Lucene search
+L

10650 matches found

CNVD
CNVD
added 2020/05/28 12:0 a.m.5 views

Apple Windows Migration Assistant Windows Installer Component Dynamic Library Loading Vulnerability

Apple Windows Migration Assistant is an Apple application that supports the migration of data from Windows systems to Mac devices.Windows Installer is Apple Windows Migration Assistant's Windows Installer is the Windows installation program for Apple Windows Migration Assistant. A security...

7.8CVSS7.2AI score0.00469EPSS
SaveExploits0References1
Apple
Apple
added 2020/05/26 9:27 a.m.31 views

About the security content of Windows Migration Assistant 2.2.0.0 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

7.8CVSS7.6AI score0.00469EPSS
SaveExploits0Affected Software1
Apple
Apple
added 2020/05/26 12:0 a.m.162 views

About the security content of Windows Migration Assistant 2.2.0.0

About the security content of Windows Migration Assistant 2.2.0.0 This document describes the security content of Windows Migration Assistant 2.2.0.0 v. 1A11. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an...

7.8CVSS7.9AI score0.00469EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2020/05/24 2:56 a.m.181 views

Exploit for CVE-2020-2551

WebLogic-CVE-2020-2551-To-Internet CVE-2020-2551: POC fo...

9.8CVSS7.8AI score0.99448EPSS
SaveExploits85
NVD
NVD
added 2020/05/22 5:15 p.m.50 views

CVE-2020-13388

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8CVSS9.8AI score0.04422EPSS
SaveExploits1References3
OSV
OSV
added 2020/05/22 5:15 p.m.8 views

CVE-2020-13388

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8CVSS6AI score0.04422EPSS
SaveExploits1References3
PyPA
PyPA
added 2020/05/22 5:15 p.m.8 views

PYSEC-2020-341

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8CVSS7.5AI score0.04422EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2020/05/22 5:15 p.m.35 views

PYSEC-2020-341

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8CVSS3.3AI score0.04422EPSS
SaveExploits1References4
Prion
Prion
added 2020/05/22 5:15 p.m.32 views

Design/Logic Flaw

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

7.5CVSS9.7AI score0.04422EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2020/05/22 4:7 p.m.47 views

CVE-2020-13388

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8AI score0.04422EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2020/05/22 12:0 a.m.3 views

PT-2020-4065 · Jw · Jw.Util

Name of the Vulnerable Software and Affected Versions: jw.util versions prior to 2.3 Description: The issue is related to errors in processing YAML files when loading configuration, allowing a remote attacker to execute arbitrary operating system commands. This is due to the lack of safe load whe...

9.8CVSS9.6AI score0.04422EPSS
SaveExploits1References10
OSV
OSV
added 2020/05/21 11:15 p.m.5 views

CVE-2020-1081

An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege Vulnerability'...

7.8CVSS7.1AI score0.00821EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/05/21 12:0 a.m.16 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their susceptibility to unlimited loading of dangerous files, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

9CVSS7.5AI score0.1318EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.14 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their susceptibility to unlimited loading of dangerous files, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

9CVSS7.8AI score0.31213EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.8 views

The vulnerability of Microsoft Business Productivity Servers, SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their susceptibility to unlimited loading of dangerous files, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Business Productivity Servers, SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially...

9CVSS8.1AI score0.10695EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.13 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their susceptibility to unlimited loading of dangerous files, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

9CVSS8.1AI score0.10413EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.10 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in their ability to allow unlimited loading of dangerous types of files, enabling attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the ability to download unlimited files of a malicious nature. Exploiting this vulnerability allows an attacker to execute arbitrary code by downloading a specially created package...

9CVSS8.1AI score0.10695EPSS
SaveExploits0References2
OSV
OSV
added 2020/05/06 1:15 p.m.9 views

CVE-2019-19166

Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution...

7.8CVSS7.4AI score0.004EPSS
SaveExploits0References2
OSV
OSV
added 2020/04/30 5:15 p.m.6 views

CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library...

7CVSS7.1AI score
SaveExploits0References9
OSV
OSV
added 2020/04/30 5:15 p.m.4 views

UBUNTU-CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library...

7CVSS5.9AI score0.00308EPSS
SaveExploits0References6
Rows per page
Query Builder