Lucene search
+L

410 matches found

Prion
Prion
added 2021/03/10 4:15 p.m.27 views

Buffer overflow

In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that the offset is within the buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions...

5CVSS7.6AI score0.01211EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.13 views

Siemens SIMATIC MV400 安全漏洞

Siemens SIMATIC MV400 is an industrial device from Siemens Germany. It is used for optical identification. An unspecified vulnerability exists in the Siemens SIMATIC MV400 series TCP protocol stack. An attacker can exploit this vulnerability to terminate arbitrary TCP sessions...

7.5CVSS5.8AI score0.01032EPSS
SaveExploits0References5
OSV
OSV
added 2021/02/19 7:15 p.m.4 views

DEBIAN-CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5.3CVSS5.6AI score0.00843EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/19 7:15 p.m.35 views

CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5.3CVSS0.00843EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/19 7:15 p.m.12 views

CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5.3CVSS6.7AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/02/19 7:15 p.m.30 views

CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5.3CVSS6.1AI score0.00843EPSS
SaveExploits0References2
Prion
Prion
added 2021/02/19 7:15 p.m.18 views

Session fixation

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5CVSS5.2AI score0.00843EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/02/19 7:15 p.m.21 views

UBUNTU-CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5.3CVSS6AI score0.00843EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/02/19 6:57 p.m.35 views

CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5.5AI score0.00843EPSS
SaveExploits0References2
CVE
CVE
added 2021/02/19 6:57 p.m.1139 views

CVE-2021-27351

CVE-2021-27351 affects Telegram, specifically the Terminate Session feature, failing to invalidate a recently active session. Affected versions are Telegram for Android up to 7.2.1 and Telegram for Windows/UNIX up to 2.4.7. The issue is described as a failure to terminate active sessions, with no...

5.3CVSS5.1AI score0.00843EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/02/19 6:57 p.m.69 views

CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

5.3CVSS5.2AI score0.00843EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/02/09 12:0 a.m.10 views

PT-2021-2300 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to the lack of automatic termination of all sessions after a password change, which could allow a...

7.5CVSS5.9AI score0.01673EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2020/10/22 12:0 a.m.4 views

PT-2020-20831 · Apple · Macos Catalina +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 Description: A buffer overflow issue was addressed with improved bounds checking...

7.8CVSS7.3AI score0.01366EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/10/15 12:0 a.m.10 views

The vulnerability of the WildFly application server in Java, caused by synchronization errors when using a shared resource, allows attackers to terminate arbitrary processes in the system.

The vulnerability of the WildFly application server in Java is caused by synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to terminate arbitrary processes in the system by modifying the PID file located at /var/run/jboss-eap/...

5.5CVSS6.2AI score0.0019EPSS
SaveExploits0References3Affected Software2
NVD
NVD
added 2020/09/02 8:15 p.m.11 views

CVE-2020-5778

A flaw exists in Trading Technologies Messaging 7.1.28.3 ttmd.exe due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate...

7.5CVSS7.5AI score0.01277EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/09/02 7:21 p.m.19 views

CVE-2020-5778

A flaw exists in Trading Technologies Messaging 7.1.28.3 ttmd.exe due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate...

7.5AI score0.01277EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/01 3:15 p.m.16 views

CVE-2020-4420

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076...

7.5CVSS0.0241EPSS
SaveExploits0References2
OSV
OSV
added 2020/07/01 3:15 p.m.4 views

CVE-2020-4420

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076...

7.5CVSS7.2AI score0.0241EPSS
SaveExploits0References2
Prion
Prion
added 2020/07/01 3:15 p.m.20 views

Code injection

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076...

5CVSS7.4AI score0.0241EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/07/01 2:25 p.m.19 views

CVE-2020-4420

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the execution of a terminate command. IBM X-Force ID: 180076...

7.5CVSS7.4AI score0.0241EPSS
SaveExploits0References2
Rows per page
Query Builder