Lucene search
+L

5580 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.13 views

The vulnerability of the built-in Wi-Fi router software from NETGEAR, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from insufficient measures taken to protect the website structure. This allows attackers to execute cross-site scripting attacks.

The vulnerability of NETGEAR Wi-Fi router software models such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 is related to the lack of security measures for website structures. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

6.5CVSS5.3AI score0.00418EPSS
SaveExploits0References3Affected Software15
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.6 views

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to carry out cross-site scripting attacks...

6.8CVSS5.7AI score0.00539EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.7 views

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to carry out cross-site scripting attacks...

5.6CVSS5.3AI score0.00565EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.8 views

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to carry out cross-site scripting attacks...

6.8CVSS5.7AI score0.00539EPSS
SaveExploits0References3Affected Software1
Rapid7 Blog
Rapid7 Blog
added 2022/01/20 2:41 p.m.16 views

Is the Internet of Things the Next Ransomware Target?

Ransomware attacks over the last couple years have been traumatic, impacting nearly every business sector and costing billions of dollars. The targets have mostly been our data: steal it, encrypt it, and then charge us a fee to get it back. Over the last several years, there's been concern across...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:0 a.m.10 views

The vulnerability of the CIS library for asynchronous DNS requests allows attackers to access confidential data, compromise its integrity, and cause service failures. This vulnerability stems from the lack of measures taken to protect the structure of web pages.

The vulnerability of the CIS library for asynchronous DNS requests is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service interruptions...

6.8CVSS6.5AI score0.02617EPSS
SaveExploits1References12Affected Software6
Microsoft CVE
Microsoft CVE
added 2022/01/19 8:0 a.m.3 views

Denial of service due to infinite loop in Image::printIFDStructure

...

5.5CVSS6.5AI score0.01104EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2022/01/19 8:0 a.m.5 views

Denial of service due to infinite loop in JpegBase::printStructure (#2)

...

5.5CVSS6.5AI score0.01051EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2022/01/19 8:0 a.m.5 views

Out-of-bounds read in Exiv2::Jp2Image::printStructure

...

5.5CVSS6.5AI score0.00984EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.8 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...

6.1CVSS6.7AI score0.01105EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.7 views

The vulnerability of elements in iframe modules for web page rendering in WebKitGTK and WPE WebKit allows attackers to exploit it to compromise the integrity of web page data. This vulnerability is related to the lack of protection for the structure of web pages.

The vulnerability of elements in iframe modules for displaying web pages in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...

6.1CVSS6.7AI score0.01068EPSS
SaveExploits0References8Affected Software5
NVD
NVD
added 2022/01/14 8:15 p.m.12 views

CVE-2021-45060

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

9.3CVSS0.08618EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/14 8:15 p.m.15 views

CVE-2021-44715

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

5.5CVSS0.14701EPSS
SaveExploits1References1
NVD
NVD
added 2022/01/14 8:15 p.m.16 views

CVE-2021-44742

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

5.5CVSS0.05856EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/14 8:15 p.m.24 views

Design/Logic Flaw

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

9.3CVSS7.5AI score0.08618EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
added 2022/01/14 7:5 p.m.25 views

CVE-2021-44742 Adobe Reader Out-of-bounds Read Remote Code Execution Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

3.3CVSS6.5AI score0.05856EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/13 9:15 p.m.25 views

Design/Logic Flaw

Adobe InCopy version 16.4 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

6.8CVSS7.5AI score0.02426EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:0 a.m.28 views

Adobe InCopy JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPG200...

7.8CVSS4.4AI score0.02192EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:0 a.m.23 views

Adobe InDesign JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG...

7.8CVSS4.7AI score0.02192EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/13 12:0 a.m.29 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.7AI score0.01926EPSS
SaveExploits0References1
Rows per page
Query Builder