Lucene search
+L

8682 matches found

CNVD
CNVD
added 2021/12/09 12:00 a.m.17 views

Unitrends Backup Formatting String Error Vulnerability

Unitrends Backup is designed to eliminate data loss, ransomware and risk. A format string error vulnerability exists in versions of Unitrends Backup prior to 10.5.5, which stems from the creation of an HTTP request that could trigger a format string vulnerability in a privileged vaultServer...

8.8CVSS6.6AI score0.02287EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/06 4:15 a.m.24 views

CVE-2021-43041

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerability in the privileged vaultServer application...

8.8CVSS0.02287EPSS
SaveExploits1References3
OSV
OSV
added 2021/12/06 4:15 a.m.12 views

CVE-2021-43041

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerability in the privileged vaultServer application...

8.8CVSS5.8AI score0.02287EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/12/06 4:15 a.m.6 views

CVE-2021-43041

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerability in the privileged vaultServer application...

8.8CVSS7.3AI score0.02287EPSS
SaveExploits1References4
Prion
Prion
added 2021/12/06 4:15 a.m.26 views

Format string

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerability in the privileged vaultServer application...

6.5CVSS8.4AI score0.02287EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/12/06 12:00 a.m.36 views

CVE-2021-43041

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerability in the privileged vaultServer application...

8.7AI score0.02287EPSS
SaveExploits1References3
CVE
CVE
added 2021/12/06 12:00 a.m.75 views

CVE-2021-43041

Summary: CVE-2021-43041 affects the Kaseya Unitrends Backup Appliance prior to 10.5.5. The vulnerability is in the privileged vaultServer component and is triggered by a crafted HTTP request that causes a format string vulnerability. The CVSS data in the initial record indicates high impact (C/H/...

8.8CVSS8.4AI score0.02287EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/12/06 12:00 a.m.11 views

Unitrends Backup 格式化字符串错误漏洞

Unitrends Backup is designed to eliminate data loss, ransomware and risk. A format string error vulnerability exists in versions of Unitrends Backup prior to 10.5.5, which stems from the creation of an HTTP request that could trigger a format string vulnerability in a privileged vaultServer...

8.8CVSS5.6AI score0.02287EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/12/06 12:00 a.m.12 views

PT-2021-23730 · Kaseya · Kaseya Unitrends Backup Appliance

Name of the Vulnerable Software and Affected Versions: Kaseya Unitrends Backup Appliance versions prior to 10.5.5 Description: An issue was discovered in the Kaseya Unitrends Backup Appliance, where a crafted HTTP request could induce a format string vulnerability in the privileged vaultServer...

8.8CVSS8.4AI score0.02287EPSS
SaveExploits1References8
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.50 views

Cisco IOS XR Software Discovery Protocol Format String Vulnerability

Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device...

8.8CVSS8.5AI score0.11685EPSS
SaveIn wildExploits0
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:00 a.m.14 views

The vulnerability of the RabbitMQ message broker’s web-management plugin, related to insufficient processing of the format string, allows a attacker to trigger a service failure.

The vulnerability of the plugin for the RabbitMQ message broker’s web management system is related to an error in the HTTP header “X-Reason”. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS5.8AI score0.04519EPSS
SaveExploits1References8Affected Software3
Gitee
Gitee
added 2021/10/14 3:00 p.m.6 views

nightmare

This is a course on binary exploitation and reverse engineering, specifically targeting Linux systems. The course is designed to be a comprehensive guide to learning binary exploitation and reverse engineering, with a focus on hands-on exercises and real-world examples. The course covers a range ...

7.5AI score
SaveExploits0
OSV
OSV
added 2021/10/06 6:15 p.m.11 views

CVE-2021-25489

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic...

5.5CVSS5.8AI score0.00531EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/06 6:15 p.m.43 views

CVE-2021-25489

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic...

5.5CVSS0.00531EPSS
SaveExploits0References2
Prion
Prion
added 2021/10/06 6:15 p.m.23 views

Format string

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic...

4.9CVSS5.3AI score0.00531EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/10/06 5:10 p.m.500 views

CVE-2021-25489

The CVE-2021-25489 issue affects Samsung Mobile Devices, caused by improper input validation in the modem interface driver, triggering a format-string error that can cause a kernel panic. Affected are Samsung Mobile Devices prior to SMR Oct-2021 Release 1. The root cause is missing input validati...

5.5CVSS5.6AI score0.00531EPSS
SaveIn wildExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2021/10/06 5:10 p.m.5 views

CVE-2021-25489

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic...

3.3CVSS5.4AI score0.00531EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/06 12:00 a.m.22 views

CVE-2021-25489

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

5.5CVSS6.5AI score0.00531EPSS
SaveIn wildExploits0References2
CNNVD
CNNVD
added 2021/10/06 12:00 a.m.9 views

Samsung SMR 格式化字符串错误漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A Format String Error vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1. The vulnerability stems from a lack of input validation in...

5.5CVSS6AI score0.00531EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/10/06 12:00 a.m.5 views

PT-2021-16679 · Samsung · Samsung Mobile Devices

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Devices versions prior to SMR Oct-2021 Release 1 Description: The issue is related to improper input validation in the modem interface driver. Assuming radio permission is gained, missing input validation results in a format...

5.5CVSS6.6AI score0.00531EPSS
SaveExploits0References3
Rows per page
Query Builder