Lucene search
K

4504 matches found

CNVD
CNVD
added 2021/03/09 12:0 a.m.7 views

WESEEK GROWI Input Validation Error Vulnerability (CNVD-2021-16346)

GROWI is a team collaboration software. An input validation error vulnerability exists in WESEEK GROWI 4.2.2 and earlier versions, which can be exploited by remote attackers to overwrite files on the server with arbitrary code execution...

7.2CVSS7.6AI score0.01835EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.4 views

ExpressVPN Router 输入验证错误漏洞

ExpressVPN Router is a VPN router from ExpressVPN UK. It provides a protected network communication feature. ExpressVPN Router suffers from an input validation error vulnerability that originates from an integer buffer overflow in the Nginx web server, which can be exploited by an attacker to...

7.5CVSS7.6AI score0.16652EPSS
Exploits3References6
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.3 views

Privoxy 输入验证错误漏洞

privoxy is a web proxy with advanced filtering features. A denial of service vulnerability exists in privoxy versions prior to 3.0.32. An attacker can exploit this vulnerability to crash a program via a specially crafted CGI request...

7.5CVSS5.6AI score0.01953EPSS
Exploits0References10
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.3 views

SAP 3D Visual Enterprise Viewer 安全漏洞

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. A denial of service vulnerability exists in SAP 3D Visual Enterprise Viewer 9. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by means of a specially crafted .SVG...

7.8CVSS5.6AI score0.01242EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.5 views

Linux kernel 输入验证错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an input validation error vulnerability that can be exploited by attackers to cause users to crash their systems or potentially escalate their...

7.8CVSS8.2AI score0.00321EPSS
Exploits0References8
CNNVD
CNNVD
added 2021/03/08 12:0 a.m.6 views

PowerScale OneFS 输入验证错误漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling NAS. An input validation error vulnerability exists in PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 that allows unauthenticated ISIPRIVSYSSUPPOR...

8.8CVSS7.9AI score0.01039EPSS
Exploits0References2
CNVD
CNVD
added 2021/03/05 12:0 a.m.7 views

Samsung mobile devices input validation error vulnerability (CNVD-2021-29052)

Samsung mobile devices is a cell phone application from Samsung South Korea. It provides a communication function. A security vulnerability exists in Samsung mobile devices prior to SMR Feb-2021 Release 1, which stems from an incorrect input check, which would result in a permanent denial of...

5.5CVSS6.8AI score0.00126EPSS
Exploits0References1
CNVD
CNVD
added 2021/03/05 12:0 a.m.7 views

Samsung mobile devices input validation error vulnerability

Samsung mobile devices is a cell phone application from Samsung South Korea. It provides a communication function. A security vulnerability exists in Samsung mobile devices SMR prior to Mar-2021 Release 1, which arises from incorrect address validation, and can be exploited by an attacker to...

5.2CVSS6.9AI score0.00115EPSS
Exploits0References1
CNVD
CNVD
added 2021/03/04 12:0 a.m.7 views

Xterm Input Validation Error Vulnerability

XTerm is a terminal emulator on the X Window System used to provide multiple independent SHELL inputs and outputs. An input validation error vulnerability exists in Xterm that originates from allowing remote attackers to cause a denial of service segmentation error or possibly have unspecified...

9.8CVSS7.5AI score0.07541EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/03/04 12:0 a.m.5 views

Samsung mobile devices 输入验证错误漏洞

Samsung mobile devices is a cell phone application from Samsung South Korea. It provides a communication function. A security vulnerability exists in Samsung mobile devices SMR prior to Mar-2021 Release 1, which arises from incorrect address validation, and can be exploited by an attacker to...

5.2CVSS5.6AI score0.00115EPSS
Exploits0References3
CNVD
CNVD
added 2021/03/04 12:0 a.m.4 views

OpenSSL Input Validation Error Vulnerability

OpenSSL is a powerful, commercial-grade, full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. It is also a general-purpose cryptographic library. An input validation error vulnerability exists in the OpenSSL public API that stems from the...

7.5CVSS5.8AI score0.50732EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.3 views

Ciscoxa0SD-WAN vManage 输入验证错误漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An input validation error vulnerability exists in Cisco SD-WAN vManage, which allows an authenticated, local attacker to exploit the...

6.7CVSS5.1AI score0.00164EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.3 views

Pillow 输入验证错误漏洞

Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. A denial of service vulnerability exists in Pillow versions prior to 8.1.1. The vulnerability stems from not...

7.5CVSS5.6AI score0.03071EPSS
Exploits0References16
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.4 views

Cisco SD-WAN vManage Software 输入验证错误漏洞

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. Cisco SD-WAN vManage Software suffers from an input validation error vulnerability that stems from insufficient validation of HTTP requests. An attacker could exploit the...

4.3CVSS5.6AI score0.01132EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.5 views

Cisco SD-WAN vManage 输入验证错误漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. Cisco SD-WAN vManage has an input validation error vulnerability that stems from insufficient input validation of certain commands by the...

5CVSS5.5AI score0.013EPSS
Exploits0References11
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.6 views

Cisco SD-WAN vManage 输入验证错误漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An input validation error vulnerability exists in Cisco SD-WAN vManage, which is caused by improper validation of SQL query inputs on affect...

4.9CVSS5.6AI score0.01041EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.14 views

Cisco SD-WAN vManage 输入验证错误漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. Cisco SD-WAN vManage has an input validation error vulnerability that stems from an incomplete boundary check on data provided to the vDaemo...

5.4CVSS5.5AI score0.00601EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/02 12:0 a.m.4 views

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an input validation error in DeltaPerformer :: Write in deltaperformer.cc. An attacker can...

5.5CVSS5.8AI score0.00119EPSS
Exploits0References3
CNVD
CNVD
added 2021/03/01 12:0 a.m.6 views

Google Android Input Validation Error Vulnerability (CNVD-2021-14781)

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android suffers from an Input Validation Error bug, which stems from the fact that improper input validation could cause the system to crash. No details of the vulnerability are...

4.9CVSS6.6AI score0.00147EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/01 12:0 a.m.2 views

fastify-http-proxy 输入验证错误漏洞

Docs fastify-http-proxy is Docs an open source application . It is used to forward all incoming requests with a given prefix or no prefix to the upstream. A security vulnerability exists in fastify-http-proxy that stems from the ability to escape the prefix of a proxy backend service by creating ...

10CVSS8.2AI score0.01924EPSS
Exploits0References7
Rows per page
Query Builder