Lucene search
+L

2018 matches found

OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2017:2168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.0488EPSS
SaveExploits1References4
OSV
OSV
added 2021/06/08 5:15 p.m.25 views

CVE-2021-32673

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

9.8CVSS9.6AI score
SaveExploits0References4
NVD
NVD
added 2021/06/08 5:15 p.m.53 views

CVE-2021-32673

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue...

9.8CVSS0.01941EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/06/04 12:00 a.m.11 views

bubble fireworks 数据伪造问题漏洞

bubble is an application. It is a Bubble Tea TUI component. A security vulnerability exists in previous versions of bubble fireworks 2021.BUILD-SNAPSHOT, which stems from the fxbin/bubble-fireworks package not properly verifying the signature of JSON web tokens, which can be exploited by an...

7.5CVSS5.6AI score0.00595EPSS
SaveExploits0References1
Prion
Prion
added 2021/05/06 5:15 p.m.24 views

Code injection

An issue exists on NightOwl WDB-20-V2 WDB-20-V220190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via th...

5CVSS7.8AI score0.01275EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/05/06 12:00 a.m.14 views

Night Owl WDB-20-V2 访问控制错误漏洞

Night Owl WDB-20-V2 is a webcam from Night Owl UK. A security vulnerability exists in the NightOwl WDB-20-V2 WDB-20-V2 20190314 device that allows an unauthenticated user to obtain a snapshot from the doorbell camera via the snapshot URI...

7.5CVSS7.3AI score0.01275EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2021/05/05 7:40 a.m.12 views

Moderate: Red Hat Bug Fix Advisory: samba bug fix update

Updated samba packages that fix one bug and adds an enhancement are now available for Red Hat Gluster Storage 3.5 on Red Hat Enterprise Linux 8. Red Hat Gluster Storage is software only scale-out storage solution that provides flexible and affordable unstructured data storage. It unifies data...

10CVSS7.1AI score0.99389EPSS
SaveExploits76References1
Virtuozzo
Virtuozzo
added 2021/05/04 12:00 a.m.60 views

Virtuozzo Hybrid Server 7.5 Update 1 (7.5.1-730)

Virtuozzo Hybrid Server 7.5 Update 1 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1160.21.1.vz7.174.13. Vulnerability id: PSBM-123539 Revert ibpb patch in libvirt. Vulnerability id: PSBM-121318 firewalld not working in CentOS 8...

6.8AI score
SaveExploits0
UbuntuCve
UbuntuCve
added 2021/04/30 12:00 a.m.33 views

CVE-2021-21233

Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.5AI score0.01317EPSS
SaveExploits0References1
Citrix
Citrix
added 2021/04/27 12:00 a.m.9 views

Hotfix XS82E023 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| None Content live patchable| No Baselines for Live Patch| N/A Revision History| Published on Apr 27, 2021...

7.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2021/03/19 7:00 p.m.53 views

CVE-2021-27358

A flaw was found in Grafana. The snapshot feature allows unauthenticated remote attackers to trigger a denial of service DoS via a remote API call if anonymous access is enabled. The highest threat from this vulnerability is to system availability...

7.5CVSS5.7AI score0.83042EPSS
SaveExploits0References4
NVD
NVD
added 2021/03/18 8:15 p.m.32 views

CVE-2021-27358

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set...

7.5CVSS0.83042EPSS
SaveExploits0References4
OSV
OSV
added 2021/03/18 8:15 p.m.46 views

CVE-2021-27358

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set...

7.5CVSS6.8AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2021/03/18 8:15 p.m.34 views

CVE-2021-27358

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set...

7.5CVSS7.1AI score0.83042EPSS
SaveExploits0References3
OSV
OSV
added 2021/03/18 8:15 p.m.17 views

UBUNTU-CVE-2021-27358

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set...

7.5CVSS7.2AI score0.83042EPSS
SaveExploits0References4
Prion
Prion
added 2021/03/18 8:15 p.m.34 views

Design/Logic Flaw

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set...

5CVSS7.4AI score0.83042EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2021/03/18 7:43 p.m.414 views

CVE-2021-27358

Grafana 6.7.3–7.4.1 is affected by CVE-2021-27358 via the snapshot feature. An unauthenticated remote attacker can trigger a Denial of Service by making a remote API call if a common configuration is set. Remediation: upgrade to Grafana 7.4.2 or later (fix released in 7.4.2).

7.5CVSS7.3AI score0.83042EPSS
SaveIn wildExploits0References4Affected Software1
Cvelist
Cvelist
added 2021/03/18 7:43 p.m.33 views

CVE-2021-27358

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set...

7.7AI score0.83042EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/03/15 12:00 a.m.19 views

Synology DiskStation Manager Out-of-Bounds Read Vulnerability

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. An out-of-bounds read vulnerability exists in the iscsisnapshotcommcore modul...

9.8CVSS7.5AI score0.03134EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/12 7:15 a.m.9 views

CVE-2021-27646

Use After Free vulnerability in iscsisnapshotcommcore in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests...

9.8CVSS7.6AI score0.03786EPSS
SaveExploits0References3
Rows per page
Query Builder