Lucene search
+L

6243 matches found

CNVD
CNVD
added 2021/03/24 12:00 a.m.8 views

Catalog Traversal Vulnerability in GLIS, a General Library Integrated Management System of Beijing Qingda Xinyang Information Technology Co.

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

6.8AI score
SaveExploits0
CNNVD
CNNVD
added 2021/03/23 12:00 a.m.12 views

Grid Solutions GE Reason DR60 信任管理问题漏洞

The MU320E is a process interface unit from GE with integrated analog and digital merge interfaces. A hard-coded password vulnerability exists in GE MU320E firmware prior to version 04A00.1. An attacker could exploit this vulnerability to take control of the Merge Unit...

7.8CVSS5.6AI score0.00263EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/23 12:00 a.m.9 views

Grid Solutions GE MU320E 安全漏洞

The MU320E is a process interface unit from GE with integrated analog and digital merge interfaces. An elevation of privilege vulnerability exists in GE MU320E firmware prior to version 04A00.1. The vulnerability stems from a communication error in the file system. An attacker could exploit the...

7.8CVSS5.5AI score0.00233EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/23 12:00 a.m.8 views

Grid Solutions GE MU320E 加密问题漏洞

The MU320E is a process interface unit from GE with integrated analog and digital merge interfaces. An insufficient cryptographic strength vulnerability exists in the firmware prior to GE MU320E 04A00.1. The vulnerability stems from some aspects of the SSH server configuration file not being...

7.8CVSS5.6AI score0.00196EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/03/23 12:00 a.m.14 views

TYPO3 cross-site scripting vulnerability (CNVD-2021-22139)

TYPO3 is a free and open source content management system written in PHP under the GNU General Public License. A cross-site scripting vulnerability exists in the database field used as descriptionColumn in TYPO3 versions prior to 10.4.14, 11.1.1. No detailed vulnerability details are available at...

5.4CVSS5.9AI score0.00872EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/22 9:15 a.m.11 views

CVE-2021-21437

Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions...

4.3CVSS5.8AI score0.0067EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/22 9:15 a.m.31 views

CVE-2021-21437

Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions...

4.3CVSS0.0067EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/22 9:15 a.m.27 views

Code injection

Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions...

4CVSS4.7AI score0.0067EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/03/22 8:50 a.m.48 views

CVE-2021-21437 Config Items are shown to users without permission

Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions...

3.5CVSS4.9AI score0.0067EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/03/22 12:00 a.m.29 views

openSUSE Security Update : privoxy (openSUSE-2021-443)

This update for privoxy fixes the following issues : Update to version 3.0.32 : - Security/Reliability boo1183129 - ssplit: Remove an assertion that could be triggered with a crafted CGI request. Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272 Reported by: Joshua Rogers Opera - cgisendbanne...

7.5CVSS7.1AI score0.02108EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2021/03/21 12:00 a.m.38 views

Fedora: Security Advisory for kernel-headers (FEDORA-2021-14f6642aa6)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS8.2AI score0.00305EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/20 12:00 a.m.37 views

Fedora: Security Advisory for eog (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.2AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/20 12:00 a.m.17 views

Fedora: Security Advisory for libebml (FEDORA-2021-e283997bb9)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.01737EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/03/20 12:00 a.m.21 views

Fedora: Security Advisory for gnome-user-docs (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.2AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/20 12:00 a.m.14 views

Fedora: Security Advisory for plasma-workspace (FEDORA-2021-85c9774673)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.01563EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/20 12:00 a.m.15 views

Fedora: Security Advisory for kscreen (FEDORA-2021-85c9774673)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.01563EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/15 12:00 a.m.33 views

XWiki >= 11.4-rc-1, < 11.10.1, 12.x < 12.6.3, 12.7.x Privilege Escalation Vulnerability

XWiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS6.1AI score0.00459EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/12 12:15 a.m.9 views

UBUNTU-CVE-2020-36279

Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmapreg.c and adaptmap.c...

7.5CVSS7.3AI score0.02574EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/03/12 12:00 a.m.5 views

PT-2021-4616 · Leptonica +1 · Leptonica +1

Name of the Vulnerable Software and Affected Versions: Leptonica versions prior to 1.80.0 Description: The issue is related to a heap-based buffer over-read in the rasteropGeneralLow component of the Leptonica image processing library. This can be exploited by a remote attacker to cause a denial ...

7.5CVSS7.7AI score0.02871EPSS
SaveExploits4References49
OpenVAS
OpenVAS
added 2021/02/25 12:00 a.m.27 views

Fedora: Security Advisory for dotnet5.0 (FEDORA-2021-56e894d5ca)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.4AI score
SaveExploits0References2
Rows per page
Query Builder