Lucene search
+L

325 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.25 views

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.19 views

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00335EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.27 views

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.24 views

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.20 views

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.26 views

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.29 views

Fuji Electric Tellus Lite V-Simulator V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00335EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.33 views

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00295EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/11/27 12:00 a.m.21 views

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00295EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/15 6:15 a.m.8 views

CVE-2023-47580

Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file X1, V8, or V9 file, information may be disclosed and/or arbitrary code may be executed...

7.8CVSS6.1AI score0.00265EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/15 6:15 a.m.13 views

CVE-2023-47581

Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file X1, V8, or V9 file, information may be disclosed and/or arbitrary code may be executed...

7.8CVSS5.9AI score0.00265EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/11/15 5:40 a.m.40 views

CVE-2023-47581

Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file X1, V8, or V9 file, information may be disclosed and/or arbitrary code may be executed...

7.8AI score0.00265EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/10 12:00 a.m.17 views

PT-2023-6869 · Tellus +1 · Tellus +1

Name of the Vulnerable Software and Affected Versions: TELLUS versions 4.0.17.0 and earlier TELLUS Lite versions 4.0.17.0 and earlier Description: The issue is related to improper restriction of operations within the bounds of a memory buffer. If a user opens a specially crafted file, such as X1,...

7.8CVSS7.6AI score0.00265EPSS
SaveExploits0References9
IBM Security Bulletins
IBM Security Bulletins
added 2023/07/04 7:15 a.m.54 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool v9.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM License Metric Tool. These issues were disclosed as part of the IBM Java SDK updates in Apr 2023. Vulnerability Details CVEID:CVE-2023-21930 DESCRIPTION: An unspecified vulnerability in Oracle...

9.1CVSS8.7AI score0.02495EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2023/01/10 2:15 p.m.40 views

CVE-2022-46610

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

8.8CVSS9AI score0.18087EPSS
SaveExploits1References1
Prion
Prion
added 2023/01/10 2:15 p.m.28 views

Privilege escalation

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

6.5CVSS8.9AI score0.18087EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/01/10 12:00 a.m.68 views

CVE-2022-46610

CVE-2022-46610 affects 72crm v9. The issue is an arbitrary file upload via the avatar upload function, allowing execution of crafted PHP code. Underlying cause: improper handling of uploaded files in the avatar feature (no details on root cause beyond the description). Impact per sources: potenti...

8.8CVSS8.9AI score0.18087EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/01/10 12:00 a.m.10 views

72crm 代码问题漏洞

72crm is China's 72crm open source based on TP5.0 + ElementUI of a former CRMvueCRM system . 72crm v9 security vulnerabilities , the vulnerability stems from its avatar upload function allows the upload of arbitrary files resulting in an attacker can be carefully crafted PHP files to achieve...

8.8CVSS8.7AI score0.18087EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/01/10 12:00 a.m.9 views

CVE-2022-46610

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

8.2AI score0.18087EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2022/12/02 6:37 a.m.26 views

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2022-38712)

Summary Websphere Application Server WAS is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details CVEID:CVE-2022-38712 DESCRIPTION: IBM WebSphere Application Server 7.0, 8....

5.9CVSS5.8AI score0.0051EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder