Lucene search
+L

5040 matches found

Prion
Prion
added 2020/05/08 9:15 p.m.28 views

Directory traversal

The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name when handling a DR-SCHEMA-SYNC request. This allows an authenticated attacker to execute code in the context of the product by writing a JSP file to the webroot...

6.5CVSS8.6AI score0.13655EPSS
SaveExploits3References3Affected Software2
CNVD
CNVD
added 2020/05/06 12:0 a.m.5 views

Linux kernel resource management error vulnerability (CNVD-2020-41818)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the xfsagfverify file in fs/xfs/libxfs/xfsalloc.c in Linux kernel 5.6.10 and earlier. An attacker can exploit this vulnerability to...

5.5CVSS6.3AI score0.00451EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/05 6:15 a.m.14 views

CVE-2020-12655

An issue was discovered in xfsagfverify in fs/xfs/libxfs/xfsalloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767...

5.5CVSS6.6AI score
SaveExploits0References14
NVD
NVD
added 2020/05/05 6:15 a.m.27 views

CVE-2020-12655

An issue was discovered in xfsagfverify in fs/xfs/libxfs/xfsalloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767...

5.5CVSS6AI score0.00451EPSS
SaveExploits0References14
OSV
OSV
added 2020/05/05 6:15 a.m.3 views

DEBIAN-CVE-2020-12655

An issue was discovered in xfsagfverify in fs/xfs/libxfs/xfsalloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767...

5.5CVSS6.5AI score0.00451EPSS
SaveExploits0References1
Prion
Prion
added 2020/05/05 6:15 a.m.30 views

Design/Logic Flaw

An issue was discovered in xfsagfverify in fs/xfs/libxfs/xfsalloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767...

2.1CVSS5.8AI score0.00451EPSS
SaveExploits0References14Affected Software1
OSV
OSV
added 2020/05/05 6:15 a.m.15 views

UBUNTU-CVE-2020-12655

An issue was discovered in xfsagfverify in fs/xfs/libxfs/xfsalloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767...

5.5CVSS6.7AI score0.00451EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2020/05/05 5:16 a.m.53 views

CVE-2020-12655

An issue was discovered in xfsagfverify in fs/xfs/libxfs/xfsalloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767...

5.5CVSS6.7AI score0.00451EPSS
SaveExploits0
CVE
CVE
added 2020/05/05 5:16 a.m.515 views

CVE-2020-12655

CVE-2020-12655 affects the Linux kernel’s XFS code path: specifically, xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c up to version 5.6.10. The issue allows an attacker to trigger a sync of excessive duration when processing a crafted XFS v5 image, potentially causing denial of service through prolo...

5.5CVSS6AI score0.00451EPSS
SaveExploits0References14Affected Software1
OSV
OSV
added 2020/04/30 9:15 p.m.7 views

CVE-2020-5876

On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exists where mcpd and other processes may make unencrypted connection attempts to a new configuration sync peer. The race condition can occur when changing the ConfigSync IP address...

8.1CVSS5.8AI score0.00571EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/04/30 8:30 p.m.42 views

CVE-2020-5876

On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exists where mcpd and other processes may make unencrypted connection attempts to a new configuration sync peer. The race condition can occur when changing the ConfigSync IP address...

8AI score0.00571EPSS
SaveExploits0References1
CVE
CVE
added 2020/04/30 8:30 p.m.87 views

CVE-2020-5876

The CVE-2020-5876 issue affects BIG-IP mcpd and related components due to a race condition that can cause unencrypted config sync attempts when changing peer ConfigSync IPs, adding peers, or TMM startup. Vulnerable versions include BIG-IP 15.0.0–15.0.1, 14.0.0–14.1.2, 13.1.0–13.1.3, 12.1.0–12.1.5...

8.1CVSS7.9AI score0.00571EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.8 views

The vulnerability of the SyncImageSettings function in the console-based ImageMagick graphics editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SyncImageSettings function MagickCore/image.c in the ImageMagick console-based graphics editor involves the use of an uninitialized value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

7.8CVSS7.1AI score0.02357EPSS
SaveExploits0References12Affected Software6
Citrix
Citrix
added 2020/04/17 12:0 a.m.14 views

Keyboard and Language (IME) Does Not Sync from Local to VDA

When the user configures Receiver for Windows Advanced Preferences Keyboard and Language Bar Set "Keyboard" to Yes; Manual switch from "Chinese" to "English" or user "Ctrl + Shift" to switch input Keyboard and Language does not sync from local to VDA...

7AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/04/10 12:0 a.m.9 views

Update for Work Folders improvements in Windows 7 SP1

Update for Work Folders improvements in Windows 7 SP1 About this update This update ensures that users are able to continue using Work Folders after they upgrade from Windows 7 SP1 to Windows 10. This update must be applied to the client before the upgrade, in order to maintain the sync partnersh...

6.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2020/04/01 2:36 a.m.27 views

CVE-2019-9444

In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS2.7AI score0.00198EPSS
SaveExploits0References3
Microsoft Security Update
Microsoft Security Update
added 2020/03/30 10:52 p.m.11 views

Azure File Sync Agent v10.0 Release – April 2020 (KB4522409)

Update for Azure File Sync agent version 10.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

3.6AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2020/03/30 10:47 p.m.12 views

Azure File Sync Agent v10.0 Release – April 2020 (KB4522409)

Update for Azure File Sync agent version 10.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

3.6AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2020/03/30 10:43 p.m.19 views

Azure File Sync Agent v10.0 Release – April 2020 (KB4522409)

Update for Azure File Sync agent version 10.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

3.6AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/03/17 12:0 a.m.10 views

March 17, 2020—KB4541331 (OS Build 17763.1131)

None None...

6.1AI score
SaveExploits0
Rows per page
Query Builder