Lucene search
+L

3826 matches found

NVD
NVD
•added 2021/03/11 10:15 p.m.•30 views

CVE-2021-28153

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

5.3CVSS0.02708EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2021/03/11 10:15 p.m.•45 views

CVE-2021-28153

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

5.3CVSS6.8AI score0.02708EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/03/09 4:15 p.m.•20 views

CVE-2020-35451

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation...

4.7CVSS6.7AI score
SaveExploits0References2
Prion
Prion
•added 2021/03/09 4:15 p.m.•34 views

Race condition

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation...

1.9CVSS4.8AI score0.00434EPSS
SaveExploits0References2Affected Software1
Microsoft KB
Microsoft KB
•added 2021/03/09 4:00 p.m.•113 views

Description of the security update for PowerPoint 2016: March 9, 2021 (KB4493224)

None None...

7.8CVSS7AI score0.04302EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2021/03/09 4:00 p.m.•60 views

Description of the security update for SharePoint Server 2010: March 9, 2021 (KB3101541)

Description of the security update for SharePoint Server 2010: March 9, 2021 KB3101541 Summary This security update resolves a Microsoft SharePoint Server Remote Code Execution Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-27076...

8.8CVSS7.5AI score0.15168EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/03/09 3:20 p.m.•41 views

CVE-2020-35451 Oozie local privilege escalation

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation...

4.7AI score0.00434EPSS
SaveExploits0References2
Mend
Mend
•added 2021/03/09 3:20 p.m.•5 views

CVE-2020-35451

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation...

5.7CVSS0.00434EPSS
SaveExploits0References3
CVE
CVE
•added 2021/03/09 3:20 p.m.•68 views

CVE-2020-35451

CVE-2020-35451 affects Apache Oozie (OozieSharelibCLI component). A race condition during the creation of Oozie sharelib in versions prior to 5.2.1 allows a malicious attacker to replace files in Oozie’s sharelib while it is being created. The core issue is concurrent access to shared resources w...

4.7CVSS4.7AI score0.00434EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•19 views

Apache Oozie 竞争条件问题漏洞

Apache Oozie is an Apache Apache open source application. Provides a workflow scheduler system for managing Apache Hadoop job functions. Apache Oozie in version 5.2.1 before the existence of a security vulnerability , the vulnerability stems from the network system or product in the operation of...

4.7CVSS5.7AI score0.00434EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/09 12:00 a.m.•11 views

CVE-2020-35451: Insecure Temporary File

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation...

4.7CVSS5.8AI score0.00434EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
•added 2021/03/09 12:00 a.m.•31 views

KB5000859: Servicing stack update for Windows 10, version 1809: March 9, 2021

None None...

6.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2021/03/04 5:37 p.m.•37 views

CVE-2021-23128 [20210302] - Core - Potential Insecure FOFEncryptRandval

An issue was discovered in Joomla! 3.2.0 through 3.9.24. The core shipped but unused randval implementation within FOF FOFEncryptRandval used an potential insecure implemetation. That has now been replaced with a call to 'randombytes' and its backport that is shipped within randomcompat...

9.4AI score0.0138EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/03 12:00 a.m.•4 views

PT-2021-3222

Name of the Vulnerable Software and Affected Versions LODSMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the update display module of the LODSMAN:PLM system. Exploitation of this issue could allow an attacker to execute...

6.8CVSS6.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/03 12:00 a.m.•3 views

PT-2021-3223

Name of the Vulnerable Software and Affected Versions LODSMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the application server load optimization service, which can be exploited to execute arbitrary code by replacing dll...

6.8CVSS6.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/03 12:00 a.m.•1 views

PT-2021-3208

Name of the Vulnerable Software and Affected Versions LOOTSMAN:PLM affected versions not specified Description The issue is related to the automatic data synchronization module "ЛОЦМАН Планировщик синхронизации" of the LOOTSMAN:PLM system, which allows for unlimited upload of dangerous file types...

6.8CVSS6.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/03 12:00 a.m.•1 views

PT-2021-3200

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to the "ЛОЦМАН Дизайнер форм" module in the LOTCMAN:PLM system, which allows for unlimited upload of dangerous file types. This can be exploited to execute arbitrary...

6.8CVSS6.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/03 12:00 a.m.•3 views

PT-2021-3205

Name of the Vulnerable Software and Affected Versions LOCMAN Клиент affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the LOCMAN Клиент module of the LOCMAN:PLM system. Exploitation of this issue could allow an attacker to execute...

6.8CVSS6.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/03 12:00 a.m.•3 views

PT-2021-3214

Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to a data exchange module vulnerability in the "ЛОЦМАН WorkFlow" subsystem, which allows for unlimited upload of dangerous file types between different "ЛОЦМАН WorkFlo...

6.8CVSS6.6AI score
SaveExploits0References1
Citrix
Citrix
•added 2021/02/25 12:00 a.m.•181 views

Netscaler Notice of Status Change Announcement for Classic Policy Based Features and Functionalities

Citrix Systems, Inc. announces a Notice of Status Change NSC for Citrix ADC Classic policy-based features and functionalities. The dates and milestones provided are in accordance with stated End of Life/End of Support policies for Citrix Systems, Inc. Citrix ADC Features & Functionalities Affecte...

7AI score
SaveExploits0
Rows per page
Query Builder