Lucene search
K

1200 matches found

CNNVD
CNNVD
added 2022/05/12 12:0 a.m.4 views

Siemens SICAM T 安全漏洞

The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...

9.8CVSS8.9AI score0.01729EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/05/12 12:0 a.m.4 views

Siemens SICAM T 输入验证错误漏洞

The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...

8.8CVSS8.8AI score0.01342EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/05/10 12:0 a.m.5 views

TOTOLINK N600R 缓冲区错误漏洞

TOTOLINK N600R is a wireless router from Gion Electronics TOTOLINK, Taiwan, China.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the url parameter in the FUN00415bf0 function. An attacker could exploit this...

10CVSS8.9AI score0.01605EPSS
Exploits1References2
CNVD
CNVD
added 2022/04/29 12:0 a.m.15 views

D-Link DIR-825 G1 Command Injection Vulnerability

The DIR-825 G1 is a router from D-Link in Taiwan, China. A command injection vulnerability exists in the D-Link DIR-825 G1 firmware version, which stems from a lack of parameter validation in the "webupg" binary file. The vulnerability can be exploited to execute arbitrary system commands with th...

9CVSS8.3AI score0.31789EPSS
Exploits1References1
CNVD
CNVD
added 2022/04/19 12:0 a.m.11 views

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32800)

FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from a lack of parameter validation when calling memcpy in strtok in srunix/ztimeoutroutines.c. The vulnerability can be exploited to attempt to read a null pointer. An attacker ca...

7.5CVSS6.5AI score0.0145EPSS
Exploits0References1
CNVD
CNVD
added 2022/04/16 12:0 a.m.9 views

Unspecified vulnerability in YottaDB (CNVD-2022-31927)

YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB, which stems from a missing parameter validation in the call to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allowing an attacker to attempt to read from a NULL pointer. No detailed...

7.5CVSS3.4AI score0.01021EPSS
Exploits1References1
OSV
OSV
added 2022/04/15 6:15 p.m.14 views

CVE-2021-44507

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

7.5CVSS6.8AI score
Exploits0References3
NVD
NVD
added 2022/04/15 6:15 p.m.12 views

CVE-2021-44507

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

7.5CVSS0.0145EPSS
Exploits0References3
NVD
NVD
added 2022/04/15 6:15 p.m.16 views

CVE-2021-44481

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

7.5CVSS0.01021EPSS
Exploits1References1
OSV
OSV
added 2022/04/15 6:15 p.m.24 views

CVE-2021-44481

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

7.5CVSS6.7AI score
Exploits0References1
Prion
Prion
added 2022/04/15 6:15 p.m.16 views

Null pointer dereference

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

5CVSS7.4AI score0.01021EPSS
Exploits1References1Affected Software2
Prion
Prion
added 2022/04/15 6:15 p.m.13 views

Null pointer dereference

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

5CVSS7.4AI score0.0145EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2022/04/15 6:2 p.m.85 views

CVE-2021-44507

CVE-2021-44507 affects FIS GT.M through V7.0-000 (related to the YottaDB code base). The issue is caused by a lack of parameter validation in calls to memcpy within str_tok in sr_unix/ztimeoutroutines.c , which can allow an attacker to read from a NULL pointer. The impact described is undefined b...

7.5CVSS7.4AI score0.0145EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2022/04/15 6:2 p.m.48 views

CVE-2021-44507

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

7.5CVSS7.4AI score0.0145EPSS
Exploits0
CVE
CVE
added 2022/04/15 5:17 p.m.81 views

CVE-2021-44481

CVE-2021-44481 affects YottaDB (r1.32 and V7.0-000) and is caused by missing parameter validation in memcpy in sr_unix/ztimeoutroutines.c (function check_and_set_timeout), enabling an attempt to read from a NULL pointer. The available connected documents specify the vulnerable component and root ...

7.5CVSS7.3AI score0.01021EPSS
Exploits1References1Affected Software2
Cvelist
Cvelist
added 2022/04/15 5:17 p.m.19 views

CVE-2021-44481

An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

7.6AI score0.01021EPSS
Exploits1References1
NVD
NVD
added 2022/04/13 10:15 p.m.28 views

CVE-2022-24843

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for th...

7.5CVSS0.01442EPSS
Exploits0References3
Prion
Prion
added 2022/04/13 10:15 p.m.19 views

Design/Logic Flaw

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for th...

5CVSS7.5AI score0.01442EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/04/13 9:10 p.m.27 views

CVE-2022-24843 Path Traversal in github.com/flipped-aurora/gin-vue-admin

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for th...

7.5CVSS7.6AI score0.01442EPSS
Exploits0References5
CVE
CVE
added 2022/04/13 9:10 p.m.77 views

CVE-2022-24843

CVE-2022-24843 affects gin-vue-admin (GitHub project). Affected version: 2.50, vulnerable to an arbitrary file read caused by missing parameter validation. The issue has been fixed in version 2.5.1. Multiple sources corroborate the vulnerability and its remediation; public references describe the...

7.5CVSS7.5AI score0.01442EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder