Lucene search
+L

1149 matches found

ATTACKERKB
ATTACKERKB
added 2021/10/26 11:0 p.m.4 views

CVE-2021-40771

Adobe Prelude version 10.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially...

7.8CVSS7.7AI score0.01718EPSS
Exploits0References2
OSV
OSV
added 2021/09/30 11:3 a.m.3 views

OESA-2021-1354 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code...

8.8CVSS8AI score0.03292EPSS
Exploits1References2
Microsoft KB
Microsoft KB
added 2021/09/14 7:0 a.m.66 views

Update 18.5 for Microsoft Dynamics 365 Business Central 2021 Release Wave 1 (Application Build 18.5.29545, Platform Build 18.0.29486): September 14, 2021 (KB5006076)

None None...

5.4CVSS6.4AI score0.00983EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2021/09/14 7:0 a.m.49 views

Update 17.10 for Microsoft Dynamics 365 Business Central 2020 Release Wave 2 (Application Build 17.10.29463, Platform Build 17.0.29460): September 14, 2021 (KB5006075)

None None...

5.4CVSS6.4AI score0.00983EPSS
Exploits0
Kaspersky
Kaspersky
added 2021/09/14 12:0 a.m.32 views

KLA12287 XSS vulnerability in Microsoft Dynamics

A cross-site-scripting XSS vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories CVE-2021-40440 Related products Microsoft-Dynamics-365 CVE list CVE-2021-40440 unknown KB list 5006076 5006075...

5.4CVSS5.6AI score0.00983EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/09/14 12:0 a.m.7 views

Microsoft Dynamics Business Central 跨站脚本漏洞

Microsoft Dynamics Business Central is an enterprise resource planning system from Microsoft. The system includes functionality for financial management, project management, and supply chain management. A cross-site scripting vulnerability exists in Microsoft Dynamics Business Central Control. Th...

5.4CVSS6.2AI score0.00983EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2021/08/30 9:33 a.m.3 views

libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution

A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code via a crafted WAV file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

8.8CVSS6.3AI score0.03292EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2021/08/30 8:26 a.m.5 views

libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution

A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code via a crafted WAV file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

8.8CVSS6.3AI score0.03292EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2021/08/24 8:18 a.m.4 views

libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution

A heap buffer overflow flaw was found in libsndfile. This flaw allows an attacker to execute arbitrary code via a crafted WAV file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

8.8CVSS6.3AI score0.03292EPSS
Exploits1References4
Microsoft KB
Microsoft KB
added 2021/08/10 7:0 a.m.54 views

Update 16.15 for Microsoft Dynamics 365 Business Central 2020 Release Wave 1 (Application Build 16.15.28500, Platform Build 16.0.28457)

None None...

5.4CVSS6.4AI score0.0095EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2021/08/10 7:0 a.m.50 views

Update 17.9 for Microsoft Dynamics 365 Business Central 2020 Release Wave 2 (Application Build 17.9.28504, Platform Build 17.0.28458)

None None...

5.4CVSS6.4AI score0.0095EPSS
Exploits0
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.7 views

Microsoft Dynamics 跨站脚本漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Microsoft Dynamics. The...

5.4CVSS6.2AI score0.0095EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/08/04 12:0 a.m.3 views

The vulnerability of the msadpcmdecodeblock function in the libsndfile library, caused by buffer overflows, allows attackers to execute arbitrary code.

The vulnerability of the msadpcmdecodeblock function in the libsndfile library is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created WAV file...

10CVSS8.5AI score0.03292EPSS
Exploits1References14Affected Software6
OSV
OSV
added 2021/07/22 12:15 p.m.4 views

CVE-2021-35521

A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets...

5.9CVSS5.8AI score0.01372EPSS
Exploits0References3
NVD
NVD
added 2021/07/22 12:15 p.m.32 views

CVE-2021-35522

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets...

9.8CVSS0.03657EPSS
Exploits0References3
NVD
NVD
added 2021/07/22 12:15 p.m.32 views

CVE-2021-35521

A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets...

5.9CVSS0.01372EPSS
Exploits0References3
OSV
OSV
added 2021/07/22 12:15 p.m.6 views

CVE-2021-35522

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets...

9.8CVSS7.4AI score0.03657EPSS
Exploits0References3
Prion
Prion
added 2021/07/22 12:15 p.m.22 views

Buffer overflow

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets...

9CVSS9.2AI score0.03657EPSS
Exploits0References3Affected Software4
ATTACKERKB
ATTACKERKB
added 2021/07/22 12:15 p.m.3 views

CVE-2021-35521

A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets...

5.9CVSS6.3AI score0.01372EPSS
Exploits0References4
Prion
Prion
added 2021/07/22 12:15 p.m.20 views

Path traversal

A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets...

4.9CVSS5.7AI score0.01372EPSS
Exploits0References3Affected Software4
Rows per page
Query Builder