Lucene search
+L

4265 matches found

OSV
OSV
•added 2021/01/28 3:15 a.m.•19 views

CVE-2020-25785

An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CFtpProtocol::FtpLogin during the update procedure...

9.8CVSS7.7AI score0.01539EPSS
SaveExploits1References1
NVD
NVD
•added 2021/01/28 3:15 a.m.•38 views

CVE-2020-25785

An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CFtpProtocol::FtpLogin during the update procedure...

9.8CVSS9.8AI score0.01539EPSS
SaveExploits1References1
Prion
Prion
•added 2021/01/28 3:15 a.m.•25 views

Stack overflow

An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CFtpProtocol::FtpLogin during the update procedure...

7.5CVSS9.7AI score0.01539EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/01/28 2:05 a.m.•36 views

CVE-2020-25785

An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CFtpProtocol::FtpLogin during the update procedure...

9.8AI score0.01539EPSS
SaveExploits1References1
CVE
CVE
•added 2021/01/28 2:05 a.m.•100 views

CVE-2020-25785

CVE-2020-25785 affects Accfly Wireless Security IR Camera System 720P with software versions v3.10.73–v4.15.77. The issue is an unauthenticated stack-based buffer overflow in CFtpProtocol::FtpLogin during the update procedure. CVSS metrics indicate high/critical impact (AV:N/AC:L/PR:N/UI:N/S:U/C:...

9.8CVSS9.8AI score0.01539EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/01/28 12:00 a.m.•4 views

PT-2021-11183

Name of the Vulnerable Software and Affected Versions: Accfly Wireless Security IR Camera System 720P versions v3.10.73 through v4.15.77 Description: An issue was discovered in the Accfly Wireless Security IR Camera System 720P, where there is an unauthenticated stack-based buffer overflow in the...

9.8CVSS0.01539EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•22 views

Bitcoin Core Input Validation Error Vulnerability

Bitcoin Core is an open source client for verifying the validity of blockchain transactions. An input validation error vulnerability exists in Bitcoin Core version 0.21.0 and prior versions, which stems from the ability to create a new file in an arbitrary directory via a dumpwallet RPC call...

7.5CVSS7.2AI score0.01181EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2021/01/26 12:00 a.m.•20 views

The vulnerability of the execution environment for remote process calls in the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the execution environment for remote procedure calls in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.03204EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2021/01/23 8:00 a.m.•13 views

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

6.8CVSS7AI score0.0183EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2021/01/23 8:00 a.m.•5 views

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

6.8CVSS7AI score0.02157EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/01/22 12:00 a.m.•70 views

Oracle Database Procedure Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle Database. Authentication is required to exploit this vulnerability. The specific flaw exists within the execution of stored procedures. When executing stored procedures, the process does not...

8.8CVSS4.3AI score0.01673EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2021/01/21 12:00 a.m.•12 views

VulnCheck KEV: CVE-2018-8514

An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...

5.5CVSS7AI score0.01889EPSS
SaveIn wildExploits0References2
Positive Technologies
Positive Technologies
•added 2021/01/21 12:00 a.m.•16 views

PT-2021-19612

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions through 0.21.0 Description: The issue allows bitcoind to create a new file in an arbitrary directory, such as outside the /.bitcoin directory, via a "dumpwallet" RPC call. This reportedly does not violate the security...

7.5CVSS6.7AI score0.01181EPSS
SaveExploits1References19
BDU FSTEC
BDU FSTEC
•added 2021/01/21 12:00 a.m.•14 views

The vulnerability of the execution environment for remote process calls in the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the execution environment for remote procedure calls in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.03204EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/01/21 12:00 a.m.•14 views

The vulnerability of the execution environment for remote process calls in the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the execution environment for remote procedure calls in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.03204EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/01/21 12:00 a.m.•18 views

The vulnerability of the execution environment for remote process calls in the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the execution environment for remote procedure calls in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.03204EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/01/21 12:00 a.m.•15 views

The vulnerability of the execution environment for remote process calls in the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the execution environment for remote procedure calls in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.8AI score0.03204EPSS
SaveExploits0References3
OSV
OSV
•added 2021/01/20 3:15 p.m.•26 views

CVE-2021-2072

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.9CVSS5.7AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2021/01/20 3:15 p.m.•19 views

CVE-2021-2072

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

6.8CVSS6.7AI score0.02157EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2021/01/20 3:15 p.m.•48 views

Code injection

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. While t...

6.8CVSS6.2AI score0.02308EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder