Lucene search
+L

3142 matches found

Cvelist
Cvelist
•added 2020/04/27 8:01 p.m.•51 views

CVE-2019-5303

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

6.3AI score0.00323EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/04/27 12:00 a.m.•3 views

PT-2020-15138

Name of the Vulnerable Software and Affected Versions Huawei smartphone Lion-AL00C versions earlier than 10.0.0.205C00E202R7P2 Description The issue is related to a denial of service vulnerability. An attacker can craft a specially designed file to the affected device, exploiting insufficient inp...

5.5CVSS0.00539EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•13 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

7.1CVSS7.1AI score0.01285EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•24 views

The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient security of its interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

7.1CVSS7AI score0.01392EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/22 12:00 a.m.•9 views

The vulnerability in the Git version control system’s component that handles NTFS Alternate Data Streams allows a attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Git version control system’s NTFS Alternate Data Streams handling component is related to a lack of input validation mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

9.3CVSS7.8AI score0.24014EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/04/21 12:00 a.m.•22 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially crafted HTML page...

7.1CVSS6.5AI score0.00729EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/21 12:00 a.m.•15 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to information.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information through a specially created HTML page...

7.4CVSS7AI score0.00737EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/17 12:00 a.m.•13 views

The vulnerability of the _ctl_ioctl_main function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ctlioctlmain function drivers/scsi/mpt3sas/mpt3sasctl.c in the Linux operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7.1AI score0.00422EPSS
SaveExploits0References20Affected Software3
Tenable Nessus
Tenable Nessus
•added 2020/04/16 12:00 a.m.•65 views

EulerOS Virtualization 3.0.2.2 : kernel (EulerOS-SA-2020-1452)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic...

9.3CVSS6.2AI score0.05123EPSS
SaveExploits7References25
BDU FSTEC
BDU FSTEC
•added 2020/04/16 12:00 a.m.•11 views

The vulnerability of the WebKit rendering module, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the WebKit rendering module is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

7.1CVSS6.9AI score0.01304EPSS
SaveExploits0References12Affected Software15
Tenable Nessus
Tenable Nessus
•added 2020/04/16 12:00 a.m.•49 views

Adobe ColdFusion 2016.x < 2016u15 / 2018.x < 2018u9 Multiple Vulnerabilities (APSB20-18)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2016.x update 15 or 2018.x prior to update 9. It is, therefore, affected by the following vulnerabilities as referenced in the APSB20-18 advisory: - An application-level denial of service DoS vulnerability due to...

7.8CVSS6.8AI score0.04294EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2020/04/16 12:00 a.m.•40 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2020-1452)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.6AI score0.05123EPSS
SaveExploits7References2
CNVD
CNVD
•added 2020/04/15 12:00 a.m.•13 views

Adobe ColdFusion Insufficient Input Validation Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to cause a denial of service DoS...

6.5CVSS6.6AI score0.0347EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•1 views

PT-2020-2640

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 and 11 Description The issue is related to insufficient input validation in the Common Desktop Environment component of Oracle Solaris. This can be exploited by an attacker to gain full control over the application...

7.8CVSS0.0056EPSS
SaveExploits3References10
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•2 views

PT-2020-2606

Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.3 Description The issue is related to insufficient input validation in the Web Applications - InfoCenter component of Oracle Knowledge, which can be exploited by a remote attacker to impact the...

9.8CVSS0.0278EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•3 views

PT-2020-2603

Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge, resulting in unauthorized update, insert, or delete access to some of Oracle...

5.8CVSS0.00966EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•3 views

PT-2020-2602

Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.3 Description The issue is related to insufficient input validation in the InQuira Search component of Oracle Knowledge, allowing a remote attacker to cause a denial of service via HTTP. Successful...

7.1CVSS0.01483EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•1 views

PT-2020-2638

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient input validation in the svcbundle component of Oracle Solaris. This can allow a remote attacker to gain unauthorized access to protected information. The vulnerability ...

2.5CVSS0.00546EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•2 views

PT-2020-2179

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Oracle Learning Management product, specifically in the OTA...

8.2CVSS5.7AI score0.01314EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•2 views

PT-2020-2184

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to insufficient input validation in the Customer Search subcomponent of the Oracle Email Center product. It allows an unauthenticated attacker with network...

8.2CVSS5.9AI score0.01314EPSS
SaveExploits1References5
Rows per page
Query Builder