Lucene search
+L

6175 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:0 a.m.27 views

Advantech WebAccess Node BwPAlarm CreateMonitoredItemEx Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x11372 IOCTL in the webvrpcs process. The issue...

9.8CVSS3.6AI score0.08553EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:0 a.m.33 views

Advantech WebAccess Node viewsrv SQLAllocStmt Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27E1 IOCTL in the webvrpcs process. The issue resul...

9.8CVSS2.5AI score0.10665EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:0 a.m.41 views

Advantech WebAccess Node viewsrv Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x2715 IOCTL in the webvrpcs process. The issue resul...

7.5CVSS1.5AI score0.03106EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:0 a.m.40 views

Advantech WebAccess Node bwdraw Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwdraw.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs process...

8.8CVSS2AI score0.05654EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:0 a.m.33 views

Advantech WebAccess Node viewsrv SQLFreeEnv Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27D9 IOCTL in the webvrpcs process. The issue resul...

9.8CVSS2.5AI score0.10665EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:0 a.m.23 views

Advantech WebAccess Node viewsrv SQLCancel Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27EB IOCTL in the webvrpcs process. The issue resul...

9.8CVSS2.5AI score0.10665EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:0 a.m.41 views

Advantech WebAccess Node viewsrv SQLSetStmtAttr Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x27E3 IOCTL in the webvrpcs process. The issue resul...

9.8CVSS2.3AI score0.10665EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:0 a.m.37 views

Advantech WebAccess Node bwscrp Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwscrp.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs process...

9.8CVSS3.3AI score0.0898EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/02 12:0 a.m.28 views

Advantech WebAccess Client bwwebv Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Client. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwwebv.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs proces...

9.8CVSS3.4AI score0.0898EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/01 12:0 a.m.6 views

Unspecified vulnerability in Linux kernel (CNVD-2019-38275)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'dohidpsockioctl' function in the net/bluetooth/hidp/sock.c file in versions of Linux kernel prior to 5.0.15. An attacker can...

6.4AI score
SaveExploits0References1
OSV
OSV
added 2019/06/21 3:15 p.m.8 views

CVE-2018-15734

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206B...

5.5CVSS6AI score0.00449EPSS
SaveExploits1References2
NVD
NVD
added 2019/06/21 3:15 p.m.15 views

CVE-2018-15730

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x80002067...

5.5CVSS5.5AI score0.00434EPSS
SaveExploits1References2
OSV
OSV
added 2019/06/21 3:15 p.m.5 views

CVE-2018-15733

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a NULL Pointer Dereference vulnerability due to not validating the size of the output buffer value from IOCtl 0x80002028...

5.5CVSS6AI score0.00425EPSS
SaveExploits1References2
OSV
OSV
added 2019/06/21 3:15 p.m.9 views

CVE-2018-15735

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206F...

5.5CVSS6AI score0.00449EPSS
SaveExploits1References2
NVD
NVD
added 2019/06/21 3:15 p.m.23 views

CVE-2018-15731

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x8000205B...

5.5CVSS5.5AI score0.00434EPSS
SaveExploits1References2
NVD
NVD
added 2019/06/21 3:15 p.m.23 views

CVE-2018-15734

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206B...

5.5CVSS5.6AI score0.00449EPSS
SaveExploits1References2
NVD
NVD
added 2019/06/21 3:15 p.m.21 views

CVE-2018-15729

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x8000204B...

5.5CVSS5.5AI score0.00434EPSS
SaveExploits1References2
NVD
NVD
added 2019/06/21 3:15 p.m.19 views

CVE-2018-15732

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x80002063...

5.5CVSS5.6AI score0.00475EPSS
SaveExploits1References2
Prion
Prion
added 2019/06/21 3:15 p.m.21 views

Design/Logic Flaw

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206F...

2.1CVSS5.6AI score0.00449EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2019/06/21 3:15 p.m.15 views

Null pointer dereference

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a NULL Pointer Dereference vulnerability due to not validating the size of the output buffer value from IOCtl 0x80002028...

2.1CVSS5.5AI score0.00425EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder