Lucene search
+L

24166 matches found

Positive Technologies
Positive Technologies
added 2024/05/09 12:0 a.m.5 views

PT-2024-6202 · Hdf5 +2 · Hdf5 +2

Name of the Vulnerable Software and Affected Versions: HDF5 versions prior to 1.14.3 Description: The issue is related to a heap-based buffer overflow in the H5Z nbit decompress one byte function in the H5Znbit.c file of the HDF5 library. This overflow is caused by the earlier use of an initializ...

9.8CVSS8.6AI score0.01101EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2024/05/09 12:0 a.m.5 views

PT-2024-6206 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions 1.14.3 and earlier Description: The issue is related to the use of an uninitialized value in the H5A attr release table function in the H5Aint.c file of the HDF5 Library. This could potentially allow a remote attacker to...

10CVSS7.6AI score0.00951EPSS
SaveExploits0References14
OSV
OSV
added 2024/05/09 12:0 a.m.19 views

UBUNTU-CVE-2024-29510

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device...

6.3CVSS7.3AI score0.27974EPSS
SaveExploits6References4
Tenable Nessus
Tenable Nessus
added 2024/05/09 12:0 a.m.38 views

EulerOS 2.0 SP10 : shim (EulerOS-SA-2024-1579)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. Th...

8.3CVSS7.7AI score0.04892EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/05/09 12:0 a.m.7 views

PT-2024-6196 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions 1.14.3 and earlier Description: The issue is related to a heap-based buffer overflow in the H5HG read function in H5HG.c, which is called from H5VL native blob get in H5VLnative blob.c. This results in the corruption of...

9.8CVSS8AI score0.00927EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2024/05/09 12:0 a.m.6 views

PT-2024-6200 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions prior to 1.14.4 Description: The issue is related to a heap-based buffer over-read caused by the unsafe use of strdup in H5MM xstrdup in H5MM.c, which can be exploited by a remote attacker to impact the confidentiality,...

8.8CVSS7.8AI score0.00814EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2024/05/09 12:0 a.m.4 views

PT-2024-6189 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions prior to 1.14.4 Description: The issue is related to a heap buffer overflow in the H5S point deserialize function located in the H5Spoint.c file of the HDF5 Library. This overflow can be exploited by a remote attacker to...

9CVSS8AI score0.00227EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2024/05/09 12:0 a.m.6 views

PT-2024-6204 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions prior to 1.14.4 Description: The issue is related to a heap-based buffer over-read in the H5HL fl deserialize function located in the H5HLcache.c file of the HDF5 Library. This can potentially allow an attacker to impact...

7.4CVSS7.5AI score0.00245EPSS
SaveExploits0References13
GithubExploit
GithubExploit
added 2024/05/08 5:41 a.m.413 views

Exploit for Command Injection in Tp-Link Archer_Ax21_Firmware

ntps nuclei templates headless bing-searchheadless...

9.8CVSS7.8AI score0.99999EPSS
SaveExploits38
ATTACKERKB
ATTACKERKB
added 2024/05/07 11:15 p.m.5 views

CVE-2022-43651

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...

7.8CVSS6.3AI score0.00313EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/05/07 11:15 p.m.3 views

CVE-2021-34973

Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must vis...

5.5CVSS5AI score0.0034EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/07 11:15 p.m.4 views

CVE-2021-34970

Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in...

5.5CVSS5AI score0.00331EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/07 10:54 p.m.84 views

CVE-2021-34970

CVE-2021-34970 (Foxit PDF Reader / PhantomPDF) is a vulnerability where the print method mishandles a user-supplied string used as a format specifier, due to improper validation. This leads to information disclosure on affected Foxit PDF Reader/PhantomPDF installations and, per sources, can be le...

5.5CVSS3.5AI score0.00331EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2024/05/07 10:54 p.m.20 views

CVE-2021-34970 Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability

Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in...

3.3CVSS6.1AI score0.00331EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/07 10:54 p.m.47 views

CVE-2021-34970 Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability

Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in...

3.3CVSS5.5AI score0.00331EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/07 10:15 p.m.23 views

CVE-2024-23551

Database scanning using username and password stores the credentials in plaintext or encoded format within files at the endpoint. This has been identified as a significant security risk. This will lead to exposure of sensitive information for unauthorized access, potentially leading to severe...

6.5CVSS6.5AI score0.0017EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/05/07 3:3 a.m.48 views

nuclei_poc

Nuclei POCs Nuclei POCs, updated daily Chinesehttps://git...

5.8AI score
SaveExploits0
CNNVD
CNNVD
added 2024/05/07 12:0 a.m.8 views

Bentley Systems Bentley View 安全漏洞

Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A security vulnerability exists in Bentley Systems Bentley View that originates from a specific flaw in the parsing of FBX files, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.7AI score0.00285EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/07 12:0 a.m.13 views

Bentley Systems Bentley View 安全漏洞

Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A security vulnerability exists in Bentley Systems Bentley View that stems from a specific flaw in the parsing of SKP files, which can be exploited by an attacker to execute code in the context of the current process...

5.5CVSS4.8AI score0.00296EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/06 12:0 a.m.15 views

The vulnerability of the PowerPanel Business’s monitoring and management system for uninterruptible power sources lies in the storage of passwords in a recoverable format, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the PowerPanel Business monitoring and power source management system lies in the storage of passwords in a recoverable format. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.1CVSS5.4AI score0.00383EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder