Lucene search
+L

6050 matches found

Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•3 views

PT-2019-1671

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60 IntelR CSME versions prior to 11.11.60 IntelR CSME versions prior to 11.22.60 IntelR CSME versions prior to 12.0.20 Description The issue is related to insufficient input validation in IntelR AMT, which ma...

6.8CVSS0.00397EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•2 views

PT-2019-1667

Name of the Vulnerable Software and Affected Versions Intel CSME versions prior to 11.8.60, 11.11.60, 11.22.60 or 12.0.20 Intel TXE versions prior to 3.1.60 or 4.0.10 Description The issue is related to insufficient input validation in Intel Converged Security and Manageability Engine and Trusted...

6.2CVSS0.00336EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•2 views

PT-2019-1624

Name of the Vulnerable Software and Affected Versions Intel CSME versions prior to 11.8.60 Intel CSME versions prior to 11.11.60 Intel CSME versions prior to 11.22.60 Intel CSME versions prior to 12.0.20 Intel TXE versions prior to 3.1.60 Intel TXE versions prior to 4.0.10 Description The issue i...

4.4CVSS0.00295EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•4 views

PT-2019-1756

Name of the Vulnerable Software and Affected Versions Intel Graphics Driver versions prior to 10.18.x.5059 Intel Graphics Driver versions prior to 10.18.x.5057 Intel Graphics Driver versions prior to 20.19.x.5063 Intel Graphics Driver versions prior to 21.20.x.5064 Intel Graphics Driver versions...

6CVSS0.00336EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•4 views

PT-2019-1739

Name of the Vulnerable Software and Affected Versions Intel Graphics Driver versions prior to 10.18.x.5059 Intel Graphics Driver versions prior to 10.18.x.5057 Intel Graphics Driver versions prior to 20.19.x.5063 Intel Graphics Driver versions prior to 21.20.x.5064 Intel Graphics Driver versions...

6.5CVSS0.00331EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•2 views

PT-2019-1670

Name of the Vulnerable Software and Affected Versions IntelR CSME versions prior to 11.8.60 IntelR CSME versions prior to 11.11.60 IntelR CSME versions prior to 11.22.60 IntelR CSME versions prior to 12.0.20 Description The issue is related to insufficient input validation in IntelR AMT in IntelR...

6.7CVSS0.00424EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/03/12 12:00 a.m.•3 views

PT-2019-1660

Name of the Vulnerable Software and Affected Versions Intel Graphics Kernel Mode Driver versions prior to 10.18.x.5059 Intel Graphics Kernel Mode Driver versions prior to 10.18.x.5057 Intel Graphics Kernel Mode Driver versions prior to 20.19.x.5063 Intel Graphics Kernel Mode Driver versions prior...

8.2CVSS0.00456EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2019/02/26 12:00 a.m.•20 views

The vulnerability of the IOCTL processor 0x8200E804 of the software device with hardware security keys WibuKey allows a perpetrator to exploit memory access on the kernel level.

The vulnerability of the IOCTL handler 0x8200E804 of the WibuKey.sys software driver involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access kernel memory through a specially crafted IRP request input/output request...

4.3CVSS6.1AI score0.0057EPSS
SaveExploits1References5Affected Software2
Check Point Advisories
Check Point Advisories
•added 2019/02/24 12:00 a.m.•43 views

LAquis SCADA Web Server Command Injection (CVE-2018-18992)

A command injection exists in LAquis SCADA web server. The vulnerability is due to insufficient input sanitization, which permits command injection. A remote attacker could exploit this vulnerability by sending a crafted request to an affected server...

6.8CVSS3.2AI score0.01984EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/02/20 12:00 a.m.•3 views

PT-2019-1531

Name of the Vulnerable Software and Affected Versions Cisco HyperFlex Software versions prior to 3.52a Description A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an unauthenticated, adjacent attacker to execute commands as the root user. The issue is due to...

8.8CVSS0.01133EPSS
SaveExploits0References5
NVD
NVD
•added 2019/02/19 5:29 p.m.•22 views

CVE-2019-5770

Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

8.8CVSS8.2AI score0.03018EPSS
SaveExploits0References7
CVE
CVE
•added 2019/02/19 5:00 p.m.•319 views

CVE-2019-5770

CVE-2019-5770 affects Google Chrome WebGL: insufficient input validation leads to an out-of-bounds memory read via a crafted HTML page. Vulnerable in Chrome up to version 72.0.3626.81; fixes shipped in later Chrome updates (e.g., 72.0.3626.81+). Debian/Fedora advisories and vendor advisories refe...

8.8CVSS5.8AI score0.03018EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2019/02/18 12:00 a.m.•2 views

PT-2019-19251

Name of the Vulnerable Software and Affected Versions Total.js Platform versions prior to 3.2.3 Description The issue allows path traversal due to insufficient input sanitization in URLs, enabling attackers to access server files outside the /public folder by using relative paths. The files serve...

7.5CVSS0.72058EPSS
SaveExploits3References11
OSV
OSV
•added 2019/02/15 6:29 p.m.•18 views

CVE-2019-0254

SAP Disclosure Management before version 10.1 Stack 1301 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

5.4CVSS5.8AI score0.00886EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/02/12 12:00 a.m.•7 views

PT-2019-1732

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP Platform versions 7.73 through 7.75 Description The issue is related to insufficient input validation, which can be exploited by a remote attacker to elevate privileges. This behavior may lead to a situation where a...

8.1CVSS0.01653EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2019/02/07 10:00 p.m.•33 views

CVE-2019-1670 Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient inpu...

6.1CVSS6AI score0.01211EPSS
SaveExploits0References2
Cisco
Cisco
•added 2019/02/06 4:00 p.m.•94 views

Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient inpu...

6.1CVSS1.5AI score0.01211EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/01/22 12:00 a.m.•12 views

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by triggering a process failure of FPC...

7.8CVSS7.2AI score0.01706EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2019/01/17 12:00 a.m.•6 views

PT-2019-1573

Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions 6.0.0 through 7.0.6 Apache Qpid Broker-J version 7.1.0 Description A Denial of Service issue was found in Apache Qpid Broker-J, allowing an unauthenticated attacker to crash the broker instance by sending speciall...

7.8CVSS0.03815EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2019/01/15 12:00 a.m.•6 views

PT-2019-2112

Name of the Vulnerable Software and Affected Versions IntelR i915 Graphics for Linux versions prior to 5.0 Description The issue is related to insufficient input validation in the Kernel Mode Driver of IntelR i915 Graphics for Linux. This may allow an authenticated user to potentially enable...

7.8CVSS0.00475EPSS
SaveExploits0
Rows per page
Query Builder