Lucene search
+L

23808 matches found

CNNVD
CNNVD
added 2021/10/25 12:0 a.m.9 views

MediaTek flv extractor 缓冲区错误漏洞

MediaTek flv extractor is a chipset from Mediatek, a Chinese company. MediaTek flv extractor suffers from a buffer error vulnerability that stems from a lack of bounds checking, which could result in an out-of-bounds read. This could lead to the disclosure of local information without additional...

5.5CVSS6.1AI score0.00112EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/21 5:15 p.m.22 views

CVE-2021-29873

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

8.8CVSS0.01526EPSS
SaveExploits0References3
OSV
OSV
added 2021/10/21 5:15 p.m.8 views

CVE-2021-29873

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

8.1CVSS7.3AI score0.01526EPSS
SaveExploits0References3
Prion
Prion
added 2021/10/21 5:15 p.m.24 views

Design/Logic Flaw

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

5.5CVSS7.6AI score0.01526EPSS
SaveExploits0References3Affected Software10
CVE
CVE
added 2021/10/21 4:40 p.m.87 views

CVE-2021-29873

CVE-2021-29873 affects IBM FlashSystem 900 and related IBM storage products (SVC/Storwize/Spectrum Virtualize family). A authenticated user could escape a restricted shell to obtain sensitive information and cause a denial of service. The IBM Security Bulletin lists the affected platforms (FlashS...

8.8CVSS7.6AI score0.01526EPSS
SaveExploits0References3Affected Software8
Cvelist
Cvelist
added 2021/10/21 4:40 p.m.23 views

CVE-2021-29873

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

8.8CVSS7.8AI score0.01526EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/20 12:0 a.m.6 views

IBM Flash System 900 安全漏洞

Ibm Flash System 900 is a fully optimized all-flash storage array from Ibm, Inc. Used to accelerate business growth, the IBM Flash System 900 has a security vulnerability that stems from a shell escape vulnerability in the IBM Flash System 900. An attacker could exploit the vulnerability to obtai...

8.8CVSS5.6AI score0.01526EPSS
SaveExploits0References5
CNVD
CNVD
added 2021/10/15 12:0 a.m.8 views

SQL injection vulnerability exists in the flash flood monitoring and warning platform of Four Creation Technology Co.

Si Chuang Technology Co., Ltd. is a disaster mitigation and Xingli information service provider in China. There is a SQL injection vulnerability in the flash flood monitoring and early warning platform of Sichong Technology Co., Ltd. which can be exploited by attackers to obtain sensitive...

2.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.19 views

The vulnerability of Adobe Flash Player, Adobe Integrated Runtime (AIR), Adobe AIR SDK, and Adobe AIR SDK & Compiler lies in the possibility of an out-of-buffer operation, allowing attackers to execute arbitrary code or cause service failures.

The vulnerabilities of Adobe Flash Player, Adobe Integrated Runtime AIR, Adobe AIR SDK, and Adobe AIR SDK & Compiler are related to the execution of operations beyond the buffer boundaries. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failur...

10CVSS6.8AI score0.20008EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.14 views

The vulnerability of the Adobe Flash Player software relates to the execution of operations beyond the buffer boundaries, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Flash Player software is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through unspecified vectors...

10CVSS6.4AI score0.20356EPSS
SaveExploits1References6Affected Software7
Akamai Blog
Akamai Blog
added 2021/10/04 10:2 p.m.54 views

Holiday Readiness, Part Three: What you Should be Thinking About Two Months Out?Performance Optimizations

October is here, and that means we are less than two months away from the busiest weekend of the year. Parts one and two of the Holiday Readiness blog series covered topics ranging from security checklists to disaster recovery strategies and flash crowd management. If you haven?t had a chance to...

0.8AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2021/10/04 10:2 p.m.15 views

Holiday Readiness, Part Three: What you Should be Thinking About Two Months Out—Performance Optimizations

October is here, and that means we are less than two months away from the busiest weekend of the year. Parts one and two of the Holiday Readiness blog series covered topics ranging from security checklists to disaster recovery strategies and flash crowd management. If you haven’t had a chance to...

7AI score
SaveExploits0
NVD
NVD
added 2021/10/04 6:15 p.m.34 views

CVE-2021-38396

The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthorized software using a specially crafted USB...

6.8CVSS0.00173EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/04 6:15 p.m.23 views

Design/Logic Flaw

The programmer installation utility does not perform a cryptographic authenticity or integrity checks of the software on the flash drive. An attacker could leverage this weakness to install unauthorized software using a specially crafted USB...

4.6CVSS6.6AI score0.00173EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/04 5:35 p.m.58 views

CVE-2021-38396

The CVE-2021-38396 issue affects Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor Model 3120. The vulnerability is due to the programmer installation utility not performing cryptographic authenticity or integrity checks on software on the flash drive, enabling an attacker with physical...

6.8CVSS6.5AI score0.00173EPSS
SaveExploits0References1Affected Software1
ThreatPost
ThreatPost
added 2021/09/24 3:48 p.m.31 views

TangleBot Malware Reaches Deep into Android Device Functions

An Android malware called TangleBot has weaved its way onto the cyber-scene: One that researchers said can perform a bouquet of malicious actions, including stealing personal info and controlling apps and device functions. According to Cloudmark researchers, the newly discovered mobile malware is...

7.1AI score
SaveExploits0References6
The Hacker News
The Hacker News
added 2021/09/23 9:55 a.m.33 views

New Android Malware Targeting US, Canadian Users with COVID-19 Lures

An "insidious" new SMS smishing malware has been found targeting Android mobile users in the U.S. and Canada as part of an ongoing campaign that uses SMS text message lures related to COVID-19 regulations and vaccine information in an attempt to steal personal and financial data. Proofpoint's...

1.5AI score
SaveExploits0
CNVD
CNVD
added 2021/09/23 12:0 a.m.53 views

SWFTools Null Pointer Dereference Vulnerability (CNVD-2021-73188)

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

5.5CVSS5.4AI score0.0066EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/23 12:0 a.m.42 views

SWFTools Null Pointer Dereference Vulnerability (CNVD-2021-73183)

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

5.5CVSS5.4AI score0.0066EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/23 12:0 a.m.46 views

SWFTools Null Pointer Dereference Vulnerability (CNVD-2021-73203)

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

5.5CVSS5.4AI score0.00635EPSS
SaveExploits1References1
Rows per page
Query Builder