Lucene search
+L

405 matches found

Cvelist
Cvelist
added 2021/06/04 4:45 p.m.21 views

CVE-2021-1527 Cisco Webex Player Memory Corruption Vulnerability

A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to cause the affected software to terminate or to gain access to memory state information that is related to the vulnerable application. The vulnerability is due to insufficient validation of values in Webex...

5.3CVSS6.4AI score0.00576EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2021/04/27 6:55 a.m.16 views

kernel: iscsi: unrestricted access to sessions and handles

A flaw was found in the way access to sessions and handles was handled in the iSCSI driver in the Linux kernel. A local user could use this flaw to leak iSCSI transport handle kernel address or end arbitrary iSCSI connections on the system...

4.4CVSS6.8AI score0.00711EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2021/04/20 3:36 p.m.6 views

kernel: iscsi: unrestricted access to sessions and handles

A flaw was found in the way access to sessions and handles was handled in the iSCSI driver in the Linux kernel. A local user could use this flaw to leak iSCSI transport handle kernel address or end arbitrary iSCSI connections on the system...

4.4CVSS6.8AI score0.00711EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2021/04/20 12:59 p.m.10 views

kernel: iscsi: unrestricted access to sessions and handles

A flaw was found in the way access to sessions and handles was handled in the iSCSI driver in the Linux kernel. A local user could use this flaw to leak iSCSI transport handle kernel address or end arbitrary iSCSI connections on the system...

4.4CVSS6.8AI score0.00711EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2021/04/06 3:32 p.m.8 views

kernel: iscsi: unrestricted access to sessions and handles

A flaw was found in the way access to sessions and handles was handled in the iSCSI driver in the Linux kernel. A local user could use this flaw to leak iSCSI transport handle kernel address or end arbitrary iSCSI connections on the system...

4.4CVSS6.8AI score0.00711EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2021/04/06 12:39 p.m.14 views

kernel: iscsi: unrestricted access to sessions and handles

A flaw was found in the way access to sessions and handles was handled in the iSCSI driver in the Linux kernel. A local user could use this flaw to leak iSCSI transport handle kernel address or end arbitrary iSCSI connections on the system...

4.4CVSS6.8AI score0.00711EPSS
Exploits1References5
OSV
OSV
added 2021/04/06 5:15 a.m.4 views

CVE-2021-28192

The specific function in ASUS BMC’s firmware Web management page Remote video storage function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web...

4.9CVSS5.9AI score0.0181EPSS
Exploits0References3
NVD
NVD
added 2021/04/06 5:15 a.m.17 views

CVE-2021-28192

The specific function in ASUS BMC’s firmware Web management page Remote video storage function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web...

4.9CVSS0.0181EPSS
Exploits0References3
OSV
OSV
added 2021/04/06 5:15 a.m.5 views

CVE-2021-28182

The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

4.9CVSS5.9AI score0.0181EPSS
Exploits0References3
OSV
OSV
added 2021/04/06 5:15 a.m.4 views

CVE-2021-28180

The specific function in ASUS BMC’s firmware Web management page Audit log configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the W...

4.9CVSS5.9AI score0.0181EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/06 12:0 a.m.4 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate a Web...

4.9CVSS6AI score0.0181EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/06 12:0 a.m.4 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from the LDAP configuration function not validating the length of a string entered by the user, and can be exploited by a remote attacker to...

4.9CVSS6AI score0.0181EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/06 12:0 a.m.4 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from the UEFI configuration function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to...

4.9CVSS6AI score0.0181EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/06 12:0 a.m.5 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC's firmware Web management page, which stems from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate Web...

4.9CVSS6AI score0.0181EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/04/06 12:0 a.m.8 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from a DNS configuration function that does not validate the length of a string entered by the user, and can be exploited by a remote attacker to...

4.9CVSS6AI score0.0186EPSS
Exploits0References3
Prion
Prion
added 2021/03/10 4:15 p.m.25 views

Buffer overflow

In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within the buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions...

5CVSS7.6AI score0.01211EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.11 views

Siemens SIMATIC MV400 安全漏洞

Siemens SIMATIC MV400 is an industrial device from Siemens Germany. It is used for optical identification. An unspecified vulnerability exists in the Siemens SIMATIC MV400 series TCP protocol stack. An attacker can exploit this vulnerability to terminate arbitrary TCP sessions...

7.5CVSS5.8AI score0.01032EPSS
Exploits0References5
OSV
OSV
added 2021/02/19 7:15 p.m.10 views

CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5.3CVSS6.7AI score
Exploits0References2
NVD
NVD
added 2021/02/19 7:15 p.m.31 views

CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5.3CVSS0.00843EPSS
Exploits0References2
OSV
OSV
added 2021/02/19 7:15 p.m.2 views

DEBIAN-CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5.3CVSS5.6AI score0.00843EPSS
Exploits0References1
Rows per page
Query Builder