Lucene search
+L

462 matches found

BDU FSTEC
BDU FSTEC
added 2021/11/15 12:0 a.m.14 views

The vulnerability of the print spooler driver in Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Windows Print Spooler in operating systems related to the print queue handler is associated with information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

10CVSS7.6AI score0.02895EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/11/09 5:31 p.m.51 views

Moderate: Red Hat Security Advisory: json-c security and bug fix update

An update for json-c is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

7.8CVSS6.8AI score0.01888EPSS
SaveExploits1References3
Rockylinux
Rockylinux
added 2021/11/09 1:10 p.m.31 views

json-c security and bug fix update

An update is available for json-c. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list JSON-C implements a reference counting object model that allows users to easil...

7.8CVSS8AI score0.01888EPSS
SaveExploits1
Fedora
Fedora
added 2021/10/29 11:26 p.m.30 views

[SECURITY] Fedora 35 Update: jdom-1.1.3-27.fc35

JDOM is, quite simply, a Java representation of an XML document. JDOM provides a way to represent that document for easy and efficient reading, manipulation, and writing. It has a straightforward API, is a lightweight and fast, and is optimized for the Java programmer. It's an alternative to DOM...

7.5CVSS1.8AI score0.19442EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2021/09/08 12:0 a.m.9 views

Vulnerability of services for the NFS ONCRPC XDR driver on Microsoft Windows operating systems, allowing a hacker to execute arbitrary code.

The vulnerability of services for the NFS ONCRPC XDR driver on Microsoft Windows is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...

10CVSS8AI score0.10326EPSS
SaveExploits0References3
OSV
OSV
added 2021/08/25 9:0 p.m.3 views

GHSA-P5W9-856P-8Q4G Assumed memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

7AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2021/08/25 9:0 p.m.14 views

Assumed memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

2.5AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.26 views

socket2 invalidly assumes the memory layout of std::net::SocketAddr

The socket2 crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

5.5CVSS5.5AI score0.00398EPSS
SaveExploits1References6Affected Software2
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.31 views

mio invalidly assumes the memory layout of std::net::SocketAddr

The mio crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

5.5CVSS5.5AI score0.00389EPSS
SaveExploits1References6Affected Software1
RedHat Linux
RedHat Linux
added 2021/08/24 12:50 p.m.6 views

python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided within Python. Applications that use ctypes without carefully validating the input passed to it may be vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack an...

9.8CVSS7.2AI score0.1885EPSS
SaveExploits1References4
OSV
OSV
added 2021/08/12 6:15 p.m.4 views

CVE-2021-26433

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...

7.5CVSS7.1AI score0.03302EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/12 6:15 p.m.3 views

CVE-2021-36933

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...

7.5CVSS7.1AI score0.03241EPSS
SaveExploits0References2Affected Software18
BDU FSTEC
BDU FSTEC
added 2021/08/12 12:0 a.m.8 views

The vulnerability of the Windows LSA component in the Windows Server operating system allows attackers to perform spear-phishing attacks.

The vulnerability of the Windows LSA component in the Windows Server operating system is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

8.5CVSS7.2AI score0.65543EPSS
SaveExploits4References5
CNNVD
CNNVD
added 2021/08/12 12:0 a.m.15 views

Google TensorFlow 代码问题漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow versions prior to 2.6.0. The vulnerability stems from the MLIR optimization of the L2NormalizeReduceAxis operator. An attacker can exploit the vulnerability to cause a...

7.8CVSS5.3AI score0.00165EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/08/06 12:0 a.m.6 views

The vulnerability of the Mozilla Firefox browser, related to information representation errors, allows attackers to perform spear-phishing attacks.

The vulnerability of the Mozilla Firefox browser is related to errors in the object model representation of documents. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

6.4CVSS6.7AI score0.00965EPSS
SaveExploits1References8Affected Software3
0day.today
0day.today
added 2021/06/17 12:0 a.m.66 views

Linux/x86 Custom Shellcode ASCII And-Sub Encoder

/ Title: Linux/x86 - Custom Shellcode ASCII And-Sub Encoder Date: 29.03.2021 Author: Xenofon Vassilakopoulos github : https://github.com/xen0vas/ASCII-AND-SUB-Encoder gcc -m32 sub.c -o sub Usage : ./sub -s \x41\xff\x41\x41 -b \x0a\x0d\x2f\x3a\x3f\x40\x80\x81\x82 / include include include include...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.8 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

8.5CVSS7AI score0.01812EPSS
SaveExploits1References4
CNVD
CNVD
added 2021/06/01 12:0 a.m.6 views

Unspecified Vulnerability in IBM WebSphere Exteme Scale

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. A security vulnerability exists in IBM WebSphere Exteme Scale Liberty, which can be exploited by a remote attacker to obtain...

6.2AI score
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/27 12:0 a.m.6 views

IBM WebSphere Exteme Scale 安全漏洞

IBM WebSphere Exteme Scale is a resilient, highly scalable in-memory data grid from IBM USA. It can provide predictable responsiveness to meet exponential demands on data. A security vulnerability exists in IBM WebSphere Exteme Scale Liberty, which can be exploited by a remote attacker to obtain...

5.6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/05/26 12:0 a.m.11 views

The vulnerability of Microsoft Exchange Server servers, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

6.5CVSS6AI score0.02627EPSS
SaveExploits0References4
Rows per page
Query Builder