Lucene search
+L

1346 matches found

BDU FSTEC
BDU FSTEC
•added 2021/03/30 12:00 a.m.•21 views

The vulnerability of the WordPress website content management system, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

6.1CVSS6.6AI score0.02611EPSS
SaveExploits0References7Affected Software3
NVD
NVD
•added 2021/03/26 9:15 p.m.•25 views

CVE-2020-25578

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not properly initializing the doff field of the dirent structures returned by VOPREADDIR. In particular, tmpfs5, smbfs5, autofs5...

5.3CVSS0.02315EPSS
SaveExploits2References2
Debian CVE
Debian CVE
•added 2021/03/26 8:44 p.m.•28 views

CVE-2020-25578

Removed by vendor...

5.3CVSS6.1AI score0.02315EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
•added 2021/03/21 12:00 a.m.•17 views

The vulnerability of the RabbitMQ messaging broker, related to deficiencies in the security measures used for protecting web page structures, allows attackers to compromise data integrity.

The vulnerability of the RabbitMQ messaging broker is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

6.1CVSS6.4AI score0.01717EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/03/21 12:00 a.m.•16 views

The vulnerability of the RabbitMQ messaging broker, related to deficiencies in the security measures used for protecting web page structures, allows attackers to compromise data integrity.

The vulnerability of the RabbitMQ messaging broker is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

6.1CVSS6.4AI score0.00985EPSS
SaveExploits0References5Affected Software2
Fedora
Fedora
•added 2021/03/20 1:15 a.m.•111 views

[SECURITY] Fedora 33 Update: kernel-headers-5.11.7-200.fc33

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

8.8CVSS6.5AI score0.01316EPSS
SaveExploits0
Fedora
Fedora
•added 2021/03/20 12:21 a.m.•111 views

[SECURITY] Fedora 34 Update: kernel-headers-5.11.7-300.fc34

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

7.8CVSS2.8AI score0.00305EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/03/19 12:00 a.m.•60 views

OracleVM 3.4 : kernel-uek (OVMSA-2021-0008)

The remote OracleVM system is missing necessary patches to address security updates: - An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsitransport structure. When an iSCSI transport is registered with the iSCSI...

7.8CVSS6.1AI score0.02097EPSS
SaveExploits3References7
BDU FSTEC
BDU FSTEC
•added 2021/03/15 12:00 a.m.•18 views

The vulnerability of the `escape_javascript` function in the `javascript_helper.rb` component of the ActionView programming platform for Ruby on Rails allows attackers to compromise data integrity.

The vulnerability of the escapejavascript function in the javascripthelper.rb component of the ActionView programming platform for the Ruby on Rails framework is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an...

4.8CVSS6.8AI score0.01525EPSS
SaveExploits1References9Affected Software3
CNVD
CNVD
•added 2021/03/12 12:00 a.m.•31 views

Linux kernel buffer overflow vulnerability (CNVD-2021-19422)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 5.11.3 and earlier, which stems from certain iSCSI data structures not having proper length constraints or checks. No...

7.8CVSS6.5AI score0.02097EPSS
SaveExploits1References1
NVD
NVD
•added 2021/03/07 5:15 a.m.•40 views

CVE-2021-27365

An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGESIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum leng...

7.8CVSS0.02097EPSS
SaveExploits1References10
UbuntuCve
UbuntuCve
•added 2021/03/07 5:15 a.m.•59 views

CVE-2021-27365

An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGESIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum leng...

7.8CVSS6.3AI score0.02097EPSS
SaveExploits1References11
Cvelist
Cvelist
•added 2021/03/07 4:22 a.m.•67 views

CVE-2021-27365

An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGESIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum leng...

7.8AI score0.02097EPSS
SaveExploits1References10
CVE
CVE
•added 2021/03/07 4:22 a.m.•568 views

CVE-2021-27365

CVE-2021-27365 affects the Linux kernel iSCSI subsystem. The issue is a heap overflow in iSCSI data handling where certain iSCSI data structures lack proper length checks and can exceed PAGE_SIZE; an unprivileged, local user can send a Netlink message (up to the maximum Netlink message length) an...

7.8CVSS6.3AI score0.02097EPSS
SaveExploits1References10Affected Software1
Prion
Prion
•added 2021/03/05 9:15 a.m.•22 views

Design/Logic Flaw

An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures...

5CVSS7.5AI score0.0125EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/03/05 12:00 a.m.•7 views

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 5.11.3 and earlier, which stems from certain iSCSI data structures not having proper length constraints or checks. No...

7.8CVSS6.5AI score0.02097EPSS
SaveExploits1References59
OSV
OSV
•added 2021/02/15 5:15 p.m.•29 views

CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

7.8CVSS6.7AI score
SaveExploits0References4
Veracode
Veracode
•added 2021/02/10 7:00 a.m.•47 views

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists through a use-after-free in the sound subsystem as card disconnection causes certain data structures to be deleted too early...

6.4CVSS3.4AI score0.00581EPSS
SaveExploits1References14Affected Software1
Kitploit
Kitploit
•added 2021/02/07 8:30 p.m.•78 views

COM-Code-Helper - Two IDAPython Scripts Help You To Reconstruct Microsoft COM (Component Object Model) Code

Two IDAPython Scripts help you to reconstruct Microsoft COM Component Object Model Code Especially malware reversers will find this useful, as COM Code is still regularly found in malware. ClassAndInterfaceToNames.py This IDAPython script scans an idb file for class and interfaces UUIDs and creat...

7.6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/02/02 12:00 a.m.•15 views

The vulnerability in the JavaScript programming language implementation of the Mozilla Firefox browser allows attackers to perform cross-site scripting attacks.

The vulnerability in the JavaScript implementation of the Mozilla Firefox browser is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.1CVSS6.8AI score0.00938EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder