Lucene search
+L

7176 matches found

Check Point Advisories
Check Point Advisories
added 2020/07/23 12:00 a.m.3 views

Google Chrome v8 Object.seal Map Transitions Type Confusion

A type confusion vulnerability exists in Google. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

4.9AI score
SaveExploits0
Prion
Prion
added 2020/07/17 7:15 p.m.23 views

Design/Logic Flaw

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of small fragments requiring reassembly,...

5CVSS7.5AI score0.01075EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/07/17 6:40 p.m.30 views

CVE-2020-1655 Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of large packets requiring fragmentation

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of large packets requiring fragmentation,...

5.3CVSS5.2AI score0.01037EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:00 a.m.11 views

The vulnerability of the octl_map_page() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the octlmappage function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.02512EPSS
SaveExploits1References28Affected Software2
CNVD
CNVD
added 2020/07/08 12:00 a.m.8 views

NeDi Consulting NeDi Cross-Site Scripting Vulnerability (CNVD-2020-44575)

NeDi Consulting NeDi is a suite of open source software that supports discovery and mapping of network devices from the Swiss company NeDi Consulting. A cross-site scripting vulnerability exists in NeDi Consulting NeDi version 1.9C. The vulnerability can be exploited to execute arbitrary JavaScri...

5.4CVSS6.7AI score0.00568EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/08 12:00 a.m.11 views

NeDi Consulting NeDi Cross-Site Scripting Vulnerability (CNVD-2020-44582)

NeDi Consulting NeDi is a suite of open source software that supports discovery and mapping of network devices from the Swiss company NeDi Consulting. A cross-site scripting vulnerability exists in NeDi Consulting NeDi version 1.9C. The vulnerability can be exploited to execute arbitrary JavaScri...

5.4CVSS6.7AI score0.00532EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/07/07 4:45 p.m.53 views

Denial of service due to reference expansion in versions earlier than 4.0

Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denial of service can happen if those reference...

0.1AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/07/07 4:15 p.m.8 views

CVE-2020-15035

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Map.php hde parameter...

5.4CVSS6.2AI score0.00532EPSS
SaveExploits0References2
OSV
OSV
added 2020/07/07 4:15 p.m.11 views

CVE-2020-15028

NeDi 1.9C is vulnerable to a cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Map.php xo parameter...

5.4CVSS6.2AI score0.00568EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/07/07 4:15 p.m.2 views

CVE-2020-15035

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Map.php hde parameter...

5.4CVSS5.7AI score0.00532EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2020/07/07 4:15 p.m.3 views

CVE-2020-15028

NeDi 1.9C is vulnerable to a cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Map.php xo parameter...

5.4CVSS5.8AI score0.00568EPSS
SaveExploits0References4
NVD
NVD
added 2020/06/28 12:15 p.m.35 views

CVE-2020-15364

The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...

6.1CVSS0.03729EPSS
SaveExploits5References3
OSV
OSV
added 2020/06/23 8:15 p.m.10 views

CVE-2020-14073

XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Designer Properties screen to insert JavaScript code. This can be exploited against any user with View Maps or Edit Maps access...

5.4CVSS5.8AI score0.02857EPSS
SaveExploits3References4
Prion
Prion
added 2020/06/23 8:15 p.m.25 views

Cross site scripting

XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Designer Properties screen to insert JavaScript code. This can be exploited against any user with View Maps or Edit Maps access...

3.5CVSS5.1AI score0.02857EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
added 2020/06/23 7:09 p.m.43 views

CVE-2020-14073

XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Designer Properties screen to insert JavaScript code. This can be exploited against any user with View Maps or Edit Maps access...

5.2AI score0.02857EPSS
SaveExploits3References4
OSV
OSV
added 2020/06/23 12:00 p.m.49 views

RUSTSEC-2020-0026 linked-hash-map creates uninitialized NonNull pointer

Affected versions of this crate called mem::uninitialized to create a NonNull, which is undefined behavior. The flaw was corrected by avoiding the use of mem::uninitialized...

9.8CVSS9.3AI score0.01792EPSS
SaveExploits1References3
RustSec
RustSec
added 2020/06/23 12:00 p.m.21 views

linked-hash-map creates uninitialized NonNull pointer

Affected versions of this crate called mem::uninitialized to create a NonNull, which is undefined behavior. The flaw was corrected by avoiding the use of mem::uninitialized...

9.8CVSS3.5AI score0.01792EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2020/06/23 10:15 a.m.4 views

DEBIAN-CVE-2020-14938

An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow...

9.8CVSS9AI score0.01375EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2020/06/23 12:00 a.m.13 views

PT-2020-13878 · Paessler · Prtg Network Monitor

Name of the Vulnerable Software and Affected Versions: PRTG Network Monitor version 20.1.56.1574 Description: The issue allows an attacker with Read/Write privileges to create a map and insert JavaScript code using the Map Designer Properties screen. This can be exploited against any user with Vi...

5.4CVSS5.4AI score0.02857EPSS
SaveExploits3References8
Positive Technologies
Positive Technologies
added 2020/06/23 12:00 a.m.11 views

PT-2020-14075 · Freedroidrpg Team +1 · Freedroidrpg +1

Name of the Vulnerable Software and Affected Versions: FreedroidRPG version 1.0rc2 Description: An issue exists in the map.c file of FreedroidRPG version 1.0rc2. The software assumes lengths of data sets read from saved game files and copies data from a file into a fixed-size heap-allocated buffe...

9.8CVSS7.3AI score0.01375EPSS
SaveExploits1References16
Rows per page
Query Builder