Lucene search
+L

8137 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/08/30 12:00 a.m.18 views

(0Day) Fuji Electric Tellus Lite V-Simulator V8 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.5AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/08/30 12:00 a.m.16 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/08/30 12:00 a.m.15 views

(0Day) Fuji Electric Tellus Lite V-Simulator V8 File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/08/30 12:00 a.m.18 views

(0Day) Fuji Electric Tellus Lite V-Simulator V8 File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.6AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/08/30 12:00 a.m.16 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/08/30 12:00 a.m.15 views

(0Day) Fuji Electric Tellus Lite V-Simulator V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score
SaveExploits0
NVD
NVD
added 2021/08/18 6:15 p.m.25 views

CVE-2020-22122

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

7.5CVSS0.01254EPSS
SaveExploits1References1
NVD
NVD
added 2021/08/13 4:15 p.m.17 views

CVE-2021-1104

The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address MTVEC register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of servic...

9.8CVSS0.01663EPSS
SaveExploits1References1
Prion
Prion
added 2021/08/13 4:15 p.m.19 views

Information disclosure

The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address MTVEC register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of servic...

7.5CVSS9AI score0.01663EPSS
SaveExploits1References1
CVE
CVE
added 2021/08/13 3:40 p.m.81 views

CVE-2021-1104

The CVE-2021-1104 entry relates to the RISC-V Instruction Set Manual, where an ambiguity in the Machine Trap Vector Base Address (MTVEC) register’s initial state is not defined. This ambiguity is stated to potentially enable information disclosure, data tampering, and denial of service. The conso...

9.8CVSS9.1AI score0.01663EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/13 3:40 p.m.31 views

CVE-2021-1104

The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address MTVEC register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of servic...

9.4AI score0.01663EPSS
SaveExploits1References1
OSV
OSV
added 2021/08/12 2:15 p.m.9 views

CVE-2021-37841

Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Windows containers, it can lead to a full container compromise in both process isolation and Hyper-V isolation modes. This security issue leads an attacker with...

7.8CVSS5.9AI score0.00732EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/12 2:15 p.m.7 views

CVE-2021-37841

Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Windows containers, it can lead to a full container compromise in both process isolation and Hyper-V isolation modes. This security issue leads an attacker with...

7.8CVSS6AI score0.00732EPSS
SaveExploits0References2
Prion
Prion
added 2021/08/12 2:15 p.m.36 views

Code injection

Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Windows containers, it can lead to a full container compromise in both process isolation and Hyper-V isolation modes. This security issue leads an attacker with...

4.6CVSS7.8AI score0.00732EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/12 1:30 p.m.30 views

CVE-2021-37841

Docker Desktop before 3.6.0 suffers from incorrect access control. If a low-privileged account is able to access the server running the Windows containers, it can lead to a full container compromise in both process isolation and Hyper-V isolation modes. This security issue leads an attacker with...

8AI score0.00732EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/08/12 12:00 a.m.10 views

Docker Desktop 安全漏洞

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

7.8CVSS7.6AI score0.00732EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/08/12 12:00 a.m.17 views

The vulnerability of the implementation of TCP/IP protocols in the Hyper-V virtualization system in the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the TCP/IP protocol implementation in the Hyper-V virtualization system in the Windows operating system is related to errors in packet processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.61133EPSS
SaveExploits0References5
Rapid7 Blog
Rapid7 Blog
added 2021/08/11 3:19 a.m.237 views

Patch Tuesday - August 2021

Hot off the press, it’s another issue of the Patch Tuesday blog! While the number of vulnerabilities is low this month, there are a number of high risk items administrators will want to patch right away including a few that will require additional remediation steps. This Patch Tuesday also includ...

7.5CVSS0.9AI score0.67252EPSS
SaveExploits26
Positive Technologies
Positive Technologies
added 2021/08/10 12:00 a.m.3 views

PT-2021-3777 · Microsoft · Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in processing packets in the TCP/IP protocol implementation in the Hyper-V virtualization system in Windows. This can allow a remote attacker to execute...

9.9CVSS8.2AI score0.61133EPSS
SaveExploits0References13
OSV
OSV
added 2021/08/06 11:04 a.m.7 views

OESA-2021-1304 openvswitch security update

Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license. Security Fixes: Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a...

5.5CVSS7AI score0.0118EPSS
SaveExploits0References2
Rows per page
Query Builder