Lucene search
+L

803 matches found

Positive Technologies
Positive Technologies
added 2019/10/06 12:0 a.m.10 views

PT-2019-6340 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to the ParseMetaGeometry function in the MagickCore/geometry.c component of the ImageMagick console graphic editor. It is caused by an incorrect implementation of the...

9.1CVSS7AI score0.89855EPSS
SaveExploits65References316
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:0 a.m.5 views

The vulnerability of the microprogrammed Ethernet switch software from Moxa, models PT-7528 and PT-7828, stems from the use of a rigidly encrypted cryptographic key for encrypting account data. This allows attackers to enhance their privileges.

The vulnerability of the microprogrammed Ethernet switch software of Moxa PT-7528 and Moxa PT-7828 lies in the use of a rigidly encrypted cryptographic key, which is used for encrypting account data. Exploiting this vulnerability allows a remote attacker to enhance their privileges...

10CVSS5.5AI score0.01237EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:0 a.m.6 views

The vulnerability of the embedded web-server microprogramming software in Moxa PT-7528 and Moxa PT-7828 Ethernet switches allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the embedded web-server microprogramming software for Moxa PT-7528 and Moxa PT-7828 switches is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a service failure using a specially crafted...

10CVSS6.4AI score0.0283EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:0 a.m.7 views

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of a unstable cryptographic algorithm in the configuration files. This allows a hacker to decrypt the configuration data.

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of a unstable cryptographic algorithm in the configuration files. Exploiting this vulnerability allows a remote attacker to decrypt the configuration data...

9.4CVSS5.5AI score
SaveExploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:0 a.m.8 views

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of cryptographic algorithms that contain defects, allowing attackers to decrypt the login credentials.

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a remote attacker to decrypt the login credentials...

9.4CVSS5.5AI score0.00812EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:0 a.m.5 views

The vulnerability of the microprogrammed Ethernet switch software from Moxa, models PT-7528 and PT-7828, stems from the use of rigidly encoded configuration data for the device’s console. This allows attackers to exploit their privileges to gain unauthorized access.

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of rigidly encoded configuration data for the device’s configuration console. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.4CVSS5.5AI score0.01646EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2019/08/13 12:0 a.m.3 views

PT-2019-3003 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Graphics Component affected versions not specified Description: The issue is related to errors in handling objects in memory by the Windows Graphics Component. This can allow an attacker to disclose protected information usi...

5.5CVSS7.9AI score0.02832EPSS
SaveExploits1References8
NVD
NVD
added 2019/07/23 11:15 p.m.18 views

CVE-2019-2748

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Application Server. Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

7.1CVSS6AI score0.00884EPSS
SaveExploits0References1
Prion
Prion
added 2019/07/23 11:15 p.m.18 views

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Application Server. Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

4.9CVSS6.3AI score0.00884EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2019/07/23 10:31 p.m.9 views

CVE-2019-2748

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Application Server. Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

6.2AI score0.00884EPSS
SaveExploits0References1
CVE
CVE
added 2019/07/23 10:31 p.m.56 views

CVE-2019-2748

CVE-2019-2748 affects Oracle PeopleSoft Products’ PeopleSoft Enterprise PT PeopleTools (Application Server) with affected versions 8.55, 8.56, and 8.57. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft PT PeopleTools, potentially enabling un...

7.1CVSS6.3AI score0.00884EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2019/07/23 10:31 p.m.12 views

CVE-2019-2599

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Pagelet Wizard. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

6.1AI score0.01348EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/07/23 10:31 p.m.23 views

CVE-2019-2599

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Pagelet Wizard. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

6.2AI score0.01348EPSS
SaveExploits0References1
myhack58
myhack58
added 2019/07/17 12:0 a.m.330 views

honggfuzz vulnerability mining technology principle analysis-vulnerability warning-the black bar safety net

Google AFLWinAFL, the libfuzzer and honggfuzz is the most famous of the three based on code coverage fuzzer is. Online on the AFLWinAFLanalysis of the articles more, and on the latter two Analysis Articles less. Before the spring brother has written about honggfuzz article: honggfuzz vulnerabilit...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2019/07/09 12:0 a.m.1 views

PT-2019-2722 · Microsoft · Windows Appx Deployment Server +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Service AppXSVC affected versions not specified Description: The issue is related to the improper handling of hard links by the Windows AppX Deployment Service AppXSVC, which can lead to an elevation of privilege. This...

7.8CVSS9.1AI score0.01782EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.12 views

Rockwell Automation 1792D-16BVT0CD 16In Pt Diags General Purpose Discrete I/O

Binary data 752786.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.11 views

Rockwell Automation 1792D-8BVT8CD 8In/8Out Pt Diags General Purpose Discrete I/O

Binary data 752787.prm...

7.3AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.6 views

The vulnerability of the RemoteCall sub-component of the PeopleSoft Enterprise PT PeopleTools component of the Oracle PeopleSoft Products suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the RemoteCall sub-component of the PeopleSoft Enterprise PT PeopleTools component of the Oracle PeopleSoft Products suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

4.3CVSS5.8AI score0.00978EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/04/23 7:32 p.m.20 views

CVE-2019-2586

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: RemoteCall. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

4.3CVSS2.8AI score0.00978EPSS
SaveExploits0References1
Prion
Prion
added 2019/04/23 7:32 p.m.16 views

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: Application Server. Supported versions that are affected are 8.55, 8.56 and 8.57. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

4.9CVSS6.4AI score0.01146EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder