar Corporation. A security vulnerability exists in LexarF35 version 1.0.34, which originates from an access control issue in the authentication module. The vulnerability can be exploited by an attacker to access sensitive data and cause a denial of service Do...

7.2CVSS6.7AI score0.00491EPSS
SaveExploits1References5
Code423n4
Code423n4
added 2022/03/19 12:0 a.m.10 views

Withdrawal Requests Can Be Bypassed

Lines of code Vulnerability details Impact Withdrawals can be initiated by accounts by calling the initiateWithdrawal function. A block delay is enforced with an expiration to prevent flash loan attacks on the protocol. However, because withdrawal requests are conducted on the account's token...

7AI score
SaveExploits0
CNVD
CNVD
added 2022/03/14 12:0 a.m.24 views

Ming buffer overflow vulnerability (CNVD-2022-20529)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming that can be exploited by an attacker to cause a direct segmentation error and result in a denial of service...

6.5CVSS6.4AI score0.00957EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/14 12:0 a.m.19 views

Ming Out-of-Bounds Read Vulnerability (CNVD-2022-20530)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming that can be exploited by an attacker to cause a direct segmentation error and result in a denial of service...

6.5CVSS6.4AI score0.00897EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/14 12:0 a.m.33 views

Ming Out-of-Bounds Read Vulnerability

Ming is a Flash SWF output library written in C language. Ming has a security vulnerability that can be exploited by attackers to obtain sensitive information...

6.5CVSS6.3AI score0.01149EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.12 views

Ming 缓冲区错误漏洞

Ming is a Flash SWF output library written in C language. Ming has a security vulnerability that can be exploited by attackers to obtain sensitive information...

6.5CVSS5.5AI score0.01149EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.12 views

Ming 缓冲区错误漏洞

Ming is a Flash SWF output library written in C language. A security vulnerability exists in the decompiler.c file in Ming version 0.4.8, which can be exploited by attackers to cause a direct segmentation error and a denial of service...

6.5CVSS5.6AI score0.00897EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.9 views

Ming 缓冲区错误漏洞

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming that can be exploited by an attacker to cause a direct segmentation error and result in a denial of service...

6.5CVSS5.6AI score0.00897EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.8 views

Ming 缓冲区错误漏洞

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming that can be exploited by an attacker to cause a direct segmentation error and result in a denial of service...

6.5CVSS5.6AI score0.00957EPSS
SaveExploits1References3
Code423n4
Code423n4
added 2022/03/09 12:0 a.m.14 views

[WP-H4] anchor_basset_reward pending yields can be stolen

Lines of code Vulnerability details For yield farming aggregators, if the pending yield on an underlying strategy can be harvested and cause a surge of rewards to all existing investors, especially if the harvest can be triggered permissionlessly. Then the attacker can amplify the attack using a...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2022/03/08 12:0 a.m.59 views

Espruino Buffer Overflow Vulnerability (CNVD-2022-20169)

Espruino is a JavaScript interpreter. It is designed for devices with only 128kB of flash memory and 8kB of RAM. espruino has a security vulnerability that stems from src/jsvar.c containing a stack buffer overflow. No details of the vulnerability are currently available...

7.8CVSS2.7AI score0.00877EPSS
SaveExploits1References1
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.28 views

Adobe Flash Player Arbitrary Code Execution Vulnerability

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content...

9.3CVSS7.9AI score0.70384EPSS
SaveIn wildExploits11
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.61 views

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code...

9.3CVSS7.1AI score0.25198EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.24 views

Adobe Flash Player Arbitrary Code Execution Vulnerability

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution...

10CVSS4.6AI score0.94354EPSS
SaveIn wildExploits6
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.24 views

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file...

9.3CVSS8.8AI score0.68396EPSS
SaveIn wildExploits1
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.15 views

Adobe Flash Player Type Confusion Vulnerability

Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution...

8.8CVSS3.4AI score0.11981EPSS
SaveIn wildExploits0
Rows per page
Query Builder