Lucene search
+L

1320 matches found

CNVD
CNVD
added 2022/08/25 12:0 a.m.19 views

Beijing Century Superstar Information Technology Development Co., Ltd.'s Learning Pass suffers from a stored XSS vulnerability

LearningTone is a course learning, knowledge dissemination and management sharing platform built on a microservice architecture. There is a stored XSS vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Learning Pass, which can be exploited b...

5.7AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/08/10 12:15 p.m.1 views

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

7.5CVSS5.8AI score0.00553EPSS
SaveExploits0References3
NVD
NVD
added 2022/08/10 12:15 p.m.23 views

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

7.5CVSS0.00553EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/10 12:15 p.m.12 views

Information disclosure

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

5CVSS7.4AI score0.00553EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/10 11:17 a.m.70 views

CVE-2022-34659

The CVE-2022-34659 vulnerability affects Simcenter STAR-CCM+ (all versions) when the Power-on-Demand public license server is used. The issue is an information disclosure where applications expose the user, host, and display name of users, enabling an attacker to retrieve this data. Mitigations f...

7.5CVSS7.3AI score0.00553EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/08/10 11:17 a.m.29 views

CVE-2022-34659

A vulnerability has been identified in Simcenter STAR-CCM+ All versions only if the Power-on-Demand public license server is used. Affected applications expose user, host and display name of users, when the public license server is used. This could allow an attacker to retrieve this information...

6.9CVSS7.6AI score0.00553EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/10 12:0 a.m.7 views

Siemens Simcenter STAR-CCM+ 信息泄露漏洞

Simcenter STAR-CCM is a multiphysics computational fluid dynamics CFD software used to simulate products operating under real-world conditions. an information disclosure vulnerability exists in Siemens Simcenter STAR-CCM due to the use of a public license server where the affected application...

7.5CVSS6.1AI score0.00553EPSS
SaveExploits0References4
ICS
ICS
added 2022/08/09 12:0 a.m.43 views

Siemens Simcenter STAR-CCM+

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Simcenter STAR-CCM+ Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Simcenter STAR-CCM+ contains an information disclosure vulnerability...

7.5CVSS7.6AI score0.00553EPSS
SaveExploits0References11
CNVD
CNVD
added 2022/07/14 12:0 a.m.17 views

Beijing Century Super Star Information Technology Development Co., Ltd. learning through the quality of engineering platform there are logical flaws vulnerabilities

Beijing Century Super Star Information Technology Development Co., Ltd. is an education informatization enterprise driven by technology, product and service innovation. A logic flaw vulnerability exists in the Beijing Century Super Star Information Technology Development Limited Liability Company...

6.5AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2022/07/11 1:0 a.m.11 views

shooting-starphoto.com Cross Site Scripting vulnerability OBB-2758014

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNVD
CNVD
added 2022/06/01 12:0 a.m.16 views

Information Disclosure Vulnerability in UTS Unified Threat Probe of Green Alliance Technology Group Co.

UTS Unified Threat Probe is to realize the collection and parsing work of traffic data, decoding, uploading and original traffic pcap data retention layer by layer, and support intrusion detection, virus detection and star sucking engine, etc., to provide unified threat detection capability. Gree...

6.6AI score
SaveExploits0
Rockylinux
Rockylinux
added 2022/05/17 8:15 a.m.12 views

new packages: star

An update is available for star. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

2AI score
SaveExploits0
Trellix
Trellix
added 2022/05/17 12:0 a.m.7 views

Get to Know Steve Povolny

Meet Steve Povolny Head of Advanced Threat Research for Trellix Threat Labs By Michael Alicea · May 17, 2022 At Trellix, we celebrate and champion our people. This week, I sat down with Steve Povolny, Head of Advanced Threat Research for Trellix Threat Labs. As he is one of the leading...

6.8AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2022/05/13 9:39 a.m.8 views

staralliancemovies.com Cross Site Scripting vulnerability OBB-2616510

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Kitploit
Kitploit
added 2022/04/16 12:30 p.m.184 views

EDRSandblast - Tool That Weaponize A Vulnerable Signed Driver To Bypass EDR Detections And LSASS Protections

EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections Kernel callbacks and ETW TI provider and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring. As of release, combination of userland...

7.8CVSS7.6AI score0.18188EPSS
SaveExploits5References8
CNVD
CNVD
added 2022/03/09 12:0 a.m.20 views

Siemens Simcenter STAR-CCM Viewer Scene File Parsing Vulnerability

Simcenter STAR-CCM Viewer is a standalone scene and episode viewer for Simcenter STAR-CCM.Siemens Simcenter STAR-CCM Viewer has a security vulnerability that could be exploited by an attacker to execute code in the context of the current process...

7.8CVSS4.9AI score0.00814EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/08 12:15 p.m.5 views

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.2AI score0.00814EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/08 12:15 p.m.25 views

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS0.00814EPSS
SaveExploits0References1
Prion
Prion
added 2022/03/08 12:15 p.m.13 views

Memory corruption

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

6.8CVSS7.7AI score0.00814EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/08 11:31 a.m.28 views

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

7.9AI score0.00814EPSS
SaveExploits0References1
Rows per page
Query Builder