Lucene search
+L

2963 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/01/21 12:0 a.m.24 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS3.9AI score0.01443EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/21 12:0 a.m.23 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02686EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/21 12:0 a.m.24 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02686EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/21 12:0 a.m.24 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02621EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/21 12:0 a.m.21 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02621EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/21 12:0 a.m.26 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.03193EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/21 12:0 a.m.24 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS3.9AI score0.01443EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/19 1:15 a.m.22 views

CVE-2022-22179

A Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Juniper DHCP daemon jdhcpd of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service DoS. In a scenario where DHCP relay or local...

6.5CVSS0.00372EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/19 12:21 a.m.84 views

CVE-2022-22168

CVE-2022-22168 affects Juniper Networks Junos OS in the kernel, via improper validation of input, allowing an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime, ultimately causing an FPC reboot and DoS. Affected: Junos OS on vMX and MX150 across mul...

6.5CVSS6.3AI score0.00391EPSS
SaveExploits0References1Affected Software1
RustSec
RustSec
added 2022/01/14 12:0 p.m.16 views

Improper validation of Windows paths could lead to directory traversal attack

Path resolution in warp::filters::fs::dir didn't correctly validate Windows paths meaning paths like /foo/bar/c:/windows/web/screen/img101.png would be allowed and respond with the contents of c:/windows/web/screen/img101.png. Thus users could potentially read files anywhere on the filesystem. Th...

4.6AI score
SaveExploits0Affected Software1
OSV
OSV
added 2022/01/14 12:0 p.m.13 views

RUSTSEC-2022-0082 Improper validation of Windows paths could lead to directory traversal attack

Path resolution in warp::filters::fs::dir didn't correctly validate Windows paths meaning paths like /foo/bar/c:/windows/web/screen/img101.png would be allowed and respond with the contents of c:/windows/web/screen/img101.png. Thus users could potentially read files anywhere on the filesystem. Th...

7AI score
SaveExploits0References3
NVD
NVD
added 2022/01/13 12:15 p.m.25 views

CVE-2021-30287

Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

7.5CVSS0.00568EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/13 12:15 p.m.6 views

CVE-2021-30353

Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

7.5CVSS7AI score0.00568EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/13 12:15 p.m.26 views

CVE-2021-30308

Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

7.8CVSS0.00157EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/13 12:15 p.m.5 views

CVE-2021-30319

Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

7.8CVSS7AI score0.00155EPSS
SaveExploits0References2
Prion
Prion
added 2022/01/13 12:15 p.m.22 views

Integer overflow

Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

7.2CVSS7.9AI score0.00155EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/13 11:40 a.m.119 views

CVE-2021-30353

CVE-2021-30353 involves improper validation of a function pointer type with the actual function signature, causing an assertion in Qualcomm Snapdragon components. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Voice & Music, and Wearables. The CVSS da...

7.5CVSS7.6AI score0.00568EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/13 11:40 a.m.35 views

CVE-2021-30330

Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

7.5CVSS7.8AI score0.00568EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/01/13 11:40 a.m.31 views

CVE-2021-30308

Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

7.8CVSS8.2AI score0.00157EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/13 11:40 a.m.79 views

CVE-2021-30287

CVE-2021-30287 is a Qualcomm/Qualcomm‑chip vulnerability affecting Snapdragon families (Auto/Compute/Connectivity/Industrial IOT/Mobile) due to improper validation of symbols configured for PDCCH monitoring. Primary sources (NVD, Red Hat, CVE CVE listings, and Qualcomm bulletin references) classi...

7.5CVSS7.6AI score0.00568EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder