Lucene search
+L

2822 matches found

CNVD
CNVD
•added 2021/12/17 12:00 a.m.•51 views

Trend Micro Security Backlink Vulnerability (CNVD-2021-103666)

Trend Micro Security is a suite of computer security software from Trend Micro, Inc. Trend Micro Security has a backlink vulnerability that stems from a link tracking issue in the PC Health Check feature. An attacker could exploit the vulnerability to cause a denial of service attack...

7.1CVSS2.6AI score0.00422EPSS
SaveExploits0References1
OSV
OSV
•added 2021/12/16 3:15 a.m.•15 views

CVE-2021-44023

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...

7.1CVSS7.1AI score0.00422EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/16 3:15 a.m.•8 views

CVE-2021-44023

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...

7.1CVSS6.6AI score0.00422EPSS
SaveExploits0References3
NVD
NVD
•added 2021/12/16 3:15 a.m.•30 views

CVE-2021-44023

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...

7.1CVSS0.00422EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/16 3:15 a.m.•30 views

Design/Logic Flaw

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...

3.6CVSS6.7AI score0.00422EPSS
SaveExploits0References2Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/16 12:00 a.m.•4 views

CVE-2021-44023: Improper Link Resolution Before File Access

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...

7.1CVSS5.9AI score0.00422EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/13 8:15 a.m.•37 views

RLSA-2021:5082 Important: samba security update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: Active Directory AD domain user could become root...

8.1CVSS7.4AI score0.01953EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/12/10 12:00 a.m.•17 views

Trend Micro Security 后置链接漏洞

Trend Micro Security is a suite of computer security software from Trend Micro, Inc. Trend Micro Security has a backlink vulnerability that stems from a link tracking issue in the PC Health Check feature. An attacker could exploit the vulnerability to cause a denial of service attack...

7.1CVSS5.6AI score0.00422EPSS
SaveExploits0References5
CNVD
CNVD
•added 2021/12/08 12:00 a.m.•46 views

Huawei HarmonyOS Input Validation Error Vulnerability (CNVD-2021-99964)

Huawei HarmonyOS is an operating system from Huawei, China. An input validation error vulnerability exists in the System Applications module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from the program's inability to...

7.5CVSS2.5AI score0.00581EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/07 5:15 p.m.•27 views

Input validation

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc...

5CVSS7.5AI score0.00581EPSS
SaveExploits0References1Affected Software1
Microsoft Secure
Microsoft Secure
•added 2021/12/07 5:00 p.m.•44 views

New Secured-core servers are now available from the Microsoft ecosystem to help secure your infrastructure

In the current pandemic-driven remote work environments, security has become increasingly important. Earlier this year, Colonial Pipeline, one of the leading suppliers of fuel on the East Coast of the United States, was hit by a ransomware attack.1 This caused a massive disruption of the fuel...

1.7AI score
SaveExploits0
Cvelist
Cvelist
•added 2021/12/07 4:02 p.m.•34 views

CVE-2021-37048

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc...

7.7AI score0.00581EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/07 12:00 a.m.•4 views

CVE-2021-37048: Improper Input Validation

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc...

7.5CVSS5.8AI score0.00581EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/17 7:15 p.m.•12 views

CVE-2021-0096

Improper authentication in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.3AI score0.00234EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/17 7:15 p.m.•11 views

CVE-2021-33090

Incorrect default permissionsin the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7AI score0.00228EPSS
SaveExploits0References2
NVD
NVD
•added 2021/11/16 12:15 p.m.•75 views

CVE-2021-42114

Modern DRAM devices PC-DDR4, LPDDR4X are affected by a vulnerability in their internal Target Row Refresh TRR mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, consisting of aggressors with different frequencies, phases, and amplitudes allow triggering bit flips o...

9CVSS0.02984EPSS
SaveExploits1References3
Prion
Prion
•added 2021/11/16 12:15 p.m.•44 views

Privilege escalation

Modern DRAM devices PC-DDR4, LPDDR4X are affected by a vulnerability in their internal Target Row Refresh TRR mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, consisting of aggressors with different frequencies, phases, and amplitudes allow triggering bit flips o...

7.9CVSS8.4AI score0.02984EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/11/16 12:00 a.m.•7 views

PT-2021-4764

Name of the Vulnerable Software and Affected Versions Modern DRAM devices PC-DDR4, LPDDR4X are affected by this issue. Description The vulnerability is related to the internal Target Row Refresh TRR mitigation against Rowhammer attacks in modern DRAM devices. Novel non-uniform Rowhammer access...

9CVSS0.02984EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/16 12:00 a.m.•5 views

CVE-2021-42114: Improper Input Validation

Modern DRAM devices PC-DDR4, LPDDR4X are affected by a vulnerability in their internal Target Row Refresh TRR mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, consisting of aggressors with different frequencies, phases, and amplitudes allow triggering bit flips o...

9CVSS5.9AI score0.02984EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/11/12 12:00 a.m.•44 views

Huawei Pc Smart Full Scene path traversal vulnerability

A path traversal vulnerability exists in Huawei Pc Smart Full Scene version 11.1, a full-scene intelligence solution from Huawei China. The vulnerability stems from an input validation error when the program handles directory traversal sequences. A remote attacker could exploit the vulnerability ...

6.5CVSS2.4AI score0.00304EPSS
SaveExploits0References1
Rows per page
Query Builder