Lucene search
+L

13423 matches found

CNVD
CNVD
added 2021/09/15 12:00 a.m.46 views

Adobe Digital Editions Elevation of Privilege Vulnerability (CNVD-2021-79751)

Adobe Digital Editions software provides an engaging way to help you view and manage eBooks and other digital publications. an elevation of privilege vulnerability exists in Adobe Digital Editions 4.5.11.187646 and earlier versions. The vulnerability stems from the creation of temporary files in ...

6.8CVSS2.5AI score0.01503EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/14 12:15 p.m.27 views

CVE-2021-38174

When a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise Viewer version - 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

6.5CVSS0.00761EPSS
SaveExploits0References2
attackerkb
attackerkb
added 2021/09/14 12:15 p.m.9 views

CVE-2021-38174

When a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise Viewer version - 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

6.5CVSS6.2AI score0.00761EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/09/14 11:25 a.m.40 views

CVE-2021-38174

When a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise Viewer version - 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

4.3CVSS6.7AI score0.00761EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/09/14 12:00 a.m.15 views

PT-2021-21976 · Sap · Kernel +2

Name of the Vulnerable Software and Affected Versions: SAP Web Dispatcher versions 7.49, 7.53, 7.77, 7.81 KRNL64NUC versions 7.22, 7.22EXT, 7.49 KRNL64UC versions 7.22, 7.22EXT, 7.49, 7.53 KERNEL versions 7.22, 7.49, 7.53, 7.77, 7.81, 7.83 Description: The issue allows an unauthenticated attacker...

9.4CVSS9AI score0.02739EPSS
SaveExploits2References9
CNNVD
CNNVD
added 2021/09/14 12:00 a.m.15 views

Adobe Genuine 安全漏洞

Adobe Genuine Service is a free service that periodically verifies that the Adobe applications on your computer are genuine and notifies customers if they are not.An elevation of privilege vulnerability exists in Adobe Genuine Service versions 7.3 and earlier. The vulnerability stems from the...

7.3CVSS5.7AI score0.01694EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/09/14 12:00 a.m.14 views

Adobe Digital Editions 安全漏洞

Adobe Digital Editions software provides an engaging way to help you view and manage eBooks and other digital publications. an elevation of privilege vulnerability exists in Adobe Digital Editions 4.5.11.187646 and earlier versions. The vulnerability stems from the creation of temporary files in ...

6.8CVSS5.6AI score0.01503EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/09/14 12:00 a.m.15 views

Adobe Digital Editions 安全漏洞

Adobe Digital Editions software provides an engaging way to help you view and manage eBooks and other digital publications. Adobe Digital Editions 4.5.11.187646 and earlier versions are vulnerable to an arbitrary file system write vulnerability. The vulnerability stems from the creation of...

6.8CVSS5.8AI score0.01503EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2021/09/12 5:57 p.m.28 views

Exploit for Session Fixation in Gogs

CVE-2018-18925 Exploitation of CVE-2018-18925 a Remote Code Ex...

9.8CVSS7.9AI score0.31133EPSS
SaveExploits2
Patchstack
Patchstack
added 2021/09/09 12:00 a.m.22 views

WordPress WP Design Maps & Places plugin <= 1.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress WP Design Maps & Places plugin versions = 1.2. Solution This plugin has been closed as of September 7, 2021 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS2.9AI score0.00895EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
added 2021/09/09 12:00 a.m.26 views

WordPress Wise Agent Lead Capture Forms plugin <= 1.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Wise Agent Lead Capture Forms plugin versions = 1.0. Solution This plugin has been closed as of September 7, 2021 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS2.4AI score0.00895EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2021/09/08 12:00 a.m.18 views

Docker for Windows < 19.03.9 Irrelevant Temp File Creation Vulnerability

Docker for Windowsis is creating irrelevant temporary files. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:docker:docker";...

5.3CVSS6.5AI score0.01745EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/09/06 12:00 a.m.18 views

Crypto++ 加密问题漏洞

Crypto++ is a C++ cryptographic method library A security vulnerability exists in Crypto++ 8.5 and earlier versions, which stems from the fact that a certain dangerous combination of a prime number defined by the receiver's public key, a generator defined by the receiver's public key, and a...

5.9CVSS5.9AI score0.01157EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/09/06 12:00 a.m.16 views

Botan 加密问题漏洞

Botan is a library of cryptographic algorithms written in C++. It supports a variety of algorithms such as AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A security vulnerability exists in Botan 2.18.1 and earlier versions, which stems from the fact that a generator public key defined by the...

5.9CVSS7.4AI score0.01532EPSS
SaveExploits1References8
Malwarebytes
Malwarebytes
added 2021/09/03 12:51 p.m.52 views

Watch what you send on anonymous SMS websites

Its a good idea to try and keep certain things private. For example, people have been using anonymous email services for years. These either hide your real email address, or replace it entirely for specific tasks. Folks will go one step further, setting aliases for each service they sign up to. I...

7.4AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/01 8:04 p.m.35 views

Security Bulletin: CVE-2020-17521 Apache Groovy's provided extension methods to aid with creating temporary directories was using a now superseded Java JDK method call that is potentiallly not secure in some situations.

Summary Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Vulnerabili...

5.5CVSS1.1AI score0.01063EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2021/09/01 3:15 p.m.10 views

CVE-2021-36002

Adobe Captivate version 11.5.5 and earlier is affected by an Creation of Temporary File In Directory With Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. The attacker must plant a malicious file in a particular location of the...

7.3CVSS7.1AI score0.00512EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/01 3:15 p.m.26 views

CVE-2021-36002

Adobe Captivate version 11.5.5 and earlier is affected by an Creation of Temporary File In Directory With Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. The attacker must plant a malicious file in a particular location of the...

7.3CVSS0.00512EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/01 3:15 p.m.24 views

Design/Logic Flaw

Adobe Captivate version 11.5.5 and earlier is affected by an Creation of Temporary File In Directory With Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. The attacker must plant a malicious file in a particular location of the...

4.4CVSS7.2AI score0.00512EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/09/01 2:29 p.m.84 views

CVE-2021-36002

Adobe Captivate is affected by CVE-2021-36002 in versions 11.5.5 and earlier, due to creation of a temporary file in a directory with incorrect permissions, enabling privilege escalation in the context of the current user. Exploitation requires user interaction: the victim must launch the Captiva...

7.3CVSS6.1AI score0.00512EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder