Lucene search
+L

5600 matches found

CNVD
CNVD
added 2022/10/25 12:0 a.m.42 views

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12629)

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS has a security vulnerability that stems from the inclusion of a privileged context switch error, which could be exploited by an attacker to compromise the entire system...

6.7CVSS4.6AI score0.00174EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/10/21 12:0 a.m.7 views

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS has a security vulnerability that stems from the inclusion of a privileged context switch error, which could be exploited by an attacker to compromise the entire system...

6.7CVSS6.5AI score0.00174EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/18 2:15 p.m.9 views

CVE-2022-40684

An authentication bypass using an alternate path or channel CWE-288 in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform...

9.8CVSS7.3AI score0.99984EPSS
SaveExploits25References4
OSV
OSV
added 2022/10/18 12:15 p.m.10 views

CVE-2022-36438

AsusSwitch.exe on ASUS personal computers running Windows sets weak file permissions, leading to local privilege escalation this also can be used to delete files within the system arbitrarily. This affects ASUS System Control Interface 3 before 3.1.5.0, and AsusSwitch.exe before 1.0.10.0...

7.8CVSS5.8AI score0.00169EPSS
SaveExploits0References2
Redos
Redos
added 2022/10/17 12:0 a.m.48 views

ROS-20221017-01

A vulnerability in the FreeRDP remote desktop protocol implementation is related to the disclosure of uninitialized data on unix systems when using the /parallel command line switch. uninitialized data on unix systems when using the /parallel command line switch. Exploitation of the vulnerability...

7.5CVSS7.5AI score0.0103EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/10/14 6:29 a.m.42 views

CVE-2022-39282

A vulnerability was found in FreeRDP where clients on UNIX systems using /parallel command line switch might read uninitialized data and send it to the client's server. The vulnerability allows a remote attacker to gain access to sensitive information. Mitigation Workaround: Do not use parallel...

7.5CVSS7.6AI score0.00852EPSS
SaveExploits0References4
OSV
OSV
added 2022/10/12 11:15 p.m.3 views

DEBIAN-CVE-2022-39283

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in...

7.5CVSS6.5AI score0.0103EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/12 11:15 p.m.4 views

DEBIAN-CVE-2022-39282

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

7.5CVSS6.2AI score0.00852EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/12 11:15 p.m.7 views

UBUNTU-CVE-2022-39283

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in...

7.5CVSS6.8AI score0.0103EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2022/10/12 11:15 p.m.47 views

CVE-2022-39283

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in...

7.5CVSS3.4AI score0.0103EPSS
SaveExploits0
OSV
OSV
added 2022/10/12 11:15 p.m.6 views

UBUNTU-CVE-2022-39282

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

7.5CVSS6.7AI score0.00852EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/10/12 12:0 a.m.6 views

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer error vulnerability exists in versions prior to FreeRDP 2.8.1, which stems from the fact that all FreeRDP-based clients may read uninitialized data when using the /video command line switch...

7.5CVSS6.9AI score0.0103EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2022/10/12 12:0 a.m.30 views

PT-2022-5111 · Freerdp +9 · Freerdp +9

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.8.1 Description: The issue is related to the use of uninitialized data when processing the /parallel command line switch in FreeRDP based clients on Unix systems. This could allow a remote attacker to read, modify,...

9.8CVSS6.4AI score0.0372EPSS
SaveExploits16References192
OSV
OSV
added 2022/10/12 12:0 a.m.23 views

CVE-2022-39283 FreeRDP may read and display out of bounds data

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in...

5.9CVSS6.7AI score
SaveExploits0References10
Vulnrichment
Vulnrichment
added 2022/10/12 12:0 a.m.2 views

CVE-2022-39283 FreeRDP may read and display out of bounds data

FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the /video command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not affected. This issue has been patched in...

5.9CVSS6.7AI score0.0103EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2022/10/12 12:0 a.m.8 views

FreeRDP 安全漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in FreeRDP versions prior to 2.8.1, which stems from the fact that a FreeRDP-based client on a unix system using the /parallel command line switch may read...

7.5CVSS6.4AI score0.00852EPSS
SaveExploits0References13
CVE
CVE
added 2022/10/12 12:0 a.m.139 views

CVE-2022-39283

CVE-2022-39283 affects FreeRDP: all FreeRDP-based clients using the “/video” switch may read uninitialized data, decode it as audio/video, and display it. FreeRDP servers are not affected. A fix is available in version 2.8.1; if upgrading is not possible, do not use the “/video” switch. The conne...

7.5CVSS6.6AI score0.0103EPSS
SaveExploits0References8Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/12 12:0 a.m.11 views

PT-2022-5113 · Freerdp +9 · Freerdp +9

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.8.1 Description: The issue is related to a buffer overflow in the FreeRDP client when using the /video command line switch, potentially allowing a remote attacker to access, modify, or delete audio/video data. The...

9.8CVSS6.9AI score0.0372EPSS
SaveExploits16References186
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.7 views

Siemens Scalance X-200 跨站脚本漏洞

The Siemens Scalance X-200 is an industrial-grade Ethernet switch from Siemens Germany. A cross-site scripting vulnerability exists in SCALANCE Switches, which stems from the presence of a cross-site scripting vulnerability that could lead to session hijacking if exploited by an attacker. The...

6.1CVSS5.9AI score0.00448EPSS
SaveExploits0References3
RustSec
RustSec
added 2022/10/01 12:0 p.m.17 views

Crate `parity-wasm` deprecated by the author

This PR explicitly deprecates parity-wasm. The author recommends switching to wasm-tools...

1.8AI score
SaveExploits0
Rows per page
Query Builder