Lucene search
+L

2142 matches found

OSV
OSV
added 2021/06/30 12:38 a.m.44 views

UVI-2021-1001081 x86/ioremap: Map EFI-reserved memory as encrypted for SEV

x86/ioremap: Map EFI-reserved memory as encrypted for SEV This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/30 12:32 a.m.17 views

GSD-2021-1001000 x86/ioremap: Map EFI-reserved memory as encrypted for SEV

x86/ioremap: Map EFI-reserved memory as encrypted for SEV This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/06/30 12:32 a.m.9 views

UVI-2021-1001000 x86/ioremap: Map EFI-reserved memory as encrypted for SEV

x86/ioremap: Map EFI-reserved memory as encrypted for SEV This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.8 views

Rockwell Automation ISaGRAF 路径遍历漏洞

Rockwell Automation ISaGRAF is an automation software technology for creating integrated automation solutions from Rockwell Automation. It is designed to be scalable and portable and is suitable for developing small controllers and large distributed automation systems. A security vulnerability...

9.8CVSS8.6AI score0.06208EPSS
SaveExploits0References9
OSV
OSV
added 2021/04/13 3:18 p.m.27 views

GHSA-43CH-2H55-2VJ7 Server-Side Request Forgery in private-ip

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote...

9.8CVSS9.7AI score0.02949EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2021/04/13 3:18 p.m.47 views

Server-Side Request Forgery in private-ip

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote...

9.8CVSS9.4AI score0.02949EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2021/02/19 8:7 p.m.82 views

CVE-2020-27785

CVE-2020-27785 is a reservation duplicate of CVE-2020-29074. Connected documents provide concrete details for the underlying issue in x11vnc 0.9.16: the code uses IPC_CREAT|0777 when creating shared memory segments (shmget), allowing access by actors other than the current user. This is the root ...

8.5AI score
SaveExploits0
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.9 views

Qualcomm Wlan Firmware Security Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Wlan Firmware, which is a denial of service in FTMR due to a mishandled error that sets a reserved bit in the FTM parameter IE...

7.8CVSS7.1AI score0.00605EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/01/26 12:0 a.m.34 views

CVE-2021-26134

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Recent assessments: femkebolle at November 22, 2023 3:56pm UTC reported: As ...

9.8CVSS9.9AI score0.99999EPSS
SaveIn wildExploits76References1
OSV
OSV
added 2020/11/23 9:15 p.m.23 views

CVE-2020-28360

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote...

9.8CVSS7.7AI score
SaveExploits0References2
Cvelist
Cvelist
added 2020/11/23 8:33 p.m.49 views

CVE-2020-28360

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote...

9.8AI score0.02949EPSS
SaveExploits0References2
CVE
CVE
added 2020/11/23 8:33 p.m.59 views

CVE-2020-28360

CVE-2020-28360 describes an SSRF vulnerability in the npm package private-ip (versions 1.0.5 and earlier). The root cause is an insufficient RegEx filter for reserved IP ranges, allowing an attacker to craft requests to ARIN/other reserved ranges, which can lead to remote server-side resource req...

9.8CVSS9.7AI score0.02949EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2020/11/23 12:0 a.m.12 views

Frenchbread Private-ip Code Issue Vulnerability

Frenchbread Private-ip is a Js codebase for checking if an Ip is private by Frenchbread individual developers. A security vulnerability exists in the Frenchbread Private-ip package prior to v1.0.5 that stems from insufficient regular expressions to adequately filter the reserved IP range, resulti...

9.8CVSS7.7AI score0.02949EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2020/11/10 7:15 p.m.2 views

CVE-2020-27165

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-28050. Reason: This candidate is a reservation duplicate of CVE-2020-28050. Notes: All CVE users should reference CVE-2020-28050 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

9.1CVSS5.4AI score0.04951EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2020/11/10 8:0 a.m.3 views

ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.

...

5.5CVSS8.4AI score0.00416EPSS
SaveExploits0
OSV
OSV
added 2020/10/15 7:15 p.m.4 views

CVE-2020-15792

A vulnerability has been identified in Desigo Insight All versions. The web service does not properly apply input validation for some query parameters in a reserved area. This could allow an authenticated attacker to retrieve data via a content-based blind SQL injection attack...

4.3CVSS5.8AI score0.00995EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/10/15 2:59 p.m.27 views

CVE-2020-11646 GateManager Log Information Disclosure Vulnerability

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view log information reserved for other users...

4.3CVSS4.4AI score0.01011EPSS
SaveExploits0References2
Akamai Blog
Akamai Blog
added 2020/10/12 10:0 p.m.68 views

Three Cloud-First Akamai Initiatives to Support Your Cloud Journey

61% of organizations plan to focus on cloud migration this year. 93% have a multi-cloud strategy.1 This means that on average your organization is using 2.2 public clouds, multiplying your complexity and your costs. While the cloud has delivered on a lot of promises, it isn't getting simpler or...

7.1AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2020/06/05 8:30 p.m.2 views

CVE-2020-8451

The reserved CVE was never used...

5.3AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/06/05 12:0 a.m.16 views

CVE-2017-1135

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value:...

5.6AI score
SaveIn wildExploits0References1
Rows per page
Query Builder