Lucene search
+L

26418 matches found

Positive Technologies
Positive Technologies
added 2024/10/09 12:00 a.m.4 views

PT-2024-6886

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Expedition affected versions not specified Description An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition. This result...

9.9CVSS7.5AI score0.98546EPSS
SaveExploits0References95
CNNVD
CNNVD
added 2024/10/09 12:00 a.m.7 views

Palo Alto Networks Expedition 安全漏洞

Palo Alto Networks Expedition is a tool from Palo Alto Networks, Inc. that helps with configuration migration, tuning, and enrichment. A security vulnerability exists in Palo Alto Networks Expedition. An attacker could exploit the vulnerability to run arbitrary operating system commands as root...

9.3CVSS9.1AI score0.82612EPSS
SaveExploits5References2
CNNVD
CNNVD
added 2024/10/09 12:00 a.m.10 views

Juniper Networks Junos OS和Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

8.7CVSS6.7AI score0.00457EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/09 12:00 a.m.13 views

Juniper Networks Junos OS和Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

8.7CVSS6.7AI score0.00431EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/10/09 12:00 a.m.17 views

The vulnerability of the component cgi-bin/mainfunction.cgi/cvmcfgupload in the microprogramming software for DrayTek Vigor allows a hacker to execute arbitrary code.

The vulnerability of the cgi-bin/mainfunction.cgi/cvmcfgupload component of DrayTek Vigor routing software exists due to the failure to eliminate special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.5AI score0.8448EPSS
SaveExploits1References5Affected Software3
Github Security Blog
Github Security Blog
added 2024/10/08 9:31 p.m.28 views

Adguard Home arbitrary file read vulnerability

An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory...

4.9CVSS6.6AI score0.00799EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2024/10/08 9:31 p.m.6 views

GHSA-9CP9-8GW2-8V7M Adguard Home arbitrary file read vulnerability

An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory...

7.1CVSS5.1AI score0.00799EPSS
SaveExploits0References8
OSV
OSV
added 2024/10/08 6:15 p.m.1 views

CVE-2024-43553

NT OS Kernel Elevation of Privilege Vulnerability...

7CVSS5.8AI score0.00499EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/08 6:15 p.m.31 views

CVE-2024-38212

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

8.8CVSS0.01356EPSS
SaveExploits0References1
Microsoft Security Update
Microsoft Security Update
added 2024/10/08 5:00 p.m.84 views

2024-10 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2 for x64 (KB5044099)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

7.2AI score
SaveExploits0
NVD
NVD
added 2024/10/08 9:15 a.m.10 views

CVE-2023-52952

A vulnerability has been identified in HiMed Cockpit 12 pro J31032-K2017-H259 All versions = V11.5.1 = V11.5.1 = V11.5.1 = V11.5.1 V11.6.2. The Kiosk Mode of the affected devices contains a restricted desktop environment escape vulnerability. This could allow an unauthenticated local attacker to...

9.3CVSS0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/08 8:40 a.m.6 views

CVE-2023-52952

A vulnerability has been identified in HiMed Cockpit 12 pro J31032-K2017-H259 All versions = V11.5.1 = V11.5.1 = V11.5.1 = V11.5.1 V11.6.2. The Kiosk Mode of the affected devices contains a restricted desktop environment escape vulnerability. This could allow an unauthenticated local attacker to...

9.3CVSS6.9AI score0.00171EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/08 8:40 a.m.46 views

CVE-2023-52952

CVE-2023-52952 affects Siemens HiMed Cockpit devices (12 pro, 14 pro+, 18 pro, 18 pro+) with versions V11.5.1 up to but not including V11.6.2. The Kiosk Mode exposes a restricted desktop environment escape vulnerability that could allow an unauthenticated local attacker to escape the restricted e...

9.3CVSS6.9AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/08 8:40 a.m.17 views

CVE-2023-52952

A vulnerability has been identified in HiMed Cockpit 12 pro J31032-K2017-H259 All versions = V11.5.1 = V11.5.1 = V11.5.1 = V11.5.1 V11.6.2. The Kiosk Mode of the affected devices contains a restricted desktop environment escape vulnerability. This could allow an unauthenticated local attacker to...

9.3CVSS0.00171EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2024/10/08 7:00 a.m.41 views

October 8, 2024-KB5044028 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2

None None...

7.5CVSS7.2AI score0.02935EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/10/08 12:00 a.m.9 views

Siemens HiMed Cockpit 安全漏洞

The HiMed Cockpit is a multimedia terminal for infotainment and other applications, including supporting medical procedures at the bedside of hospital patients. Siemens HiMed Cockpit suffers from an improperly protected alternate path vulnerability that could be exploited by an unauthenticated,...

9.3CVSS6.6AI score0.00171EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.7 views

PT-2024-6720 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a remote code execution vulnerability in the Remote Desktop Client. It is associated with the use of memory after it has been freed, which can be exploited...

10CVSS7.9AI score0.01361EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
added 2024/10/08 12:00 a.m.12 views

CVE-2024-36814

An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on the underlying Operating System via placing a crafted file into a readable directory...

6.7AI score0.00799EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/08 12:00 a.m.14 views

Microsoft Windows NT OS Kernel 安全漏洞

Microsoft Windows NT OS Kernel is the core of the Windows operating system from Microsoft Corporation USA and is responsible for managing system resources, providing hardware abstraction, and ensuring system security and stability. A security vulnerability exists in Microsoft Windows NT OS Kernel...

7.4CVSS6.3AI score0.00499EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/08 12:00 a.m.15 views

The vulnerability of Ivanti Workspace Control’s software for controlling user access to applications and data, related to the transmission of data in an open manner, allows a hacker to obtain the user’s operating system credentials.

The vulnerability of the software for controlling user access to applications and data in Ivanti Workspace Control is related to the transfer of data in an open manner. Exploiting this vulnerability could allow a hacker to obtain the user’s operating system credentials...

8.2CVSS5.5AI score0.00163EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder