Lucene search
+L

8006 matches found

CNNVD
CNNVD
added 2021/12/21 12:0 a.m.11 views

Fresenius Kabi Agilia Connect Infusion System 资源管理错误漏洞

The Fresenius Kabi Agilia Connect Infusion System is an infusion system from Fresenius Kabi, a German company, that is vulnerable to a resource management error that could be exploited by an attacker to interrupt the normal operation of the device. normal operation of the device...

7.8CVSS5.6AI score0.0107EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2021/12/20 10:3 a.m.38 views

Experts Discover Backdoor Deployed on the U.S. Federal Agency's Network

A U.S. federal government commission associated with international rights has been targeted by a backdoor that reportedly compromised its internal network in what the researchers described as a "classic APT-type operation." "This attack could have given total visibility of the network and complet...

0.2AI score
SaveExploits0
CNVD
CNVD
added 2021/12/19 12:0 a.m.69 views

MediaWiki licensing issue vulnerability (CNVD-2022-03907)

MediaWiki is a free and free-to-use web-based wiki engine from the U.S. Wikimedia MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. mediaWiki suffers from an authorization issue vulnerability that stems from a lack of...

7.5CVSS4AI score0.01327EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/12/15 12:0 a.m.9 views

MediaWiki 安全漏洞

MediaWiki is a free and free-to-use web-based wiki engine from the U.S. Wikimedia MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. mediaWiki suffers from an authorization issue vulnerability that stems from a lack of...

7.5CVSS5.7AI score0.01327EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.8 views

Owncast 跨站脚本漏洞

Owncast is an open source, self-hosted, decentralized, single-user real-time video streaming and chat server. A cross-site scripting vulnerability exists in Owncast, which in affected versions executes inline script when parsing Javascript via a paste operation...

8.2CVSS6.7AI score0.00747EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2021/12/11 8:30 p.m.34 views

CaptfEncoder - An Extensible Cross Platform Network Security Tool Suite

Captfencoder is an extensible cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, special coding, miscellaneous tools, and aggregating all kinds of online tools. CaptfEncoder all functions...

7.5AI score
SaveExploits0References3
OSV
OSV
added 2021/12/09 4:15 p.m.7 views

CVE-2021-20143

An unauthenticated command injection vulnerability exists in the parameters of operation 48 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...

8.8CVSS5.9AI score0.03709EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/09 4:15 p.m.5 views

CVE-2021-20144

An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...

8.8CVSS7.8AI score0.03709EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/09 4:15 p.m.8 views

CVE-2021-20144

An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...

8.8CVSS5.9AI score0.03709EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/09 4:15 p.m.6 views

CVE-2021-20141

An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...

8.8CVSS7.8AI score0.03709EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/09 4:15 p.m.5 views

CVE-2021-20139

An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to...

8.8CVSS7.8AI score0.03984EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/09 4:15 p.m.8 views

CVE-2021-20142

An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...

8.8CVSS5.9AI score0.03709EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/09 4:15 p.m.5 views

CVE-2021-20139

An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to...

8.8CVSS7.4AI score
SaveExploits0References1
Prion
Prion
added 2021/12/09 4:15 p.m.12 views

Command injection

An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...

8.3CVSS9AI score0.03709EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/12/09 12:0 a.m.7 views

Gryphon Tower 操作系统命令注入漏洞

A command injection vulnerability exists in Gryphon Tower, a wireless router from Gryphon, which stems from a failure to properly filter user input for special characters, commands, etc. in the parameters of operation 10 in the controllerserver service on the router. An unauthenticated, remote...

8.8CVSS5.9AI score0.03984EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/09 12:0 a.m.7 views

Gryphon Tower 操作系统命令注入漏洞

The Gryphon Tower is a wireless router from Gryphon. A command injection vulnerability exists in Gryphon Tower, which originates from the failure of the parameters of operation 32 in the controllerserver service on the router to correctly filter special characters, commands, etc. entered by the...

8.8CVSS6AI score0.03709EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/09 12:0 a.m.6 views

Gryphon Tower 操作系统命令注入漏洞

A command injection vulnerability exists in Gryphon Tower, a wireless router from Gryphon. The vulnerability stems from a failure to properly filter user input for special characters, commands, etc. in the parameters of operation 49 in the controllerserver service on the router. An unauthenticate...

8.8CVSS5.9AI score0.03709EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/12/09 12:0 a.m.8 views

Gryphon Tower 操作系统命令注入漏洞

A command injection vulnerability exists in Gryphon Tower, a wireless router from Gryphon. The vulnerability stems from the failure to properly filter the parameters of operation 41 in the controllerserver service on the router for special characters and commands entered by the user, which could ...

8.8CVSS5.9AI score0.03709EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.9 views

The vulnerability of the SSH control function for Cisco Access Points (APs) allows a hacker to elevate their privileges to the root level.

The vulnerability of the SSH control function for Cisco Access Points APs is related to improper checking of file operations in the SSH control interface. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

7.8CVSS7.2AI score0.00216EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2021/12/06 12:0 a.m.8 views

Qualcomm 芯片代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and are from time to time fabricated on the surface of semiconductor wafers. A code issue vulnerability exists in Qualcomm Chipsets that stems...

7.8CVSS7.4AI score0.00151EPSS
SaveExploits0References4
Rows per page
Query Builder