Lucene search
+L

4501 matches found

HPE Security Bulletins
HPE Security Bulletins
added 2021/02/02 12:0 a.m.6 views

HPESBNW04083 rev.2 - HPE and Aruba L2/L3 Switches, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 5400R zl2 Switch Series - Prior to KB.16.10.0012, KB.16.09.0015, KB.16.08.0019 Aruba 3810M Switch Series - Prior to KB.16.10.0012, KB.16.09.0015, KB.16.08.0019 Aruba 2930M...

7.5CVSS7AI score0.01464EPSS
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
added 2021/02/02 12:0 a.m.8 views

HPESBNW04082 rev.1 - HPE and Aruba L2/L3 Switches, Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 5400R zl2 Switch Series - Prior to KB.16.10.0012 Aruba 3810M Switch Series - Prior to KB.16.10.0012 Aruba 2930M Switch Series - Prior to WC.16.10.0012 Aruba 2930F Switch...

4.9CVSS6.1AI score0.00296EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/01/29 12:0 a.m.12 views

Buffer Error Vulnerability in Multiple HPE Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A buffer error vulnerability exists in multiple HPE Cloudline products, which stems from a local buffer overflow in the spxrestservice setremoteimageinfofunc function. The following products a...

7.8CVSS7.3AI score0.00341EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/01/29 12:0 a.m.10 views

Path Traversal Vulnerability in Multiple HPE Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A path traversal vulnerability exists in several HPE Cloudline products, which stems from a local buffer overflow in the gethelpdatafunc function. The following products and versions are...

7.8CVSS7.3AI score0.00418EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/01/29 12:0 a.m.9 views

Buffer Error Vulnerability in Multiple HPE Products

HPE Cloudline CL5800 Gen9 Server and others are a dense cloud storage server appliance from HPE America. A buffer error vulnerability exists in multiple HPE Cloudline products, which stems from a local buffer overflow in the spxrestservice setfwimagelocationfunc function. The following products a...

7.8CVSS7.3AI score0.00341EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:0 a.m.12 views

The vulnerability in the web interface for managing microprogrammed software in Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W routers allows a hacker to execute arbitrary code.

The vulnerability of the web-based management interface for microprogrammed wireless router software products such as Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a...

9CVSS7.5AI score0.02371EPSS
SaveExploits0References2
OSV
OSV
added 2021/01/26 6:15 p.m.6 views

CVE-2020-36201

An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices...

7.5CVSS7.1AI score0.00805EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.7 views

Multiple Xerox Product Encryption Issues Vulnerabilities

The Xerox 3655i, among others, is a multifunction printer from Xerox USA. A security vulnerability exists in several Xerox products. The following products and versions are affected: 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 device...

7.5CVSS5.8AI score0.00805EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.11 views

Multiple ZTE Products Resource Management Error Vulnerability

The ZTE ZXR10 9904, among others, is a switch device from China's ZTE ZTE. A resource management error vulnerability exists in several ZTE products. The vulnerability stems from improper handling of memory release, and can be exploited by a remote attacker to trigger the vulnerability through a...

7.5CVSS7AI score0.01194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.9 views

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

9CVSS7.5AI score0.02194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.10 views

The vulnerability in the web interface for managing microprogrammed wireless router software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web-based management interfaces for microprogramming software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is caused by buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

10CVSS7.8AI score0.02194EPSS
SaveExploits0References2
FireEye
FireEye
added 2021/01/21 12:0 a.m.62 views

Training Transformers for Cyber Security Tasks: A Case Study on Malicious URL Prediction

Highlights Perform a case study on using Transformer models to solve cyber security problems Train a Transformer model to detect malicious URLs under multiple training regimes Compare our model against other deep learning methods, and show it performs on-par with other top-scoring models Identify...

0.1AI score
SaveExploits0References13
BDU FSTEC
BDU FSTEC
added 2021/01/19 12:0 a.m.10 views

The vulnerability of the Plug and Play service and the web interface for controlling microprogrammed wireless routers such as Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the Plug and Play service and the web interface for controlling microprogrammed wireless routers such as Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to...

9CVSS7.6AI score0.02194EPSS
SaveExploits0References2
Gitee
Gitee
added 2021/01/15 9:46 a.m.8 views

PayloadsAllTheThings

It is an offensive tool for funding. This repository contains a collection of funding models, including GitHub Sponsors, Ko-fi, and Buy Me a Coffee. The primary vulnerability class is not explicitly stated, but the tool appears to be related to funding models rather than a specific vulnerability...

7AI score
SaveExploits0
OSV
OSV
added 2021/01/13 10:15 p.m.8 views

CVE-2021-1161

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

7.2CVSS7.4AI score0.02194EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/13 10:15 p.m.6 views

CVE-2021-1154

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

4.8CVSS6.1AI score0.00552EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/13 12:0 a.m.10 views

Cisco Small Business 跨站脚本漏洞

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A stored cross-site scripting vulnerability exists in the Web management interface of the Cisco...

4.8CVSS6AI score0.00552EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/01/13 12:0 a.m.5 views

PT-2021-1693 · Cisco · Cisco Small Business Rv130W +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of the affected routers. These vulnerabilities...

9CVSS7.3AI score0.02371EPSS
SaveExploits0References4
Schneier on Security
Schneier on Security
added 2021/01/07 12:14 p.m.40 views

Extracting Personal Information from Large Language Models Like GPT-2

Researchers have been able to find all sorts of personal information within GPT-2. This information was part of the training data, and can be extracted with the right sorts of queries. Paper: "Extracting Training Data from Large Language Models." Abstract: It has become common to publish large...

1.9AI score
SaveExploits0
OSV
OSV
added 2020/12/30 12:15 a.m.7 views

CVE-2020-35842

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before...

5.4CVSS6.1AI score0.0054EPSS
SaveExploits0References1
Rows per page
Query Builder