Lucene search
+L

2215 matches found

OpenVAS
OpenVAS
added 2022/05/17 12:00 a.m.31 views

openSUSE: Security Advisory for go1.17 (SUSE-SU-2022:1167-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.9AI score0.03167EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/05/17 12:00 a.m.27 views

openSUSE: Security Advisory for go1.16 (SUSE-SU-2022:1164-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.9AI score0.03167EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2022/05/14 3:10 a.m.17 views

Yii2-StateMachine extension for Yii2 XSS Vulnerability

The Yii2-StateMachine extension v2.x.x for Yii2 has XSS...

6.1CVSS7AI score0.00707EPSS
SaveExploits1References3Affected Software1
Huntr
Huntr
added 2022/05/12 3:10 p.m.36 views

Improper Privilege Management API V2

Description There are some api v2 doesn't check permission allow attackers to retrieve/edit information ticket,account,group,department,team,ElasticSearch Proof of Concept Get users list 1. Login. 2. Go to /api/v2/accounts?type=all. 3. Users list return. Create user with admin role 1. Get the adm...

6.5CVSS1.5AI score0.02516EPSS
SaveExploits1
Oracle linux
Oracle linux
added 2022/05/12 12:00 a.m.21 views

podman security update

1.6.4-32.0.1 - Reduce unnecessary writable mounts in NaiveDiffDriver Orabug: 31025483 - handle redirect from the docker registry v2 Orabug: 29874238 [email protected] - remove changes in NaiveDiffDriver 1.6.4-32 - update to the latest content of...

1.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/05/03 12:00 a.m.60 views

Debian DLA-2992-1 : openvpn - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2992 advisory. - OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code...

9.8CVSS7.5AI score0.04908EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
added 2022/05/02 12:00 a.m.58 views

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-013)

The version of kernel installed on the remote host is prior to 5.4.50-25.83. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-013 advisory. A logic bug flaw was found in the Linux kernel's implementation of SSBD. A bug in the logic handling allows a...

5.5CVSS6.9AI score0.00519EPSS
SaveExploits1References9
Code423n4
Code423n4
added 2022/04/13 12:00 a.m.15 views

New YVault depositors can be attacked by depressing share decimals

Lines of code Vulnerability details Impact An attacker can become the first depositor for a recently created YVault contract, providing a tiny amount of token by calling deposit1 raw values here, 1 is 1 wei, 1e18 is 1 token if it is 18 decimals. Then the attacker can directly transfer, for exampl...

6.6AI score
SaveExploits0
OSV
OSV
added 2022/04/12 1:03 p.m.6 views

SUSE-SU-2022:1164-1 Security update for go1.16

This update for go1.16 fixes the following issues: Update to version 1.16.15 bsc1182345: - CVE-2022-24921: Fixed a potential denial of service via large regular expressions bsc1196732. Non-security fixes: - Fixed an issue with v2 modules go51331. - Fixed an issue when building source in riscv64...

7.5CVSS7.5AI score0.03167EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/04/06 12:00 a.m.16 views

多款 Xiongmai 产品安全漏洞

The Xiongmai AHB7008T-MH-V2, among others, is a hard disk recorder DVR from Xiongmai Technology Xiongmai, a Chinese company. A security vulnerability exists in multiple Xiongmai products that originates from an open port 9530. An unauthenticated attacker can make an arbitrary Telnet connection to...

9.8CVSS8.5AI score0.01099EPSS
SaveExploits0References3
OSV
OSV
added 2022/03/31 12:15 a.m.11 views

CVE-2021-43661

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /home.asp...

6.1CVSS5.7AI score0.00641EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/30 11:15 p.m.9 views

CVE-2022-25008

totolink EX300v2 V4.0.3c.140B20210429 and EX1200T V4.1.2cu.5230B20210706 does not contain an authentication mechanism...

8.8CVSS5.8AI score0.04365EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/30 11:15 p.m.10 views

CVE-2021-43664

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo...

8.1CVSS7.2AI score0.01652EPSS
SaveExploits1References1
NVD
NVD
added 2022/03/30 8:15 p.m.17 views

CVE-2019-12266

Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32...

10CVSS0.01248EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/30 8:15 p.m.7 views

CVE-2019-12266

Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32...

9.8CVSS7.7AI score0.01248EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/30 7:55 p.m.27 views

CVE-2019-12266 Stack buffer overflow in Wyze Cam Pan v2, Cam v2 and Cam v3

Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32...

7.6CVSS9.6AI score0.01248EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/03/29 12:00 a.m.9 views

PT-2022-8312 · Wyze · Wyze Cam V3 +2

Name of the Vulnerable Software and Affected Versions: Wyze Cam Pan v2 versions prior to 4.49.1.47 Wyze Cam v2 versions prior to 4.9.8.1002 Wyze Cam v3 versions prior to 4.36.8.32 Description: A vulnerability in the authentication logic of Wyze Cam devices allows an attacker to bypass login and...

9.8CVSS9.7AI score0.01419EPSS
SaveExploits0References8
CVE
CVE
added 2022/03/11 5:54 p.m.508 views

CVE-2021-26401

CVE-2021-26401 concerns Spectre Variant 2 mitigation on AMD CPUs. The description states that LFENCE/JMP mitigation (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD processors. AMD advisories (AMD-SB-1040 and AMD-SB-1036) discuss mitigations and supported approaches: use ...

5.6CVSS6.5AI score0.00293EPSS
SaveExploits0References2Affected Software1
The Hacker News
The Hacker News
added 2022/03/10 2:29 p.m.98 views

New Exploit Bypasses Existing Spectre-V2 Mitigations in Intel, AMD, Arm CPUs

Researchers have disclosed a new technique that could be used to circumvent existing hardware mitigations in modern processors from Intel, AMD, and Arm, and stage speculative execution attacks such as Spectre to leak sensitive information from host memory. Attacks like Spectre are designed to bre...

5.6CVSS1.3AI score0.74041EPSS
SaveExploits10
Cvelist
Cvelist
added 2022/03/09 6:17 p.m.41 views

CVE-2022-25368

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history stored in the CPU BHB to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which...

5.1AI score0.00299EPSS
SaveExploits0References3
Rows per page
Query Builder