Lucene search
+L

2436 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.15 views

The vulnerability in the `ext/standard/link_win32.c` component of the PHP interpreter allows a perpetrator to compromise data confidentiality.

The vulnerability of the ext/standard/linkwin32.c component of the PHP interpreter involves exposing protected information. Exploiting this vulnerability could allow a malicious actor to compromise data confidentiality remotely...

7.8CVSS7.2AI score0.05139EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.11 views

The vulnerability of the TCL-script interpreter (Tool Command Language) of the Cisco IOS XE operating system, which allows attackers to escalate their privileges.

The vulnerability of the TCL-script interpreter of the Cisco IOS XE operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.2CVSS6.2AI score0.00279EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/19 12:0 a.m.10 views

The vulnerability of the exif component in the PHP programming language interpreter allows attackers to execute arbitrary PHP code.

The vulnerability of the exif component in the PHP programming language interpreter is related to the use of an uninitialized resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...

10CVSS7.2AI score0.09395EPSS
SaveExploits2References12Affected Software4
CNVD
CNVD
added 2022/04/19 12:0 a.m.22 views

Wasm3 heap buffer overflow vulnerability

Wasm3 is the WebAssembly interpreter. heap buffer overflow vulnerability exists in Wasm3, and no detailed vulnerability details are currently available...

5.5CVSS2.1AI score0.00597EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/04/16 12:0 a.m.8 views

Wasm3缓冲区错误漏洞

Wasm3 is the WebAssembly interpreter. heap buffer overflow vulnerability exists in Wasm3, and no detailed vulnerability details are currently available...

5.5CVSS5.8AI score0.00597EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/15 3:15 p.m.10 views

CVE-2022-20676

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

6.7CVSS6.4AI score0.00279EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/15 3:15 p.m.32 views

CVE-2022-20676

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

7.2CVSS0.00279EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/15 3:15 p.m.20 views

Input validation

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

7.2CVSS7AI score0.00279EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/04/15 2:16 p.m.116 views

CVE-2022-20676

Cisco IOS XE Software is affected by CVE-2022-20676, a local privilege-escalation vulnerability in the Tcl interpreter. Insufficient input validation in Tcl code loaded on an affected device can allow an authenticated, local attacker to escalate from privilege level 15 to root. By default, Tcl sh...

7.2CVSS6.4AI score0.00279EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/15 2:16 p.m.38 views

CVE-2022-20676 Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

5.1CVSS7.1AI score0.00279EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/13 4:0 p.m.6 views

CVE-2022-20676

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

7.2CVSS6.8AI score0.00279EPSS
SaveExploits0References2
Cisco
Cisco
added 2022/04/13 4:0 p.m.59 views

Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

5.1CVSS7AI score0.00279EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/04/13 12:0 a.m.16 views

PT-2022-2277 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Tool Command Language Tcl interpreter could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This...

7.2CVSS6.7AI score0.00279EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2022/04/13 12:0 a.m.79 views

Cisco IOS XE Software Tool Command Language Privilege Escalation (cisco-sa-iosxe-priv-esc-grbtubU)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This...

7.2CVSS6.8AI score0.00279EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.80 views

The vulnerability of the JavaScript MuJS interpreter, related to copying buffers without checking the input data, allows a violator to trigger a service failure.

The vulnerability of the JavaScript MuJS interpreter is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01554EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.10 views

The vulnerability of the jsG_markobject function in the jsgc.c component of the JavaScript MuJS interpreter allows a attacker to cause a service failure.

The vulnerability of the jsGmarkobject function in the jspc.c component of the JavaScript MuJS interpreter is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01554EPSS
SaveExploits1References4Affected Software2
OSV
OSV
added 2022/04/06 4:15 p.m.8 views

CVE-2021-26116

An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands...

8.8CVSS5.9AI score0.00613EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/06 10:15 a.m.24 views

CVE-2021-26112

Multiple stack-based buffer overflow vulnerabilities CWE-121 both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests...

9.8CVSS0.01681EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/06 10:15 a.m.15 views

Stack overflow

Multiple stack-based buffer overflow vulnerabilities CWE-121 both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests...

7.5CVSS9.9AI score0.01681EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/06 9:15 a.m.11 views

CVE-2021-26112

Multiple stack-based buffer overflow vulnerabilities CWE-121 both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests...

8.1CVSS8.4AI score0.01681EPSS
SaveExploits0References1
Rows per page
Query Builder