Lucene search
+L

4890 matches found

CNVD
CNVD
•added 2020/01/22 12:00 a.m.•24 views

Unspecified Vulnerability in Comtech Telecommunications Stampede FX-1010 (CNVD-2020-14359)

The Comtech Telecommunications Stampede FX-1010 is a data center product from Comtech Telecommunications. A security vulnerability exists in the Comtech Telecommunications Stampede FX-1010 version 7.4.3. A remote attacker can exploit this vulnerability by navigating to the Diagnostics Trace Route...

9CVSS7.2AI score0.04418EPSS
SaveExploits1References1
OSV
OSV
•added 2020/01/20 10:15 p.m.•20 views

CVE-2020-7242

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech...

7.2CVSS7.6AI score0.04418EPSS
SaveExploits1References1
NVD
NVD
•added 2020/01/20 10:15 p.m.•42 views

CVE-2020-7242

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech...

9CVSS7.5AI score0.04418EPSS
SaveExploits1References1
Prion
Prion
•added 2020/01/20 10:15 p.m.•27 views

Remote code execution

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech...

9CVSS7.5AI score0.04418EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2020/01/20 10:15 p.m.•16 views

CVE-2020-7242

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech...

9CVSS7.9AI score0.04418EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2020/01/20 9:56 p.m.•44 views

CVE-2020-7242

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech...

7.5AI score0.04418EPSS
SaveExploits1References1
CVE
CVE
•added 2020/01/20 9:56 p.m.•75 views

CVE-2020-7242

CVE-2020-7242 affects Comtech Stampede FX-1010, version 7.4.3. The issue allows remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and injecting shell metacharacters into the Target IP address field; in some cases authentication ...

9CVSS7.5AI score0.04418EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/01/20 12:00 a.m.•16 views

PT-2020-19492

Name of the Vulnerable Software and Affected Versions Comtech Stampede FX-1010 version 7.4.3 Description The issue allows remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP addre...

9CVSS7.6AI score0.04418EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/20 12:00 a.m.•8 views

CVE-2020-7242: Improper Neutralization of Special Elements used in an OS Command

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters in the Target IP address field. In some cases, authentication can be achieved with the comtech...

9CVSS7.7AI score0.04418EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2020/01/20 12:00 a.m.•23 views

The vulnerability of the IBM Spectrum Protect software server, which allows a intruder to gain unauthorized access to protected information.

The vulnerability of the IBM Spectrum Protect software platform’s data protection server is related to deficiencies in the storage of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through...

4.1CVSS5.5AI score0.00388EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/01/20 12:00 a.m.•10 views

The vulnerability of the predicate_parse() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the predicateparse function kernel/trace/traceeventsfilter.c in the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

4.9CVSS6.5AI score0.00422EPSS
SaveExploits0References18Affected Software2
OSS-Fuzz
OSS-Fuzz
•added 2020/01/10 12:08 p.m.•25 views

perfetto:trace_processor_fuzzer: Crash in perfetto::trace_processor::TraceStorage::GetIdForVariadicType

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed Report: https://oss-fuzz.com/testcase?key=5687501234896896 Project: perfetto Fuzzing Engine: libFuzzer Fuzz Target: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Crash Type: UNKNOWN READ Crash...

6.8AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2020/01/02 12:00 a.m.•1 views

PT-2020-22836

Уязвимость средства трассировки MPI-процессов Intel Trace Analyzer and Collector связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

7.6CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/01/02 12:00 a.m.•3 views

PT-2020-22837

Уязвимость средства трассировки MPI-процессов Intel Trace Analyzer and Collector связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

7.6CVSS5.8AI score
SaveExploits0References2
OSV
OSV
•added 2019/12/12 8:15 p.m.•9 views

DEBIAN-CVE-2019-19769

In the Linux kernel 5.3.10, there is a use-after-free read in the perftracelockacquire function related to include/trace/events/lock.h...

6.7CVSS6.8AI score0.01354EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/12 8:15 p.m.•8 views

DEBIAN-CVE-2019-19768

In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure and place it in a per-cpu sub-buffer...

7.5CVSS6.2AI score0.0415EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/12 8:15 p.m.•13 views

UBUNTU-CVE-2019-19769

In the Linux kernel 5.3.10, there is a use-after-free read in the perftracelockacquire function related to include/trace/events/lock.h...

6.7CVSS6.8AI score0.01354EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2019/12/12 8:15 p.m.•40 views

CVE-2019-19769

In the Linux kernel 5.3.10, there is a use-after-free read in the perftracelockacquire function related to include/trace/events/lock.h...

6.7CVSS6.8AI score0.01354EPSS
SaveExploits0References4
OSV
OSV
•added 2019/12/12 8:15 p.m.•12 views

UBUNTU-CVE-2019-19768

In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure and place it in a per-cpu sub-buffer...

7.5CVSS6.6AI score0.0415EPSS
SaveExploits0References8
Mend
Mend
•added 2019/12/12 7:38 p.m.•2 views

CVE-2019-19768

In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure and place it in a per-cpu sub-buffer...

8.7CVSS0.0415EPSS
SaveExploits0References14
Rows per page
Query Builder