Lucene search
+L

5912 matches found

NVD
NVD
added 2023/03/31 10:15 p.m.19 views

CVE-2022-47188

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

7.5CVSS7.5AI score0.00914EPSS
SaveExploits0References3
Prion
Prion
added 2023/03/31 10:15 p.m.17 views

Default credentials

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

5CVSS7.9AI score0.00914EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2023/03/31 12:00 a.m.46 views

CVE-2022-47188

Generex UPS CS141, affected in versions prior to 2.06, contains an arbitrary local file read vulnerability. An attacker using default credentials can upload a backup file containing a symlink to /etc/shadow, enabling content access to that path. The issue is documented in CVE-2022-47188 and corro...

7.5CVSS7.5AI score0.00914EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/31 12:00 a.m.9 views

CVE-2022-47188 Improper Input Validation in Generex CS141

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

7.5CVSS7.5AI score0.00914EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/03/31 12:00 a.m.24 views

CVE-2022-47188 Improper Input Validation in Generex CS141

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

7.5CVSS8.2AI score0.00914EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2023/03/30 2:44 p.m.145 views

CVE-2023-21808

A vulnerability exists in how dotnet reads debugging symbols. Reading a malicious symbols file may result in remote code execution...

7.8CVSS7.8AI score0.01148EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/03/29 12:00 a.m.8 views

CVE-2022-36982

This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.101. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the AgentTaskHandle...

6.5CVSS7.5AI score0.73757EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.11 views

The vulnerability of the RPM package manager’s reading function allows a perpetrator to compromise data integrity.

The vulnerability of the RPM package manager’s reading function is related to improper verification of the cryptographic signature of data. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the data...

7.1CVSS6.7AI score0.00673EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.12 views

The vulnerability of the Pillow library for working with raster graphics lies in the reading of data beyond the allowed buffer limit. This allows attackers to compromise the integrity of the data and cause service failures.

The vulnerability of the Pillow library for working with raster graphics is related to improper handling of gaps in path names. Exploiting this vulnerability can allow a remote attacker to compromise data integrity and cause service failures...

9.4CVSS7.1AI score0.02879EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.10 views

The vulnerability of the Exiv2 metadata management library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created image file...

7.1CVSS6.7AI score0.01568EPSS
SaveExploits1References17Affected Software5
NVD
NVD
added 2023/03/27 10:15 p.m.67 views

CVE-2022-48361

The Always On Display AOD has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD theme resources...

5.3CVSS5.3AI score0.004EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/03/27 12:00 a.m.11 views

CVE-2022-48361

The Always On Display AOD has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD theme resources...

5.3AI score0.004EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.10 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

5.1CVSS5.1AI score0.00093EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.7 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

4.4CVSS5.1AI score0.00096EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.6 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

4.4CVSS5.1AI score0.00096EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.7 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

4.4CVSS5.1AI score0.00094EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.8 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

4.4CVSS5.1AI score0.00096EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.7 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

4.4CVSS5.1AI score0.00093EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.5 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

4.4CVSS5.1AI score0.00096EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.9 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...

4.4CVSS5.1AI score0.00096EPSS
SaveExploits0References2
Rows per page
Query Builder