Lucene search
K

172 matches found

Positive Technologies
Positive Technologies
added 2021/03/09 12:0 a.m.2 views

PT-2021-2427 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in processing input data in the Windows DNS server service, which can be exploited by a remote attacker to execute arbitrary code. This can affect...

9.8CVSS9.3AI score0.0831EPSS
Exploits0References16
Positive Technologies
Positive Technologies
added 2021/03/09 12:0 a.m.2 views

PT-2021-2426 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in processing input data in the Windows DNS server service, which can lead to a denial-of-service condition. This can be exploited by a remote...

7.5CVSS7.1AI score0.20423EPSS
Exploits0References6
NVD
NVD
added 2021/03/01 10:15 p.m.8 views

CVE-2021-3342

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI...

9.8CVSS0.05123EPSS
Exploits1References3
CVE
CVE
added 2021/01/05 5:18 p.m.160 views

CVE-2020-27841

CVE-2020-27841 affects the OpenJPEG2 library (openjpeg2) prior to version 2.4.0. The flaw occurs when an attacker provides crafted input to be processed by the OpenJPEG encoder, potentially causing an out-of-bounds read and impacting availability. The issue is evidenced in multiple connected advi...

5.5CVSS6AI score0.0036EPSS
Exploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2020/09/24 12:0 a.m.2 views

PT-2020-5089 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web management framework of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, remote attacker...

8.5CVSS8.1AI score0.00216EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2020/09/24 12:0 a.m.2 views

PT-2020-4430 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web management framework of Cisco IOS XE Software. These vulnerabilities could allow an authenticated, remote attacker...

8.5CVSS8.2AI score0.0017EPSS
Exploits0References4
OSV
OSV
added 2020/08/17 7:15 p.m.1 views

CVE-2020-1046

A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a w...

7.8CVSS7.6AI score0.11304EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/08/12 12:0 a.m.21 views

Microsoft .NET Framework Multiple Vulnerabilities (KB4570508)

This host is missing an important security update according to Microsoft KB4570508 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

6.5AI score
Exploits0References1
OpenVAS
OpenVAS
added 2020/08/12 12:0 a.m.34 views

Microsoft .NET Framework Multiple Vulnerabilities (KB4569751)

This host is missing an important security update according to Microsoft KB4569751 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

6.5AI score
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2020/07/14 7:0 a.m.22 views

Bond Denial of Service Vulnerability

A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input. An attacker who successfully exploited the vulnerability could cause a process using Bond to stop responding. To exploit this vulnerability, an attacker would need to upload specially crafted...

7.5CVSS4.4AI score0.06186EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:0 a.m.184 views

Cisco IOS and IOS XE Software Common Industrial Protocol Denial of Service (cisco-sa-cipdos-hkfTZXEx)

According to its self-reported version, Cisco IOS XE Software is affected by a multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device t...

8.6CVSS7.9AI score0.01033EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:0 a.m.23 views

Cisco IOS and IOS XE Software Common Industrial Protocol Denial of Service (cisco-sa-cipdos-hkfTZXEx)

According to its self-reported version, Cisco IOS XE Software is affected by a multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device t...

8.6CVSS7.9AI score0.01033EPSS
Exploits0References7
OSV
OSV
added 2020/06/03 6:15 p.m.0 views

CVE-2020-3225

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities a...

8.6CVSS7.3AI score0.01033EPSS
Exploits0References1
NVD
NVD
added 2020/06/03 6:15 p.m.13 views

CVE-2020-3225

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities a...

8.6CVSS8.6AI score0.01033EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2020/06/03 5:42 p.m.7 views

CVE-2020-3225 Cisco IOS and IOS XE Software Common Industrial Protocol Denial of Service Vulnerabilities

Multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerabilities a...

8.6CVSS7.2AI score0.01033EPSS
Exploits0References1
OSV
OSV
added 2020/05/13 2:10 p.m.0 views

USN-4358-1 libexif vulnerabilities

It was discovered that libexif incorrectly handled certain tags. An attacker could possibly use this issue to cause a denial of service. CVE-2018-20030 It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. CVE-2020-12767...

7.8CVSS6.7AI score0.00998EPSS
Exploits0References3
CNVD
CNVD
added 2019/10/24 12:0 a.m.2 views

Sourcecodester Restaurant Management System Code Issue Vulnerability

Sourcecodester Restaurant Management System is a restaurant management system. A code issue vulnerability exists in version 1.0 of the Sourcecodester Restaurant Management System, which arises from a failure of the program to properly process user-submitted input and can be exploited by an attack...

8.8CVSS7.7AI score0.00917EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2019/08/13 12:0 a.m.2 views

PT-2019-3039 · Microsoft · Msxml +2

Name of the Vulnerable Software and Affected Versions: Microsoft XML Core Services MSXML affected versions not specified Description: A remote code execution issue exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploits this issue could...

9.3CVSS8.5AI score0.04431EPSS
Exploits0References6
OSV
OSV
added 2019/04/09 9:29 p.m.1 views

CVE-2019-0795

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0793...

8.8CVSS7.9AI score0.28171EPSS
Exploits0References2
CNVD
CNVD
added 2018/09/14 12:0 a.m.3 views

Intel Extreme Tuning Utility Buffer Overflow Vulnerability

Intel Extreme Tuning Utility is a Windows-based performance tuning tool from Intel USA. A buffer overflow vulnerability exists in the input processing in Intel Extreme Tuning Utility versions prior to 6.4.1.21, which can be exploited by a local attacker to cause a denial of service to the...

5.5CVSS5.6AI score0.00053EPSS
Exploits0References1
Rows per page
Query Builder