Lucene search
+L

106 matches found

Prion
Prion
•added 2023/08/07 4:15 a.m.•29 views

Out-of-bounds

In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076...

1.4CVSS4.4AI score0.00093EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/07 3:21 a.m.•18 views

CVE-2023-20798

In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076...

6.3AI score0.00093EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/07 3:21 a.m.•98 views

CVE-2023-20798

CVE-2023-20798 concerns a buffer size miscalculation in the MediaTek pda module leading to an out-of-bounds read. The issue can cause local information disclosure with system-level privileges and does not require user interaction. Affected component: pda in MediaTek microprogram software (as docu...

4.4CVSS4.4AI score0.00093EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/07 3:21 a.m.•44 views

CVE-2023-20798

In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076...

4.7AI score0.00093EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/08/07 12:00 a.m.•18 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from an incorrect calculation of the buffer size in the pda module, which may result in out-of-bounds reads...

4.4CVSS7AI score0.00093EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/07 12:00 a.m.•3 views

CVE-2023-20798: Out-of-bounds Read

In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076...

4.4CVSS5.8AI score0.00093EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2023/05/17 7:30 a.m.•14 views

pda-ag.ch Cross Site Scripting vulnerability OBB-3347454

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2022/01/31 5:54 p.m.•50 views

Security Bulletin: Publicly disclosed vulnerability (CVE-2021-4034) in Polkit affects IBM Netezza PDA OS Security

Summary Polkit is shipped with PDA OS Security kits. This Bulletin provides mitigation for the reported CVE Vulnerability Details CVEID: CVE-2021-4034 DESCRIPTION: Polkit could allow a local authenticated attacker to gain elevated privileges on the system, caused by incorrect handling of the...

7.8CVSS7.3AI score0.94345EPSS
SaveExploits155Affected Software1
CNVD
CNVD
•added 2021/07/20 12:00 a.m.•20 views

XML Entity Injection Vulnerability in jeewms

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms there is an XML entity injection vulnerability , an attacker can use the vulnerability to read the server file...

7.3AI score
SaveExploits0
CNVD
CNVD
•added 2021/07/07 12:00 a.m.•20 views

JEEWMS suffers from a file upload vulnerability (CNVD-2021-51493)

JEEWMS JAVA-based warehouse management system support for self-support and third-party, including PDA side and WEB side. JEEWMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2021/07/06 12:00 a.m.•17 views

SQL injection vulnerability in jeewms (CNVD-2021-51413)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2021/07/06 12:00 a.m.•21 views

File upload vulnerability in jeewms (CNVD-2021-51414)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can upload malicious files through the vulnerability , control the server...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2021/07/02 12:00 a.m.•30 views

File upload vulnerability in jeewms (CNVD-2021-49574)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can use the vulnerability to obtain server privileges...

7.1AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/16 2:18 p.m.•75 views

Security Bulletin: IBM Netezza Host Management is affected by the vulnerabilities known as Spectre and Meltdown.

Summary IBM Netezza Host Management is affected by the vulnerabilities known as Spectre and Meltdown, which can enable CPU data cache timing to be abused to bypass conventional memory security restrictions to gain access to privileged memory that should be inaccessible. Vulnerability Details CVEI...

5.6CVSS6.7AI score0.93838EPSS
SaveExploits11Affected Software1
Cisco Threats
Cisco Threats
•added 2018/02/13 2:46 p.m.•19 views

Threat Outbreak Alert RuleID31986: Email Messages Distributing Malicious Software on February 13, 2018

Medium Alert ID: 56801 First Published: 2018 February 13 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31986 may contain the following files: Name |...

0.1AI score
SaveExploits0
CNVD
CNVD
•added 2016/09/11 12:00 a.m.•5 views

Generalized SQL Injection Vulnerability in Xiamen Yaxun PDA System

The "Palm Service" system is an efficient process management system of enterprise mobile informationization based on the application of GPS mobile location management technology in response to the shortcomings of the traditional management mode of the enterprise field personnel and after years of...

7.7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2015/10/18 4:41 p.m.•17 views

pda.sky.com XSS vulnerability

Vulnerable URL: http://pda.sky.com/video/payvideosubmenu.asp?net=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E=golf Details: Description| Value ---|--- Patched:| Yes, at 08.11.2015 Latest check for patch:| 08.11.2015 17:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

6.3AI score
SaveExploits0
zdt
zdt
•added 2010/08/04 12:00 a.m.•30 views

SMA-DB 0.3.14 (pfad_z) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ========================================================= SMA-DB 0.3.14 pfadz Local File Inclusion Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/07/04 12:00 a.m.•33 views

Esoftpro Online Contact Manager - Multiple Vulnerabilities

Esoftpro Online Contact Manager - Multiple Vulnerabilities Exploit Title: Esoftpro Online Contact Manager Multiple Vulnerability Vendor url:http://www.esoftpro.com/ Version:3 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-07-4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYu...

0.8AI score
SaveExploits0
zdt
zdt
•added 2010/07/04 12:00 a.m.•43 views

Esoftpro Online Contact Manager Multiple Vulnerability

Exploit for php platform in category web applications ====================================================== Esoftpro Online Contact Manager Multiple Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

7.1AI score
SaveExploits0
Rows per page
Query Builder