Lucene search
+L

43042 matches found

CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•21 views

Microsoft Internet Explorer 安全漏洞

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Internet Explorer. The following products and versions are affected: Internet Explorer 11,Internet Explorer 11,Internet Explore...

8.8CVSS8.2AI score0.05448EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•24 views

Microsoft Internet Explorer 资源管理错误漏洞

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation USA. A resource management error vulnerability exists in Internet Explorer. The following products and versions are affected: Internet Explorer 11,Internet Explorer 11,Internet...

8.8CVSS7.7AI score0.80765EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2021/03/09 12:00 a.m.•90 views

Security Updates for Internet Explorer (March 2021)

The Internet Explorer installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A memory corruption vulnerability exists. An attacker can exploit this to corrupt the memory and cause unexpected behaviors within the system/applicatio...

8.8CVSS8AI score0.80765EPSS
SaveExploits0References6
NCSC
NCSC
•added 2021/03/09 12:00 a.m.•13 views

Vulnerabilities fixed in Microsoft Browsers

Two vulnerabilities have been fixed in Microsoft Internet Explorer. The vulnerabilities allow a malicious person to execute arbitrary code under a user's privileges. To exploit the vulnerabilities, an attacker must trick the entice the victim to open a rogue page. According to Microsoft, the...

8.8CVSS7AI score0.80765EPSS
SaveExploits0
OSV
OSV
•added 2021/03/07 4:15 a.m.•3 views

DEBIAN-CVE-2021-27363

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsitransport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file...

4.4CVSS6.2AI score0.00711EPSS
SaveExploits1References1
OSV
OSV
•added 2021/03/05 9:15 p.m.•19 views

CVE-2020-29020

Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware...

7.2CVSS7.1AI score0.01742EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/05 9:15 p.m.•29 views

Improper access control

Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware...

6.5CVSS6.9AI score0.01742EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/03/05 7:12 p.m.•25 views

CVE-2020-29020 Reject Remote Management via Cellular UPLINK2

Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware...

9.1CVSS9.2AI score0.01742EPSS
SaveExploits0References1
CVE
CVE
•added 2021/03/05 7:12 p.m.•88 views

CVE-2020-29020

The vulnerability CVE-2020-29020 affects Secomea SiteManager (hardware) with all versions prior to 9.4.620527004. The root cause is Improper Access Control in the web service, enabling a remote attacker to access the web UI from the internet using configured credentials. Impact is access to the w...

9.1CVSS7.2AI score0.01742EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2021/03/05 12:00 a.m.•12 views

Beijing Yunfan Internet Technology Co., Ltd. online learning test system has SQL injection vulnerability

Online learning test system is a multi-role online training test system, the system integrates user management, role management, departmental management, question bank management, test management, test question import and export, test management, online test, wrong training and other functions, t...

7.8AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/03/05 12:00 a.m.•20 views

Secomea SiteManager 访问控制错误漏洞

Secomea SiteManager is a software application from Secomea, Denmark. It provides a remote maintenance function for industrial equipment. An input validation error vulnerability exists in Secomea SiteManager versions prior to 9.4.620527004, which arises from a network system or product that does n...

9.1CVSS5.8AI score0.01742EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/03/05 12:00 a.m.•16 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 5.11.3 and earlier, which stems from a kernel pointer leak that can be used to determine the address of an iscsi...

4.4CVSS6.2AI score0.00711EPSS
SaveExploits1References55
OSV
OSV
•added 2021/03/04 10:15 p.m.•13 views

CVE-2021-25348

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission...

2.4CVSS5.8AI score0.00268EPSS
SaveExploits0References2
NVD
NVD
•added 2021/03/04 10:15 p.m.•31 views

CVE-2021-25348

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission...

2.4CVSS0.00268EPSS
SaveExploits0References2
Prion
Prion
•added 2021/03/04 10:15 p.m.•26 views

Input validation

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission...

2.1CVSS4AI score0.00268EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/03/04 10:15 p.m.•6 views

CVE-2021-25348

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission...

2.4CVSS4.7AI score0.00268EPSS
SaveExploits0References3
CVE
CVE
•added 2021/03/04 9:07 p.m.•100 views

CVE-2021-25348

Samsung Internet (Android) is affected by CVE-2021-25348 due to an improper permission grant check in versions prior to 13.0.1.60, which allows access to files in internal storage without the authorized STORAGE permission. The issue stems from insufficient validation of permission grants when acc...

2.4CVSS4AI score0.00268EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/03/04 9:07 p.m.•35 views

CVE-2021-25348

Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission...

2.1CVSS4.1AI score0.00268EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2021/03/04 12:07 p.m.•111 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

8.1CVSS6.7AI score0.64161EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/03/04 12:00 a.m.•2 views

PT-2021-16541

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 13.0.1.60 Description: The issue is related to an improper permission grant check, allowing access to files in internal storage without the authorized STORAGE permission. This affects Samsung Internet,...

2.4CVSS0.00268EPSS
SaveExploits0References5
Rows per page
Query Builder