Lucene search
+L

3925 matches found

Prion
Prion
added 2023/07/13 12:15 a.m.19 views

Out-of-bounds

there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User interaction is not needed for exploitation...

5.8CVSS6.8AI score0.00491EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/13 12:0 a.m.9 views

PT-2023-26024 · Elecom +1 · Elecom Wrc-1167Febk-A +8

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-1167GHBK3-A versions 1.24 and earlier ELECOM WRC-1167FEBK-A versions 1.18 and earlier ELECOM WRC-F1167ACF2 all versions ELECOM WRC-600GHBK-A all versions ELECOM WRC-733FEBK2-A all versions ELECOM WRC-1467GHBK-A all versions ELECOM...

8CVSS8.1AI score0.01119EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2023/07/12 11:56 p.m.29 views

CVE-2023-35693

In incfskillsb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6.9AI score0.00117EPSS
SaveExploits0
OSV
OSV
added 2023/07/12 9:15 a.m.4 views

CVE-2023-32788

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

5.5CVSS5.9AI score0.00085EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/12 8:32 a.m.11 views

CVE-2023-33895

In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

6.6AI score0.00099EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/12 12:0 a.m.6 views

PT-2023-5821 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 versions affected versions not specified Description: The issue is related to a stack-based buffer overflow vulnerability in the SetMyDLinkRegistration function of the D-Link DIR-3040 router's prog.cgi binary. This vulnerabili...

7.7CVSS7AI score0.00705EPSS
SaveExploits0References8
Lenovo
Lenovo
added 2023/07/11 2:58 p.m.15 views

Lenovo UDC Vulnerability - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.7 views

PT-2023-19207 · Hasthemes · Swatchly

Name of the Vulnerable Software and Affected Versions: HasThemes Swatchly plugin versions 1.2.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a w...

8.8CVSS8.7AI score0.00256EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.2 views

PT-2023-4091 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.6.3 Description: The issue is related to the use of a regular expression with inefficient computational complexity in Apache Airflow, which can be exploited by a remote attacker to cause a denial of service...

7.1CVSS6.1AI score0.01555EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2023/07/10 12:0 a.m.3 views

PT-2023-32997 · Unknown · Whatsapp-Chat-Exporter

Name of the Vulnerable Software and Affected Versions: WhatsApp-Chat-Exporter versions prior to 0.9.5 Description: A Cross-Site Scripting XSS issue was discovered in the HTML output of chats, due to the absence of autoescape=True when setting the environment, which is intended to be mitigated by...

5.4CVSS6.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/07/10 12:0 a.m.6 views

PT-2023-19556 · WordPress · Scott Paterson Contact Form 7 Redirect & Thank You Page

Name of the Vulnerable Software and Affected Versions: Scott Paterson Contact Form 7 Redirect & Thank You Page plugin versions = 1.0.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing...

8.8CVSS8.5AI score0.00312EPSS
SaveExploits0References3
NVD
NVD
added 2023/07/04 2:15 a.m.21 views

CVE-2023-20693

In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664711; Issue ID: ALPS07664711...

7.5CVSS7.4AI score0.00445EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/04 1:44 a.m.14 views

CVE-2023-20772

In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441796; Issue ID: ALPS07441796...

7.3AI score0.0011EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/07/04 1:44 a.m.8 views

CVE-2023-20756

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07549928...

7.4AI score0.00093EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/01 12:0 a.m.10 views

PUB-A-273851762

there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User interaction is not needed for exploitation...

7.2CVSS6.9AI score0.00491EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/01 12:0 a.m.28 views

ASB-A-271680254

In ftopenfaceinternal of ftobjs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS7.6AI score0.02816EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/06/29 12:0 a.m.30 views

Mageia: Security Advisory (MGASA-2023-0208)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.08115EPSS
SaveExploits0References4
Prion
Prion
added 2023/06/28 6:15 p.m.19 views

Out-of-bounds

In StoreAdbSerialNumber of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

1.4CVSS4.3AI score0.00094EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/28 6:15 p.m.17 views

Heap overflow

In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4CVSS6.9AI score0.001EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/06/28 12:0 a.m.26 views

CVE-2023-21185

In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

7.9AI score0.00088EPSS
SaveExploits0References1
Rows per page
Query Builder