Lucene search
+L

12353 matches found

BDU FSTEC
BDU FSTEC
•added 2020/05/29 12:00 a.m.•21 views

Siemens SPPA-T3000 Code Execution

The vulnerability of the Siemens SPPA-T3000 application server is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8AI score0.04007EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/05/28 12:00 a.m.•21 views

Apple Windows Migration Assistant Windows Installer Component Dynamic Library Loading Vulnerability

Apple Windows Migration Assistant is an Apple application that supports the migration of data from Windows systems to Mac devices.Windows Installer is Apple Windows Migration Assistant's Windows Installer is the Windows installation program for Apple Windows Migration Assistant. A security...

7.8CVSS7.2AI score0.00489EPSS
SaveExploits0References1
Apple
Apple
•added 2020/05/26 9:27 a.m.•40 views

About the security content of Windows Migration Assistant 2.2.0.0 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

7.8CVSS7.6AI score0.00489EPSS
SaveExploits0Affected Software1
Apple
Apple
•added 2020/05/26 12:00 a.m.•174 views

About the security content of Windows Migration Assistant 2.2.0.0

About the security content of Windows Migration Assistant 2.2.0.0 This document describes the security content of Windows Migration Assistant 2.2.0.0 v. 1A11. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an...

7.8CVSS7.9AI score0.00489EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
•added 2020/05/24 2:56 a.m.•192 views

Exploit for CVE-2020-2551

WebLogic-CVE-2020-2551-To-Internet CVE-2020-2551: POC fo...

9.8CVSS8.5AI score0.99958EPSS
SaveExploits88
osv_cve
osv_cve
•added 2020/05/22 5:15 p.m.•23 views

CVE-2020-13388

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8CVSS6AI score0.04533EPSS
SaveExploits1References3
NVD
NVD
•added 2020/05/22 5:15 p.m.•62 views

CVE-2020-13388

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8CVSS9.8AI score0.04533EPSS
SaveExploits1References3
PyPA
PyPA
•added 2020/05/22 5:15 p.m.•17 views

PYSEC-2020-341

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8CVSS7.5AI score0.04533EPSS
SaveExploits1References4Affected Software1
Prion
Prion
•added 2020/05/22 5:15 p.m.•42 views

Design/Logic Flaw

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

7.5CVSS9.7AI score0.04533EPSS
SaveExploits1References3Affected Software1
osv_pysec
osv_pysec
•added 2020/05/22 5:15 p.m.•48 views

PYSEC-2020-341

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8CVSS3.3AI score0.04533EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2020/05/22 4:07 p.m.•60 views

CVE-2020-13388

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8AI score0.04533EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2020/05/22 12:00 a.m.•9 views

PT-2020-4065 · Jw · Jw.Util

Name of the Vulnerable Software and Affected Versions: jw.util versions prior to 2.3 Description: The issue is related to errors in processing YAML files when loading configuration, allowing a remote attacker to execute arbitrary operating system commands. This is due to the lack of safe load whe...

9.8CVSS9.6AI score0.04533EPSS
SaveExploits1References10
osv_cve
osv_cve
•added 2020/05/21 11:15 p.m.•11 views

CVE-2020-1081

An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege Vulnerability'...

7.8CVSS7.1AI score0.00952EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/05/21 12:00 a.m.•34 views

SharePoint Server Unrestricted File Execution

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

9CVSS7.5AI score0.1318EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/05/15 12:00 a.m.•27 views

SharePoint Server Unrestricted File Execution

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

9CVSS7.8AI score0.35535EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/05/15 12:00 a.m.•18 views

SharePoint Server Unrestricted File Execution

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

9CVSS8.1AI score0.10413EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/05/15 12:00 a.m.•20 views

SharePoint Server Unrestricted File Execution

The vulnerability of Microsoft Business Productivity Servers, SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially...

9CVSS8.1AI score0.10695EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/05/15 12:00 a.m.•15 views

Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the ability to download unlimited files of a malicious nature. Exploiting this vulnerability allows an attacker to execute arbitrary code by downloading a specially created package...

9CVSS8.1AI score0.10695EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2020/05/06 1:15 p.m.•20 views

CVE-2019-19166

Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution...

7.8CVSS7.4AI score0.004EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/05/06 12:00 a.m.•4 views

PT-2020-10071

Name of the Vulnerable Software and Affected Versions Tobesoft XPlatform versions 9.1 through 9.2.2 Description The issue allows an attacker to load unauthorized DLL files, which can lead to remote code execution. Recommendations For versions 9.1 through 9.2.2, at the moment, there is no...

7.8CVSS0.004EPSS
SaveExploits0References5
Rows per page
Query Builder