Lucene search
+L

8319 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/04 12:00 a.m.•5 views

CVE-2020-5675: Out-of-bounds Read

Out-of-bounds read vulnerability in GT21 model of GOT2000 series GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD V01.39.000 and earlier, GT2104-PMBD V01.39.000 and earlier, and GT2103-PMBD V01.39.000 and earlier, GS21 model of GOT series GS2110-WTBD V01.39.000...

7.5CVSS6AI score0.0282EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/12/03 12:00 a.m.•40 views

Debian DLA-2478-1 : postgresql-9.6 security update

Several vulnerabilities have been found in the PostgreSQL database system. CVE-2020-25694 Peter Eisentraut found that database reconnections may drop options from the original connection, such as encryption, which could lead to information disclosure or a man-in-the-middle attack. CVE-2020-25695...

8.8CVSS7.2AI score0.4644EPSS
SaveExploits0References6
Debian
Debian
•added 2020/12/02 11:04 a.m.•136 views

[SECURITY] [DLA 2478-1] postgresql-9.6 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2478-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 02, 2020 https://wiki.debian.org/LTS -...

8.8CVSS9AI score0.4644EPSS
SaveExploits0
Kitploit
Kitploit
•added 2020/12/01 11:30 a.m.•114 views

OnionSearch - A Script That Scrapes Urls On Different .Onion Search Engines

OnionSearch is a Python3 script that scrapes urls on different ".onion" search engines. Prerequisite Python 3  Currently supported Search engines ahmia darksearchio onionland notevil darksearchenginer phobos onionsearchserver torgle onionsearchengine tordex tor66 tormax haystack multivac evosear...

7.2AI score
SaveExploits0References2
NVD
NVD
•added 2020/11/28 7:15 a.m.•29 views

CVE-2020-29369

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions expanddownwards and expandupwards and page-table free operations from an munmap call, aka CID-246c320a8cfe...

7CVSS6.6AI score0.00456EPSS
SaveExploits1References6
OSV
OSV
•added 2020/11/28 7:15 a.m.•11 views

DEBIAN-CVE-2020-29369

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions expanddownwards and expandupwards and page-table free operations from an munmap call, aka CID-246c320a8cfe...

7CVSS6.2AI score0.00456EPSS
SaveExploits1References1
CVE
CVE
•added 2020/11/28 6:20 a.m.•278 views

CVE-2020-29369

CVE-2020-29369 is a real Linux kernel vulnerability described in the connected docs. It is a race condition in mm/mmap.c (expand_downwards vs. expand_upwards) that can occur during munmap page-table free operations, present in Linux kernels before 5.7.11 (CID-246c320a8cfe). The issue is triggered...

7CVSS6.7AI score0.00456EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2020/11/28 6:20 a.m.•56 views

CVE-2020-29369

An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions expanddownwards and expandupwards and page-table free operations from an munmap call, aka CID-246c320a8cfe...

6.8AI score0.00456EPSS
SaveExploits1References6
OSV
OSV
•added 2020/11/24 10:15 p.m.•25 views

CVE-2020-26235

In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires the user to set any environment variable in a different thread than the affected functions. The affected...

5.3CVSS5.1AI score
SaveExploits0References3
NVD
NVD
•added 2020/11/24 8:15 p.m.•57 views

CVE-2020-28329

Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious actor could use this password to access authenticated, administrative functions in the API. Affected Versions: 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19...

9.8CVSS7.9AI score0.01562EPSS
SaveExploits7References1
Cvelist
Cvelist
•added 2020/11/24 7:09 p.m.•72 views

CVE-2020-28329

Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious actor could use this password to access authenticated, administrative functions in the API. Affected Versions: 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19...

7.9AI score0.01562EPSS
SaveExploits7References1
UbuntuCve
UbuntuCve
•added 2020/11/24 12:00 a.m.•33 views

CVE-2020-26235

In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires the user to set any environment variable in a different thread than the affected functions. The affected...

5.3CVSS6.1AI score0.01888EPSS
SaveExploits0References4
Veracode
Veracode
•added 2020/11/20 9:42 a.m.•54 views

Malicious Code Execution

postgresql is vulnerable to malicious code execution. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as...

8.8CVSS3.4AI score0.4644EPSS
SaveExploits0References5Affected Software10
RustSec
RustSec
•added 2020/11/18 12:00 p.m.•45 views

Potential segfault in the time crate

Impact The affected functions set environment variables without synchronization. On Unix-like operating systems, this can crash in multithreaded programs. Programs may segfault due to dereferencing a dangling pointer if an environment variable is read in a different thread than the affected...

5.3CVSS5AI score0.01888EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2020/11/16 6:25 p.m.•9 views

SUSE-SU-2020:3351-1 Security update for raptor

This update for raptor fixes the following issues: - Fixed a heap overflow vulnerability bsc1178593, CVE-2017-18926. - Update raptor to version 2.0.15 Made several fixes to Turtle / N-Triples family of parsers and serializers Added utility functions for re-entrant sorting of objects and sequences...

7.1CVSS7AI score0.03117EPSS
SaveExploits1References3
OSV
OSV
•added 2020/11/16 1:15 a.m.•47 views

CVE-2020-25695

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest...

8.8CVSS4.9AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2020/11/16 12:40 a.m.•40 views

CVE-2020-25695

Removed by vendor...

8.8CVSS7.4AI score0.4644EPSS
SaveExploits0
Mend
Mend
•added 2020/11/16 12:40 a.m.•2 views

CVE-2020-25695

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest...

8.8CVSS0.4644EPSS
SaveExploits0References9
AlpineLinux
AlpineLinux
•added 2020/11/16 12:40 a.m.•54 views

CVE-2020-25695

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest...

8.8CVSS7.7AI score0.4644EPSS
SaveExploits0
OSV
OSV
•added 2020/11/11 12:00 a.m.•7 views

OSV-2020-2147 Use-of-uninitialized-value in stringNew

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27348 Crash type: Use-of-uninitialized-value Crash state: stringNew stringReplace pixSetText...

7.2AI score
SaveExploits0
Rows per page
Query Builder