Lucene search
+L

4465 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•33 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02518EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•35 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02621EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•42 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02621EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•32 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02686EPSS
SaveExploits0References1
NVD
NVD
•added 2022/01/19 1:15 a.m.•31 views

CVE-2022-22179

A Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Juniper DHCP daemon jdhcpd of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service DoS. In a scenario where DHCP relay or local...

6.5CVSS0.00372EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/19 12:21 a.m.•108 views

CVE-2022-22168

CVE-2022-22168 affects Juniper Networks Junos OS in the kernel, via improper validation of input, allowing an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime, ultimately causing an FPC reboot and DoS. Affected: Junos OS on vMX and MX150 across mul...

6.5CVSS6.3AI score0.00391EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/01/19 12:00 a.m.•7 views

PT-2022-15281

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 17.4R1 through 18.4R3-S10 Juniper Networks Junos OS versions 19.1 through 19.1R3-S7 Juniper Networks Junos OS versions 19.2 through 19.2R1-S8 Juniper Networks Junos OS versions 19.2 through 19.2R3-S4 Juniper...

6.5CVSS0.00372EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•10 views

CVE-2022-22179: Improper Input Validation

A Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Juniper DHCP daemon jdhcpd of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service DoS. In a scenario where DHCP relay or local...

6.5CVSS6AI score0.00372EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•4 views

CVE-2022-21310: Improper Validation of Array Index

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

6.3CVSS5.6AI score0.02621EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•13 views

CVE-2022-22168: Improper Validation of Specified Type of Input

An Improper Validation of Specified Type of Input vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime vulnerability. Continued exploitation of this vulnerability will eventually lead t...

6.5CVSS5.8AI score0.00391EPSS
SaveExploits0References3
RustSec
RustSec
•added 2022/01/14 12:00 p.m.•23 views

Improper validation of Windows paths could lead to directory traversal attack

Path resolution in warp::filters::fs::dir didn't correctly validate Windows paths meaning paths like /foo/bar/c:/windows/web/screen/img101.png would be allowed and respond with the contents of c:/windows/web/screen/img101.png. Thus users could potentially read files anywhere on the filesystem. Th...

4.6AI score
SaveExploits0Affected Software1
osv_rustsec
osv_rustsec
•added 2022/01/14 12:00 p.m.•25 views

RUSTSEC-2022-0082 Improper validation of Windows paths could lead to directory traversal attack

Path resolution in warp::filters::fs::dir didn't correctly validate Windows paths meaning paths like /foo/bar/c:/windows/web/screen/img101.png would be allowed and respond with the contents of c:/windows/web/screen/img101.png. Thus users could potentially read files anywhere on the filesystem. Th...

7AI score
SaveExploits0References3
NVD
NVD
•added 2022/01/13 12:15 p.m.•38 views

CVE-2021-30308

Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

7.8CVSS0.00157EPSS
SaveExploits0References1
NVD
NVD
•added 2022/01/13 12:15 p.m.•35 views

CVE-2021-30287

Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

7.5CVSS0.00568EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/13 12:15 p.m.•19 views

CVE-2021-30353

Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

7.5CVSS7AI score0.00568EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/01/13 12:15 p.m.•21 views

CVE-2021-30319

Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

7.8CVSS7AI score0.00155EPSS
SaveExploits0References2
Prion
Prion
•added 2022/01/13 12:15 p.m.•33 views

Integer overflow

Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

7.2CVSS7.9AI score0.00155EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/13 11:40 a.m.•141 views

CVE-2021-30353

CVE-2021-30353 involves improper validation of a function pointer type with the actual function signature, causing an assertion in Qualcomm Snapdragon components. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Voice & Music, and Wearables. The CVSS da...

7.5CVSS7.6AI score0.00568EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/01/13 11:40 a.m.•49 views

CVE-2021-30330

Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

7.5CVSS7.8AI score0.00568EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/01/13 11:40 a.m.•45 views

CVE-2021-30308

Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

7.8CVSS8.2AI score0.00157EPSS
SaveExploits0References1
Rows per page
Query Builder