Lucene search
K

4392 matches found

OSV
OSV
added 2020/02/11 7:12 p.m.3 views

OPENSUSE-SU-2020:0209-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: Security issue fixed: - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. Other issue fixed: - Fixed comboboxes not showing in correct location bsc1158667. This update was imported from the...

5.7CVSS6.3AI score0.0033EPSS
Exploits0References4
OSV
OSV
added 2020/02/06 1:12 p.m.7 views

SUSE-SU-2020:0349-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167...

5.7CVSS6.5AI score0.0033EPSS
Exploits0References3
OSV
OSV
added 2020/02/06 12:22 p.m.6 views

SUSE-SU-2020:0346-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: Security issue fixed: - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. Other issue fixed: - Fixed comboboxes not showing in correct location bsc1158667...

5.7CVSS6.5AI score0.0033EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2020/02/05 12:0 a.m.36 views

SUSE SLED12 / SLES12 Security Update : libqt5-qtbase (SUSE-SU-2020:0317-1)

This update for libqt5-qtbase fixes the following issues : Security issues fixed : CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gi...

8.8CVSS7AI score0.01691EPSS
Exploits1References10
OSV
OSV
added 2020/02/04 2:11 p.m.10 views

SUSE-SU-2020:0319-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issue: Security issues fixed: - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. - CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted g...

8.8CVSS6.7AI score0.01691EPSS
Exploits1References7
OSV
OSV
added 2020/02/04 2:11 p.m.9 views

SUSE-SU-2020:0318-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issue: Security issue fixed: - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. - CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gi...

8.8CVSS6.6AI score0.01691EPSS
Exploits1References7
OSV
OSV
added 2020/02/04 2:11 p.m.8 views

SUSE-SU-2020:0317-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: Security issues fixed: - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD bsc1161167. - CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted...

8.8CVSS6.7AI score0.01691EPSS
Exploits1References7
OSV
OSV
added 2020/01/31 10:15 p.m.2 views

DEBIAN-CVE-2014-8321

Stack-based buffer overflow in the gpstracker function in airodump-ng.c in Aircrack-ng before 1.2 RC 1 allows local users to execute arbitrary code or gain privileges via unspecified vectors...

7.8CVSS8.5AI score0.00191EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.27 views

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2019-2294)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00271EPSS
Exploits2References2
OSV
OSV
added 2020/01/17 7:15 p.m.1 views

CVE-2019-17634

Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting XSS vulnerability when generating an HTML report from a malicious heap dump. The user must chose todownload, open the malicious heap dump and generate an HTML report for the problem to occur. The heap dump coul...

9CVSS7.2AI score
Exploits0References1
OSV
OSV
added 2019/12/18 9:15 p.m.1 views

CVE-2019-18996

Path settings in HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier accept DLLs outside of the program directory, potentially allowing an attacker with access to the local file system the execution of code in the application’s context...

7.8CVSS7.2AI score
Exploits0References1
OSV
OSV
added 2019/12/12 5:15 p.m.2 views

CVE-2019-4606

IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path vulnerability. By using a executable file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM...

7.8CVSS7.4AI score0.00169EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2019/12/12 12:0 a.m.4 views

PT-2019-17139 · Ibm · Ibm Db2 High Performance Unload

Name of the Vulnerable Software and Affected Versions: IBM DB2 High Performance Unload load for LUW versions 6.1 through 6.5 Description: The issue is caused by an untrusted search path vulnerability, allowing a local attacker to execute arbitrary code on the system. An attacker could exploit thi...

7.8CVSS7.4AI score0.00169EPSS
Exploits0References4
OSV
OSV
added 2019/12/11 7:15 a.m.1 views

CVE-2019-3667

DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an attacker...

7.8CVSS7.4AI score0.00103EPSS
Exploits0References1
CNVD
CNVD
added 2019/12/11 12:0 a.m.3 views

McAfee Tech Check DLL Search Order Hijacking Vulnerability

McAfee Tech Check is a computer software and hardware scanning and diagnostic application from the U.S. company McAfee McAfee. McAfee Tech Check 3.0.0.17 and earlier versions contain a DLL search order hijacking vulnerability that can be exploited by a local attacker to execute arbitrary code via...

7.8CVSS7.5AI score0.00103EPSS
Exploits0References1
CVE
CVE
added 2019/12/10 9:1 p.m.246 views

CVE-2019-13762

CVE-2019-13762 relates to Google Chrome/Chromium on Windows, where insufficient policy enforcement in downloads could allow a local attacker to spoof downloaded files via local code. This is a local, low-severity (CVSS 3.1: 3.3; CVSS 2.0: 2.1) issue with limited impact if exploited. The documente...

3.3CVSS4.8AI score0.00032EPSS
Exploits0References10Affected Software1
NVD
NVD
added 2019/12/05 9:15 p.m.21 views

CVE-2012-1592

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files...

8.8CVSS8.9AI score0.00588EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2019/12/05 9:15 p.m.17 views

CVE-2012-1592

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files...

8.8CVSS7.6AI score0.00588EPSS
Exploits0References2
Cvelist
Cvelist
added 2019/12/05 8:57 p.m.26 views

CVE-2012-1592

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files...

8.9AI score0.00588EPSS
Exploits0References7
OSV
OSV
added 2019/12/04 5:16 p.m.2 views

CVE-2019-7201

An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak...

7.8CVSS7.4AI score
Exploits0References1
Rows per page
Query Builder