Lucene search
+L

10119 matches found

Positive Technologies
Positive Technologies
•added 2021/12/31 12:00 a.m.•6 views

PT-2021-28002

Name of the Vulnerable Software and Affected Versions stb versions affected versions not specified Description The issue is related to a global buffer overflow read error. Technical details about the crash include the involvement of specific function names such as stbi jpeg decode block, stbi...

6.1AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/31 12:00 a.m.•21 views

PT-2021-24333 · Unknown · Open Asset Import Library

Name of the Vulnerable Software and Affected Versions: Open Asset Import Library aka assimp versions 5.1.0 through 5.1.1 Description: The issue is a heap-based buffer overflow in the m3d safestr function, which is called from m3d load and Assimp::M3DWrapper::M3DWrapper. Recommendations: For...

5.5CVSS5.5AI score0.00942EPSS
SaveExploits1References11
Wallarm Lab
Wallarm Lab
•added 2021/12/26 6:38 p.m.•1720 views

Best IP Stresser Tool

Introduction Testing the restriction of your Web laborer incorporates pushing legitimately greater measures of traffic to it. You can either get delivered traffic or catch as of late experienced traffic and replay it at a higher concurrence than truly happened. There are organizations that can gi...

0.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/12/26 12:00 a.m.•4 views

PT-2021-27988

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the TTF::be u16, TTF::Cmap::subtable, and TTF::Font::try load from offset...

5.6AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/12/24 12:00 a.m.•27 views

Linux kernel drm_load_edid_firmware Buffer Overflow DoS

The vulnerability of the drmloadedidfirmware function drivers/gpu/drm/drmedidload.c in the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.0046EPSS
SaveExploits0References9Affected Software3
RedhatCVE
RedhatCVE
•added 2021/12/23 9:12 p.m.•47 views

CVE-2021-45463

Due to the use of the system command in the Magick-Load op used by gegl an attacker is able to craft a command line path that is able to lead to the execution of arbitrary shell commands that impacts availability, confidentiality and integrity...

7.8CVSS7.6AI score0.01548EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/12/23 1:15 p.m.•10 views

CVE-2021-44599

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with...

7.5CVSS7.1AI score0.01254EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2021/12/23 6:15 a.m.•12 views

DEBIAN-CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

7.8CVSS7.3AI score0.01548EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/12/23 6:00 a.m.•59 views

CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

7.8AI score0.01548EPSS
SaveExploits0References7
Fedora
Fedora
•added 2021/12/23 1:25 a.m.•54 views

[SECURITY] Fedora 34 Update: keepalived-2.2.4-2.fc34

Keepalived provides simple and robust facilities for load balancing and high availability to Linux system and Linux based infrastructures. The load balancing framework relies on well-known and widely used Linux Virtual Server IPVS kernel module providing Layer4 load balancing. Keepalived implemen...

5.5CVSS1AI score0.01119EPSS
SaveExploits0
Fedora
Fedora
•added 2021/12/23 12:39 a.m.•49 views

[SECURITY] Fedora 35 Update: keepalived-2.2.4-2.fc35

Keepalived provides simple and robust facilities for load balancing and high availability to Linux system and Linux based infrastructures. The load balancing framework relies on well-known and widely used Linux Virtual Server IPVS kernel module providing Layer4 load balancing. Keepalived implemen...

5.5CVSS1AI score0.01119EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/12/23 12:00 a.m.•43 views

Fedora: Security Advisory for keepalived (FEDORA-2021-255eff1bb5)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.5AI score0.01119EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/12/23 12:00 a.m.•40 views

Fedora: Security Advisory for keepalived (FEDORA-2021-0cda131052)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.5AI score0.01119EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/23 12:00 a.m.•5 views

CVE-2021-45463: Undefined Security Weakness

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

7.8CVSS7.3AI score0.01548EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/12/23 12:00 a.m.•8 views

PT-2021-24138

Name of the Vulnerable Software and Affected Versions: Online Enrollment Management System version 1.0 Description: The issue allows for SQL injection attacks through the id parameter. An attacker can craft a payload that injects a SQL sub-query, utilizing MySQL's load file function with a UNC fi...

7.5CVSS0.01254EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2021/12/21 7:15 p.m.•20 views

CVE-2021-44423

An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance ODA Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this...

7.8CVSS5.9AI score0.0084EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/21 12:15 p.m.•29 views

CVE-2021-45253

The id parameter in viewstorage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted...

9.8CVSS0.0128EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/12/21 12:00 a.m.•6 views

PT-2021-24211

Name of the Vulnerable Software and Affected Versions: Video Sharing Website version 1.0 Description: The email parameter from the ajax.php endpoint of the Video Sharing Website appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's load file...

10CVSS0.01588EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2021/12/21 12:00 a.m.•10 views

PT-2021-24210

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue concerns a SQL injection vulnerability in the id parameter of the view storage.php file. This vulnerability allows an attacker to inject a SQL sub-query that calls MySQL...

9.8CVSS0.0128EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2021/12/21 12:00 a.m.•16 views

PT-2021-8078 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is caused by the uninitialization of list head in the mtu3 component of the Linux kernel. This can lead to a use-after-free error in the list del entry valid function. The ca...

7.8CVSS6.6AI score0.08793EPSS
SaveExploits10References1653
Rows per page
Query Builder