Lucene search
+L

651 matches found

OSV
OSV
added 2022/08/10 8:16 p.m.5 views

CVE-2022-37006

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability...

7.5CVSS5.8AI score0.00477EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/10 8:16 p.m.4 views

CVE-2022-37006

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability...

7.5CVSS5.8AI score0.00477EPSS
SaveExploits0References3
Prion
Prion
added 2022/08/10 8:16 p.m.26 views

Design/Logic Flaw

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability...

5CVSS7.5AI score0.00477EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2022/08/09 8:11 p.m.31 views

CVE-2022-37006

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability...

7.7AI score0.00477EPSS
SaveExploits0References2
CVE
CVE
added 2022/08/09 8:11 p.m.72 views

CVE-2022-37006

Technical details (affected products, versions, root cause, or explicit fixes) are not publicly available in the provided connected documents. Monitor for updates from vendors and security advisories.

7.5CVSS7.5AI score0.00477EPSS
SaveExploits0References2Affected Software2
RedHat Linux
RedHat Linux
added 2022/08/09 12:23 p.m.14 views

mariadb: server crash at Field::set_default via specially crafted SQL statements

A flaw was found in MariaDB. The component, Field::setdefault, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

7.5CVSS7.3AI score0.02159EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.7 views

PT-2022-23751 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A permission control vulnerability exists in the network module. Successful exploitation of this issue may affect service availability. Recommendations: At the moment, there is no...

7.5CVSS7.5AI score0.00477EPSS
SaveExploits0References4
Broadcom
Broadcom
added 2022/07/29 12:0 a.m.53 views

BSA-2022-1694

Security Advisory ID : BSA-2022-1694 Component : Oracle Java SE Revision : 1.0 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 7u311, 8u301; Oracle GraalVM Enterprise Edition: 20.3.3 an...

3.1CVSS4.8AI score0.03599EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/06/03 12:0 a.m.9 views

The vulnerability of the lrzip.c component: the initialise_control function of the Irzip software, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lrzip.c component, specifically the initialisecontrol function of the Irzip software, arises due to an overflow in the dynamic memory buffer. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

10CVSS7.8AI score0.01897EPSS
SaveExploits1References6Affected Software3
Tenable Nessus
Tenable Nessus
added 2022/05/07 12:0 a.m.35 views

EulerOS Virtualization 3.0.2.0 : libwebp (EulerOS-SA-2022-1670)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The...

7.5CVSS7.2AI score0.01966EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/05/05 12:0 a.m.3 views

Adiscon Rsyslog 安全漏洞

Adiscon Rsyslog is a library for collecting syslogs from the German company Adiscon. A security vulnerability exists in Adiscon Rsyslog version 8.2204.0 and earlier versions, which stems from a heap buffer overflow in the module used to receive TCP syslogs when using octet-counted frames, which c...

8.1CVSS7AI score0.03933EPSS
SaveExploits0References35
BDU FSTEC
BDU FSTEC
added 2022/04/28 12:0 a.m.12 views

The vulnerability of the njs_function_frame_alloc() function in the njs interpreter of the nginx server allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the njsfunctionframealloc function in the njs interpreter of the nginx server is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of information...

10CVSS7.8AI score0.01591EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.12 views

The vulnerability of the Nginx Proxy Manager, a proxy server for managing hosts, arises from its lack of security measures to protect the structure of web pages. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Nginx web server proxy management server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

8.3CVSS5.5AI score0.71209EPSS
SaveExploits1References4Affected Software1
MSRC
MSRC
added 2022/04/05 11:41 p.m.158 views

Microsoft’s Response to CVE-2022-22965 Spring Framework

Summary Microsoft used the Spring Framework RCE, Early Announcement to inform analysis of the remote code execution vulnerability, CVE-2022-22965, disclosed on 31 Mar 2022. We have not to date noted any impact to the security of our enterprise services and have not experienced any degraded servic...

7.5CVSS2.3AI score0.99677EPSS
SaveExploits103
MSRC
MSRC
added 2022/04/05 7:0 a.m.65 views

Microsoft’s Response to CVE-2022-22965 Spring Framework

Summary Microsoft used the Spring Framework RCE, Early Announcement to inform analysis of the remote code execution vulnerability, CVE-2022-22965, disclosed on 31 Mar 2022. We have not to date noted any impact to the security of our enterprise services and have not experienced any degraded servic...

9.8CVSS9.2AI score0.99677EPSS
SaveExploits103
MSRC
MSRC
added 2022/04/05 7:0 a.m.51 views

Microsoft’s Response to CVE-2022-22965 Spring Framework

Summary Summary Microsoft used the Spring Framework RCE, Early Announcement to inform analysis of the remote code execution vulnerability, CVE-2022-22965, disclosed on 31 Mar 2022. We have not to date noted any impact to the security of our enterprise services and have not experienced any degrade...

7.5CVSS2.6AI score0.99677EPSS
SaveExploits103
Tenable Nessus
Tenable Nessus
added 2022/03/01 12:0 a.m.34 views

EulerOS 2.0 SP5 : libwebp (EulerOS-SA-2022-1275)

According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat fr...

7.5CVSS7.2AI score0.01966EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/25 7:15 p.m.2 views

CVE-2021-22489

There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability...

7.5CVSS7.1AI score0.00675EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/25 7:15 p.m.20 views

CVE-2021-22489

There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability...

7.5CVSS0.00675EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/25 7:15 p.m.5 views

CVE-2021-22489

There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability...

7.5CVSS7.1AI score0.00675EPSS
SaveExploits0References3Affected Software3
Rows per page
Query Builder