Lucene search
+L

8150 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.23 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.27 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.21 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.22 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.28 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/09/08 12:00 a.m.23 views

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2020/09/04 5:21 p.m.29 views

Cross-Site Scripting in nextcloud-vue-collections

Versions of nextcloud-vue-collections prior to 0.4.2 are vulnerable to Cross-Site Scripting XSS. The v-tooltip component has an insecure defaultHTML configuration that allows arbitrary JavaScript to be injected in the tooltip of a collection item. This allows attackers to execute arbitrary code i...

4.4AI score
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/09/04 5:21 p.m.13 views

GHSA-WHV6-RJ84-2VH2 Cross-Site Scripting in nextcloud-vue-collections

Versions of nextcloud-vue-collections prior to 0.4.2 are vulnerable to Cross-Site Scripting XSS. The v-tooltip component has an insecure defaultHTML configuration that allows arbitrary JavaScript to be injected in the tooltip of a collection item. This allows attackers to execute arbitrary code i...

7AI score
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2020/09/03 10:38 a.m.8 views

v-p-t.ch Cross Site Scripting vulnerability OBB-1298729

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
ICS
ICS
added 2020/09/01 6:00 a.m.108 views

Mitsubishi Electric Multiple Products (Update G)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : Multiple products Vulnerability : Predictable Exact Value from Previous Values 2. RISK EVALUATION Successful exploitation of this vulnerability could be used...

9.8CVSS9.7AI score0.0227EPSS
SaveExploits0References10
ThreatPost
ThreatPost
added 2020/08/31 3:47 p.m.60 views

Stolen Fortnite Accounts Earn Hackers Millions Per Year

UPDATE Hackers are scoring more than a million dollars annually selling compromised accounts for the popular Fortnite video game in underground forums. With Fortnite’s immense popularity skyrocketing over the past few years – it currently has more than 350 million global players – the game is a...

7.2AI score
SaveExploits0References13
Talos
Talos
added 2020/08/30 12:00 a.m.62 views

NVIDIA D3D10 driver nvwgf2umx_cfg.dll nvwg MOV2 code execution vulnerability

Summary An exploitable code execution vulnerability exists in the nvwg MOV2 functionality of NVIDIA D3D10 Driver Version 442.50 - 26.21.14.4250. A specially crafted shader can cause remote code execution. An attacker can use this vulnerability to guest-to-host escape through Hyper-V RemoteFX...

7.8CVSS8AI score0.00359EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/08/18 4:48 p.m.33 views

CVE-2019-6258

D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP protocol message, which is mishandled in /usr/sbin/udhcpd during reading of the /var/servd/LAN-1-udhcpd.conf file...

9.8AI score0.02617EPSS
SaveExploits1References2
Veeam
Veeam
added 2020/08/13 12:00 a.m.20 views

Network mapping does not work for Hyper-V replicas in Veeam Cloud Connect after renaming Hyper-V virtual switch

Article Applicability This article relates to a known issue documented in the Veeam Cloud Connect User Guide: After you subscribe a tenant to a Hyper-V hardware plan, you cannot rename the virtual switch in Microsoft Hyper-V infrastructure that is used by VM replicas. If you rename the virtual...

7.5AI score
SaveExploits0Affected Software1
Openbugbounty
Openbugbounty
added 2020/08/11 7:29 a.m.7 views

v-smith.co.jp Cross Site Scripting vulnerability OBB-1256508

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/08/09 12:00 a.m.4 views

PT-2020-3974 · Microsoft · Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Microsoft Hyper-V affected versions not specified Description: A denial of service issue exists due to insufficient input validation in Microsoft Hyper-V on host servers, allowing an attacker with a privileged account on a guest operating...

6.5CVSS6.3AI score0.01235EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2020/08/09 12:00 a.m.11 views

PT-2020-3973 · Microsoft · Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Microsoft Hyper-V affected versions not specified Description: A denial of service issue exists due to insufficient input validation in Microsoft Hyper-V. This can be exploited by an attacker with a privileged account on a guest operating...

6.5CVSS6.2AI score0.02838EPSS
SaveExploits0References6
Openbugbounty
Openbugbounty
added 2020/08/06 4:14 p.m.13 views

vam.ac.uk Cross Site Scripting vulnerability OBB-1252335

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Talos Blog
Talos Blog
added 2020/07/28 9:00 a.m.26 views

Vulnerability Spotlight: Multiple vulnerabilities in RemoteFX affects, AMD, Intel chips

Piotr Bania of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in Intel’s Graphics Accelerator Driver and in an AMD Radeon driver. The Intel driver was released in 2019 and is used in multiple Intel integrated and...

1.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/07/23 12:00 a.m.14 views

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows allows a attacker to execute arbitrary code.

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted...

8CVSS8.2AI score0.06185EPSS
SaveExploits0References4
Rows per page
Query Builder