Lucene search
+L

8046 matches found

Positive Technologies
Positive Technologies
added 2023/07/26 12:0 a.m.6 views

PT-2023-4412 · Foxit · Foxit Pdf Editor +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

7.8CVSS7.8AI score0.00524EPSS
SaveExploits0References7
OSV
OSV
added 2023/07/24 4:15 p.m.15 views

AZL-27761 CVE-2023-33951 affecting package kernel for versions less than 5.15.135.1-2

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

5.3CVSS6.6AI score0.00343EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/24 4:15 p.m.28 views

CVE-2023-33951

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

6.7CVSS6.5AI score0.00343EPSS
SaveExploits0References9
OSV
OSV
added 2023/07/24 4:15 p.m.7 views

DEBIAN-CVE-2023-33951

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

5.3CVSS6.5AI score0.00343EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/07/24 4:15 p.m.48 views

CVE-2023-33951

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

6.7CVSS6.7AI score0.00343EPSS
SaveExploits0References3
OSV
OSV
added 2023/07/24 4:15 p.m.21 views

UBUNTU-CVE-2023-33951

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

6.7CVSS6.6AI score0.00343EPSS
SaveExploits0References4
Prion
Prion
added 2023/07/24 4:15 p.m.42 views

Race condition

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

0.8CVSS5.5AI score0.00343EPSS
SaveExploits0References6Affected Software4
Debian CVE
Debian CVE
added 2023/07/24 3:19 p.m.36 views

CVE-2023-33951

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

6.7CVSS7.1AI score0.00343EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/07/24 3:19 p.m.58 views

CVE-2023-33951 Kernel: vmwgfx: race condition leading to information disclosure vulnerability

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

6.7CVSS6.7AI score0.00343EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2023/07/21 12:0 a.m.10 views

Pimcore SQL注入漏洞

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce frameworks and product information management applications. A SQL injection vulnerability exists in Pimcor...

7.2CVSS7.1AI score0.01155EPSS
SaveExploits1References4
Huntr
Huntr
added 2023/07/14 12:40 p.m.27 views

SQL injection in Data Objects function

Description Log in as an admin, go to Data Objects function, and perform a sort action. Observer the request on Burpsuite and injection point is the 'sort' parameter Proof of Concept POC request that makes the application sleep for 5 seconds Data Objects function payload:...

5.8CVSS7.2AI score0.01155EPSS
SaveExploits1
Zero Day Initiative
Zero Day Initiative
added 2023/07/13 12:0 a.m.28 views

Kofax Power PDF clearInterval Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of ap...

7.8CVSS6.8AI score0.00407EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/13 12:0 a.m.6 views

PT-2023-5451 · Foxit · Foxit Pdf Reader +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

7.8CVSS8AI score0.0046EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/07/13 12:0 a.m.9 views

PT-2023-26295 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

7.8CVSS7.4AI score0.00425EPSS
SaveExploits0References4
NVD
NVD
added 2023/07/11 3:15 a.m.35 views

CVE-2023-33990

SAP SQL Anywhere - version 17.0, allows an attacker to prevent legitimate users from accessing the service by crashing the service. An attacker with low privileged account and access to the local system can write into the shared memory objects. This can be leveraged by an attacker to perform a...

7.8CVSS7.6AI score0.00159EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/07/11 2:29 a.m.60 views

CVE-2023-33990 Denial of Service (DoS) vulnerability in SAP SQL Anywhere

SAP SQL Anywhere - version 17.0, allows an attacker to prevent legitimate users from accessing the service by crashing the service. An attacker with low privileged account and access to the local system can write into the shared memory objects. This can be leveraged by an attacker to perform a...

7.8CVSS7.8AI score0.00159EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/11 12:0 a.m.8 views

SAP BusinessObjects Business Intelligence Platform 安全漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...

7.5CVSS7.3AI score0.00585EPSS
SaveExploits0References3
NCSC
NCSC
added 2023/07/11 12:0 a.m.70 views

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in several products, including. Business Objects, ECC, HANA, Netweaver, Business Warehouse and Solution Manager. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: Cross-Site Scripting XSS...

9.4CVSS7AI score0.00974EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.11 views

PT-2023-4097 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform versions 420, 430 Description: The issue allows an unauthorized attacker who has hijacked a user session to bypass the victim's old password via brute force due to an unrestricted rate limit...

7.8CVSS7.5AI score0.00585EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2023/07/10 12:0 a.m.27 views

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2320)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01301EPSS
SaveExploits1References2
Rows per page
Query Builder