Lucene search
+L

3925 matches found

BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•15 views

The vulnerability of the Junos operating system’s jdhcpd daemon, which allows a hacker to trigger an emergency shutdown of the application.

The vulnerability of the jdhcpd daemon in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an emergency shutdown of the application using a specially crafted DHCPv6 packet...

7.8CVSS7.2AI score0.01044EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•47 views

The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a attacker to trigger an emergency shutdown of the kernel’s memory dump process.

The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a failure in the kernel’s memory dump process due to receiving an incorrect DHCPv6 packet...

7.8CVSS7.4AI score0.01276EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•19 views

The vulnerability of the Junos operating system’s kernel allows a attacker to trigger an emergency shutdown of the application.

The vulnerability of the Junos operating system’s kernel is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an unexpected termination of the application...

7.8CVSS7.2AI score0.01062EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
•added 2020/12/15 3:06 p.m.•17 views

kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt

A flaw was found in the Linux kernel. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leadi...

5.5CVSS6.5AI score0.00416EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2020/12/14 1:16 a.m.•45 views

CVE-2020-26959

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...

8.8CVSS2.7AI score0.01297EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2020/12/11 12:00 a.m.•29 views

PowerChute Business Edition < 9.1 RCE

Improper Input Validation vulnerability exists in the PowerChute Business Edition tool before version 9.1, which could cause remote code execution when a script is executed during a shutdown event. Note that Nessus has not tested for these issues but has instead relied only on the application's...

8.8CVSS8.8AI score0.02273EPSS
SaveExploits0References2
OSV
OSV
•added 2020/12/09 5:15 p.m.•17 views

CVE-2020-26829

SAP NetWeaver AS JAVA P2P Cluster Communication, versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. ...

10CVSS7.4AI score0.04765EPSS
SaveExploits1References4
NVD
NVD
•added 2020/12/09 1:15 a.m.•25 views

CVE-2020-26959

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...

8.8CVSS8.3AI score0.01297EPSS
SaveExploits0References4
OSV
OSV
•added 2020/12/09 1:15 a.m.•2 views

DEBIAN-CVE-2020-26959

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...

8.8CVSS8AI score0.01297EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/09 1:15 a.m.•21 views

Memory corruption

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...

6.8CVSS8.1AI score0.01297EPSS
SaveExploits0References4Affected Software3
AlpineLinux
AlpineLinux
•added 2020/12/09 12:22 a.m.•64 views

CVE-2020-26959

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...

8.8CVSS8.6AI score0.01297EPSS
SaveExploits0
CVE
CVE
•added 2020/12/09 12:22 a.m.•317 views

CVE-2020-26959

CVE-2020-26959 is a use-after-free in the WebRequestService during browser shutdown, potentially enabling memory corruption and a crash in Firefox/Thunderbird prior to the fixed versions. Connected advisories confirm this affects Firefox &lt;83, Firefox ESR &lt;78.5, and Thunderbird

8.8CVSS8.3AI score0.01297EPSS
SaveExploits0References4Affected Software3
Debian CVE
Debian CVE
•added 2020/12/09 12:22 a.m.•58 views

CVE-2020-26959

During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...

8.8CVSS9.5AI score0.01297EPSS
SaveExploits0
CNNVD
CNNVD
•added 2020/12/08 12:00 a.m.•22 views

Multiple Qualcomm Products Resource Management Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way to miniaturize circuits primarily semiconductor devices, but also passive components, etc. and are manufactured from time to time on the surface of semiconductor wafers. A resource management error vulnerability exists in multiple...

7.2CVSS6.4AI score0.00208EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2020/12/08 12:00 a.m.•25 views

SAP Netweaver 授权问题漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An authorization issue vulnerability exists in SAP Netweaver AS JAVA P2P Cluster Communication versions 7.11,...

10CVSS7.3AI score0.04765EPSS
SaveExploits1References7
Veracode
Veracode
•added 2020/12/06 4:06 a.m.•25 views

Arbitrary Code Execution

firejail is vulnerable to arbitrary code execution. The library does not properly handle the shutdown option in src/firejail/shutdown.c, allowing truncation of the firejail binary on the host by running exploit code inside a firejail which may lead to termination of the sandbox...

8.1CVSS2.6AI score0.02024EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2020/12/03 5:15 p.m.•13 views

CVE-2020-25711

A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role...

6.5CVSS6.6AI score
SaveExploits0References2
Mend
Mend
•added 2020/12/03 12:00 a.m.•3 views

CVE-2020-25711

A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role...

7CVSS0.0108EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/03 12:00 a.m.•7 views

CVE-2020-25711: Missing Authorization

A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role...

6.5CVSS5.7AI score0.0108EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/12/03 12:00 a.m.•18 views

PT-2020-16169 · Red Hat · Infinispan

Name of the Vulnerable Software and Affected Versions: infinispan version 10 Description: A flaw was found in the infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authorization is enabled, any user with authentication...

6.5CVSS6.3AI score0.0108EPSS
SaveExploits0References9
Rows per page
Query Builder