Lucene search
+L

983 matches found

BDU FSTEC
BDU FSTEC
•added 2022/08/08 12:00 a.m.•22 views

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

7.8CVSS7.2AI score0.0022EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/08/01 12:00 a.m.•16 views

IBM CICS TX 跨站请求伪造漏洞

IBM CICS TX Advanced is a comprehensive, single transaction runtime package from IBM USA, Inc. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Advanced version 11.1 contains a security vulnerability that stems from a lack of authentication measures or...

8.8CVSS5.6AI score0.00463EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/07/27 12:00 a.m.•19 views

PT-2022-4767 · Jenkins · Jenkins Openshift Deployer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OpenShift Deployer Plugin versions 1.2.0 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and...

6.5CVSS6.6AI score0.00548EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2022/07/16 12:00 a.m.•16 views

Ambit Technologies iTech Job Portal Script 授权问题漏洞

Ambit Technologies iTech Job Portal Script is an efficient interactive platform from Ambit Technologies India. One can post their vacancy profile on one side and candidates can post their resume on the other side. Ambit Technologies iTech Job Portal Script version 9.13 suffers from a security...

9.8CVSS8.3AI score0.00736EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/14 12:00 a.m.•12 views

CVE-2022-28377: Weak Password Requirements

On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static account username/password for access control. This password can be generated via a binary included in the firmware, after ascertaining the MAC address of th...

7.5CVSS7.2AI score0.00966EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/07/11 12:00 a.m.•23 views

The vulnerability of the network software for social games and heroiclabs/nakama applications relates to insufficient restrictions on authentication attempts, allowing a perpetrator to gain unauthorized access to protected information.

The vulnerability of the network software for social games and heroiclabs/nakama applications is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.01581EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/07/06 12:00 a.m.•18 views

The vulnerability of Owl Labs Meeting Owl Pro’s microprogrammed software, related to authentication procedures that lack sufficient safeguards, allows attackers to circumvent existing security restrictions.

The vulnerability of Owl Labs Meeting Owl Pro’s camera software-related microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

7.4CVSS7.2AI score0.00812EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/06/27 12:00 a.m.•19 views

The vulnerability of the IPGW protocol implementation in MOSCAD SCADA systems, including ACE IP Gateway (CPU 4600), allows a perpetrator to execute arbitrary code.

The vulnerability of the IPGW protocol implementation in MOSCAD SCADA systems, such as ACE IP Gateway CPU 4600, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

8.1CVSS5.9AI score0.00841EPSS
SaveExploits0References2
NVD
NVD
•added 2022/06/17 1:15 p.m.•29 views

CVE-2018-25043

A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to...

8.8CVSS0.01158EPSS
SaveExploits1References3
Prion
Prion
•added 2022/06/17 1:15 p.m.•24 views

Authentication flaw

A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to...

6.8CVSS8.8AI score0.01158EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/06/17 4:45 a.m.•15 views

CVE-2018-25043 uTorrent PRNG improper authentication

A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to...

5CVSS9AI score0.01158EPSS
SaveExploits1References3
CVE
CVE
•added 2022/06/17 4:45 a.m.•59 views

CVE-2018-25043

CVE-2018-25043 affects uTorrent involving PRNG code manipulation that causes weak authentication. The vulnerability enables remote exploitation and has public exploit details. Multiple sources confirm a critical issue with unknown input handling leading to insufficient authentication, making it p...

8.8CVSS7AI score0.01158EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/17 12:00 a.m.•7 views

CVE-2018-25043: Improper Authentication

A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to...

8.8CVSS7.2AI score0.01158EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/06/17 12:00 a.m.•2 views

PT-2022-8055

Name of the Vulnerable Software and Affected Versions uTorrent affected versions not specified Description A critical issue was found in uTorrent, affecting the PRNG component, which leads to weak authentication. The attack can be initiated remotely. Recommendations At the moment, there is no...

8.8CVSS0.01158EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/06/17 12:00 a.m.•36 views

BitTorrent uTorrent 授权问题漏洞

BitTorrent uTorrent is a set of BitTorrent client software written in C++ by BitTorrent Inc. in the United States. A security vulnerability exists in BitTorrent uTorrent, which originates from a weak authentication vulnerability due to operation with unknown input, which can be exploited by...

8.8CVSS8AI score0.01158EPSS
SaveExploits1References4
OSV
OSV
•added 2022/06/11 10:15 a.m.•15 views

CVE-2017-20039

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely...

9.8CVSS5.4AI score0.01252EPSS
SaveExploits0References2
NVD
NVD
•added 2022/06/11 10:15 a.m.•31 views

CVE-2017-20039

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely...

9.8CVSS0.01252EPSS
SaveExploits0References2
Prion
Prion
•added 2022/06/11 10:15 a.m.•30 views

Authentication flaw

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely...

7.5CVSS9.4AI score0.01252EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/06/11 10:00 a.m.•26 views

CVE-2017-20039 SICUNET Access Controller hard-coded password

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely...

9.8CVSS9.7AI score0.01252EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/06/11 10:00 a.m.•41 views

CVE-2017-20039 SICUNET Access Controller hard-coded password

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely...

9.8CVSS9.5AI score0.01252EPSS
SaveExploits0References2
Rows per page
Query Builder