Lucene search
+L

2035 matches found

CNVD
CNVD
added 2019/08/12 12:0 a.m.5 views

Unspecified Vulnerability in UiPath Orchestrator

UiPath Orchestrator is a web application for managing, controlling and monitoring UiPath robots from UiPath USA. A security vulnerability exists in UiPath Orchestrator versions prior to 2018.3.4. An attacker could exploit the vulnerability by submitting a file with malicious code to take full...

5.5CVSS7AI score0.01089EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/08/06 12:0 a.m.9 views

The vulnerability of the Common Desktop Environment component in Oracle Solaris allows a hacker to gain full control over the application.

The vulnerability of the Common Desktop Environment component in Oracle Solaris systems is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.8CVSS7.8AI score0.00409EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/08/06 12:0 a.m.8 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.8CVSS7.8AI score0.00466EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/08/06 12:0 a.m.6 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.2CVSS7.8AI score0.00471EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/08/06 12:0 a.m.7 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

7.5CVSS7.8AI score0.00462EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/08/06 12:0 a.m.4 views

The vulnerability of the Data Store component of the Oracle Berkeley DB database management system allows a hacker to gain full control over the DBMS.

The vulnerability of the Data Store component of the Oracle Berkeley DB database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the DBMS...

7CVSS7.8AI score0.00453EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/08/06 12:0 a.m.10 views

The vulnerability of the Data Store component of the Oracle Berkeley DB database management system allows a hacker to gain full control over the DBMS.

The vulnerability of the Data Store component of the Oracle Berkeley DB database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the DBMS...

7CVSS7.8AI score0.00453EPSS
SaveExploits0References4Affected Software1
The Hacker News
The Hacker News
added 2019/07/30 4:23 p.m.3 views

Critical Flaws in 'OXID eShop' Software Expose eCommerce Sites to Hacking

If your e-commerce website runs on the OXID eShop platform , you need to update it immediately to prevent your site from becoming compromised. Cybersecurity researchers have discovered a pair of critical vulnerabilities in OXID eShop e-commerce software that could allow unauthenticated attackers ...

9.8CVSS10AI score0.01355EPSS
SaveExploits0
Node.js
Node.js
added 2019/07/12 10:4 p.m.17 views

Malicious Package

Overview All versions of ali-contributors contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

6.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:0 a.m.6 views

Vulnerability of the 2D component of the Java SE software platform, allowing attackers to gain full control over Java SE

The vulnerability of the 2D software platform of Java SE is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over Java SE...

8.1CVSS7.8AI score0.12013EPSS
SaveExploits2References6Affected Software3
CNVD
CNVD
added 2019/07/04 12:0 a.m.19 views

D-Link DCS-1100 and D-Link DCS-1130 Buffer Error Vulnerability

The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A buffer error vulnerability exists in RTSPD in the D-Link DCS-1100 and DCS-1130. An attacker could use this vulnerability to take full control of the device and view images captured by the...

10CVSS7.1AI score0.05625EPSS
SaveExploits1References1
OSV
OSV
added 2019/07/03 11:15 p.m.3 views

CVE-2019-13208

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

7.3CVSS7.1AI score0.00422EPSS
SaveExploits1References1
Prion
Prion
added 2019/07/03 11:15 p.m.13 views

Privilege escalation

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

4.4CVSS7.3AI score0.00422EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/07/03 10:1 p.m.26 views

CVE-2019-13208

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

7.4AI score0.00422EPSS
SaveExploits1References1
OSV
OSV
added 2019/07/03 8:15 p.m.4 views

CVE-2017-8228

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a thorough verification when allowing the user to add a new camera to the user's account to ensure that the user actually owns the camera other than knowing the...

8.8CVSS5.7AI score0.02597EPSS
SaveExploits1References3
OSV
OSV
added 2019/06/19 3:15 p.m.7 views

CVE-2019-6971

An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials...

9.8CVSS7.3AI score0.13711EPSS
SaveExploits5References2
Veracode
Veracode
added 2019/05/31 1:10 a.m.8 views

Malicious Module

bowee has a malicious module in the form of a preinstall script. The script gets a backdoor file from a remote server and executes it, subsequently giving full control of the computer to an external malicious entity...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.13 views

The vulnerability of the Portable Clusterware component of the Oracle Database Server management system allows a hacker to gain full control over the application.

The vulnerability of the Portable Clusterware component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.2CVSS7.4AI score0.00421EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/23 12:0 a.m.26 views

The vulnerability of Oracle Java SE’s 2D software platform allows a hacker to gain full control over the application.

The vulnerability of the Oracle Java SE 2D software platform is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker operating remotely to gain full control over the application...

8.1CVSS6.5AI score0.11466EPSS
SaveExploits2References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/04/23 12:0 a.m.14 views

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization tool, which allows a hacker to gain full control over the application

The vulnerability of the Core component of Oracle VM VirtualBox is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.8CVSS7.6AI score0.00534EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder