Lucene search
+L

2840 matches found

BDU FSTEC
BDU FSTEC
•added 2021/02/16 12:00 a.m.•15 views

The vulnerability of Intel Graphics Driver drivers, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of Intel Graphics Drivers’ drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause system failures...

5.5CVSS6.4AI score0.00315EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/02/16 12:00 a.m.•24 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the web-based management interfaces for Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

9CVSS7.6AI score0.02753EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/02/16 12:00 a.m.•18 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to elevate their privileges.

The vulnerability in the vManage web interface of the Cisco SD-WAN software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

9CVSS7.5AI score0.01755EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/09 12:00 a.m.•22 views

The vulnerability of the SSH web interface of the vManage program-defined network in Cisco SD-WAN allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SSH web interface of the vManage program-defined network in Cisco SD-WAN exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.3CVSS6.5AI score0.01616EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/09 12:00 a.m.•9 views

Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows attackers to gain read access to data or obtain privileged access.

The vulnerability of the MySQL Server component lies in its lack of proper input validation. Exploiting this vulnerability allows an attacker to gain read access to data or privileged access through network packets...

4CVSS6.3AI score0.01638EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/02/04 5:15 p.m.•18 views

CVE-2021-1347

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due t...

7.2CVSS6.2AI score0.02753EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/02/03 4:00 p.m.•14 views

CVE-2021-1342

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due t...

9CVSS7.7AI score0.02753EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/02/03 4:00 p.m.•11 views

CVE-2021-1334

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due t...

9CVSS7.7AI score0.02753EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/02/03 4:00 p.m.•16 views

CVE-2021-1348

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due t...

9CVSS8.1AI score0.02753EPSS
SaveExploits0References2
OSV
OSV
•added 2021/02/03 12:15 a.m.•16 views

CVE-2021-0364

In mobilelogd, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...

6.7CVSS6.7AI score0.0033EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/02/03 12:15 a.m.•12 views

CVE-2021-0364

In mobilelogd, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...

6.7CVSS6.8AI score0.0033EPSS
SaveExploits0References2
OSV
OSV
•added 2021/02/02 9:15 p.m.•17 views

CVE-2020-8734

Improper input validation in the firmware for IntelR Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access...

6.7CVSS6.6AI score0.00318EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•12 views

SUSE Linux Enterprise Desktop Input Validation Error Vulnerability

SUSE Linux Enterprise Desktop is an enterprise server version of the Linux desktop operating system from SUSE Germany. A security vulnerability exists in SUSE Linux Enterprise Desktop, which can be exploited by an attacker to trigger a denial of service or obtain sensitive information by forcing ...

5.5CVSS6.7AI score0.01037EPSS
SaveExploits0References17
BDU FSTEC
BDU FSTEC
•added 2021/02/02 12:00 a.m.•13 views

Vulnerability of the Server component: The stored procedures of the MySQL Server database management system, which allow a hacker to cause service interruptions.

The vulnerability of the MySQL Server database management system’s stored procedures exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to deny service to the system remotely...

6.8CVSS6.8AI score0.02308EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/01/26 6:15 p.m.•18 views

CVE-2020-0236

In A2DPGetCodecType of a2dpcodecconfig, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android, Versions: Android-10...

7.5CVSS7.2AI score0.0077EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/01/26 12:00 a.m.•10 views

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause service interruptions.

Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

4.9CVSS6.5AI score0.02099EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/01/20 8:15 p.m.•20 views

CVE-2021-1264

A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation by the Command Runner tool. An attacker could exploit this vulnerability by providing craft...

8.8CVSS6.2AI score0.03725EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2021/01/20 7:57 p.m.•6 views

CVE-2021-1264 Cisco DNA Center Command Runner Command Injection Vulnerability

A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation by the Command Runner tool. An attacker could exploit this vulnerability by providing craft...

9.6CVSS6.4AI score0.03725EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/20 4:00 p.m.•14 views

CVE-2021-1271

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the...

4.8CVSS5.8AI score0.00787EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/01/20 12:00 a.m.•9 views

The vulnerability of the Mozilla Firefox browser, related to the lack of a mechanism for checking input data, allows attackers to carry out spear-phishing attacks.

The vulnerability of the Mozilla Firefox browser is related to a lack of mechanism for checking the input character “i”. Exploiting this vulnerability allows an attacker to perform spear-phishing attacks remotely...

5.3CVSS6.8AI score0.01514EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder