Lucene search
K

391 matches found

Prion
Prion
added 2023/07/31 8:15 p.m.14 views

Directory traversal

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal...

5CVSS5.3AI score0.00561EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/31 12:0 a.m.8 views

CVE-2022-42182

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal...

7.1AI score0.00561EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/07/31 12:0 a.m.3 views

PT-2023-14069 · Precisely · Precisely Spectrum Spatial Analyst

Name of the Vulnerable Software and Affected Versions: Precisely Spectrum Spatial Analyst version 20.01 Description: The issue is related to Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external resources. Thi...

9.1CVSS8.9AI score0.00236EPSS
Exploits1References5
Cvelist
Cvelist
added 2023/07/31 12:0 a.m.12 views

CVE-2022-42183

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery SSRF...

9.4AI score0.00236EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/07/31 12:0 a.m.12 views

CVE-2022-42183

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery SSRF...

7.2AI score0.00236EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/07/31 12:0 a.m.2 views

Precisely Spectrum Spatial Analyst 路径遍历漏洞

Precisely Spectrum Spatial Analyst is a Geographic Information System GIS solution from Precisely, Inc. A security vulnerability exists in Precisely Spectrum Spatial Analyst version 20.01 that stems from vulnerability to directory traversal attacks...

5.3CVSS5.7AI score0.00561EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/07/31 12:0 a.m.3 views

Precisely Spectrum Spatial Analyst 代码问题漏洞

Precisely Spectrum Spatial Analyst is a Geographic Information System GIS solution from Precisely, Inc. A security vulnerability exists in Precisely Spectrum Spatial Analyst version 20.01 that stems from vulnerability to directory traversal attacks...

9.1CVSS8.2AI score0.00236EPSS
Exploits1References3
CVE
CVE
added 2023/07/31 12:0 a.m.38 views

CVE-2022-42182

CVE-2022-42182 affects Precisely Spectrum Spatial Analyst 20.01. The provided connected sources identify a vulnerability to Directory Traversal in this software, but do not include concrete details on root cause specifics, affected components beyond the product/version, exploit scenarios, or a pu...

5.3CVSS5.3AI score0.00561EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/07/31 12:0 a.m.9 views

CVE-2022-42182

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal...

5.6AI score0.00561EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/07/31 12:0 a.m.3 views

PT-2023-14068 · Precisely · Precisely Spectrum Spatial Analyst

Name of the Vulnerable Software and Affected Versions: Precisely Spectrum Spatial Analyst version 20.01 Description: The issue is related to Directory Traversal. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where thi...

5.3CVSS5.1AI score0.00561EPSS
Exploits1References5
CVE
CVE
added 2023/07/31 12:0 a.m.33 views

CVE-2022-42183

CVE-2022-42183 refers to Precisely Spectrum Spatial Analyst 20.01 being vulnerable to Server-Side Request Forgery (SSRF). The primary trusted sources indicate an SSRF issue in the product version 20.01, with CVSSv3.1 metrics showing a high impact (base score 9.1) affecting confidentiality and int...

9.1CVSS9.1AI score0.00236EPSS
Exploits1References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/08 10:57 a.m.2 views

Malicious code in com.unity.xrtools.spatial-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis efa5d123e10b0da3ed7e7898101f41654aa13a572def7acb40b838e0ef88e74b The OpenSSF Package Analysis project identified 'com.unity.xrtools.spatial-hash' @ 2.0.0 npm as malicious. It is considered malicious because: -...

6.9AI score
Exploits0
NCSC
NCSC
added 2023/04/19 12:0 a.m.5 views

Vulnerabilities fixed in Oracle Database Server

Vulnerabilities have been fixed in Oracle Database Server. The vulnerabilities allow a malicious party to carry out attacks execute attacks that lead to a denial-of-service DoS or manipulation of data. Oracle has fixed vulnerabilities in the following products: - Oracle Database Server - Oracle...

9.8CVSS6.3AI score0.93849EPSS
Exploits9
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/06 6:35 p.m.23 views

Security Bulletin: IBM Informix Dynamic Server is affected when a specific function in the Spatial Datablade is called with an out-of-range parameter

Summary IBM Informix Dynamic Server could crash when a specific function is called with an out-of-range parameter within the Spatial Datablade. A user would need access to the server and the ability to execute arbitrary sql to call this function. If you ARE NOT USING the spatial technology, you c...

7.8CVSS7.7AI score0.00041EPSS
Exploits0Affected Software1
OSV
OSV
added 2023/03/01 3:15 p.m.0 views

DEBIAN-CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.3AI score0.00038EPSS
Exploits1References1
OSV
OSV
added 2023/03/01 3:15 p.m.1 views

UBUNTU-CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.1AI score0.00038EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/03/01 12:0 a.m.2 views

libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in libde265 version v1.0.10, which stems from a heap-based buffer overflow found in the derivespatiallumavectorprediction method of the motion.cc file...

7.8CVSS7.3AI score0.00038EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2023/03/01 12:0 a.m.29 views

CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.3AI score0.00038EPSS
Exploits1
Cvelist
Cvelist
added 2023/03/01 12:0 a.m.20 views

CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8AI score0.00038EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.2 views

SUSE CVE-2012-0552

Unspecified vulnerability in the Oracle Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

9CVSS6.2AI score0.01012EPSS
Exploits0References4
Rows per page
Query Builder