Lucene search
+L

6245 matches found

Positive Technologies
Positive Technologies
added 2023/01/31 12:00 a.m.7 views

PT-2023-34855 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: A general protection fault issue was discovered in the nilfs btree insert function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

7.2AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.9 views

The vulnerability of the sub-components of the General Ledger Update Transform and Reports component of the Oracle iSetup system, a business automation solution from Oracle E-Business Suite. This vulnerability allows attackers to access, modify, add, or delete protected data.

The vulnerability of the General Ledger Update Transform and Reports components of the Oracle iSetup component in the Oracle E-Business Suite system relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete...

7.8CVSS7.3AI score0.00517EPSS
SaveExploits0References2Affected Software2
OpenVAS
OpenVAS
added 2023/01/29 12:00 a.m.11 views

Fedora: Security Advisory for libgit2 (FEDORA-2023-470c7ea49e)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS8.1AI score0.0101EPSS
SaveExploits0References2
Veracode
Veracode
added 2023/01/28 12:46 a.m.39 views

Denial Of Service (DoS)

kernel is vulnerable to Denial of Service DoS attacks. A race condition may lead to a NULL pointer dereference and general protection fault via VTRESIZEX ioctl, resulting in an application crash...

5.1CVSS6.1AI score0.00306EPSS
SaveExploits1References8Affected Software2
CNNVD
CNNVD
added 2023/01/23 12:00 a.m.14 views

WordPress plugin EU Cookie Law for GDPR/CCPA 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS5AI score0.0047EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2023/01/22 12:00 a.m.27 views

Fedora: Security Advisory for upx (FEDORA-2023-89fdc22ace)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6AI score0.00387EPSS
SaveExploits2References2
Citrix
Citrix
added 2023/01/19 12:00 a.m.16 views

Driver Disk for Intel ixgbe 5.18.6 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Intel's ixgbe driver and wish to use the latest version of the following: Driver Module| Version ---|--- ixgbe| 5.18.6 Issues Resolved In this Driver Disk Includes general enhancements and bug...

7AI score
SaveExploits0
OSV
OSV
added 2023/01/18 12:15 a.m.9 views

CVE-2023-21856

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite component: General Ledger Update Transform, Reports. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS7.3AI score0.00517EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/01/18 12:00 a.m.14 views

GE Digital Proficy Historian 加密问题漏洞

GE Digital Proficy Historian is a powerful tool with storage analysis and data collection capabilities from GE Digital. A security vulnerability exists in GE Digital Proficy Historian version 7.0 and later. An attacker could exploit the vulnerability to decrypt sensitive data, such as usernames a...

7.5CVSS7.4AI score0.00611EPSS
SaveExploits0References3
CVE
CVE
added 2023/01/17 11:35 p.m.84 views

CVE-2023-21856

CVE-2023-21856 affects Oracle E-Business Suite's iSetup, specifically the General Ledger Update Transform and Reports component. Affected: Oracle E-Business Suite versions 12.2.3 through 12.2.12. The issue is exploitable remotely over HTTP by an unauthenticated attacker, potentially enabling unau...

7.5CVSS7AI score0.00517EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.5 views

PT-2023-1196 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.12 Description: The issue is related to insufficient input validation in the General Ledger Update Transform and Reports subcomponents of the Oracle iSetup product. This allows an...

7.8CVSS8.7AI score0.00517EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/01/16 12:00 a.m.9 views

PT-2023-9423 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a race condition between the quota rescan and disable functions in the btrfs component of the Linux kernel, leading to a NULL pointer dereference. This...

8.4CVSS6.5AI score0.01915EPSS
SaveExploits13References1633
OpenVAS
OpenVAS
added 2023/01/11 12:00 a.m.12 views

Fedora: Security Advisory for emacs (FEDORA-2022-e37f239f2e)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.9AI score0.0063EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/01/09 12:00 a.m.9 views

Fedora: Security Advisory for emacs (FEDORA-2022-d69c7f95a4)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.9AI score0.0063EPSS
SaveExploits0References2
OSV
OSV
added 2023/01/03 3:15 a.m.8 views

CVE-2022-46309

Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to access arbitrary system files...

6.5CVSS5.9AI score0.01193EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.12 views

PT-2023-14202 · Easytest · Easytest

Name of the Vulnerable Software and Affected Versions: EasyTest affected versions not specified Description: The Administrator function of EasyTest has an Incorrect Authorization issue. A remote attacker authenticated as a general user can exploit this to bypass intended access restrictions, make...

8.8CVSS8.5AI score0.00794EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/01/03 12:00 a.m.37 views

CVE-2022-43436 HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest - Arbitrary File Upload

The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service...

8.8CVSS9AI score0.00863EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/01 12:00 a.m.6 views

PT-2025-37700

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc4 Description: The Linux kernel contains a flaw in the VMCI subsystem where a call to get user pages fast in vmci host setup notify can return a NULL value for context-notify page, leading to a general...

6AI score0.00149EPSS
SaveExploits0References13
OpenVAS
OpenVAS
added 2022/12/28 12:00 a.m.18 views

Forma LMS <= 2.4.4 Improper Authentication Vulnerability

Forma LMS is prone to an improper authentication vulnerability. Copyright C 2022 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free...

9.8CVSS9.6AI score0.15725EPSS
SaveExploits4References2
OSV
OSV
added 2022/12/26 5:15 a.m.9 views

CVE-2022-24119

Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0...

9.8CVSS5.8AI score0.00728EPSS
SaveExploits0References1
Rows per page
Query Builder