Recent vulnerabilities and exploits

9.8

CVSSv3

Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices....

Westerndigital My Cloud Home Duo Firmware Westerndigital My Cloud Home Firmware2 Github repositories available

NA

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does not record accurate timestamps, which makes it easier for remote attackers to avoid detection when an audit tries to rely on these timestamps....

Xerox Workcentre 14.060.17.000 Xerox Workcentre 12.060.17.000 Xerox Workcentre 13.060.17.000

7.2

CVSSv3

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: XML Publisher). Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows high privileged attacker with network access via...

Oracle Peoplesoft Enterprise Peopletools 8.55 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Peoplesoft Enterprise Peopletools 8.57

6.1

CVSSv3

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Oracle Argus Safety 8.2 Oracle Argus Safety 8.1

7.8

CVSSv3

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an...

Siemens Simcenter Femap 2020.2 Siemens Simcenter Femap 2021.1

4.8

A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_date" Parameter...

Fork-cms Fork Cms 5.9.3

9.8

CVSSv3

A remote command injection vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09....

Hp Intelligent Management Center 7.3 Hp Intelligent Management Center

NA

Unspecified vulnerability in E-Xoopport before 2.2.0 has unknown impact and attack vectors, as addressed by "Some security fix."...

E-xoopport E-xoopport 1.0 E-xoopport E-xoopport 1.1 E-xoopport E-xoopport 2.0

NA

The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct man-in-the-middle (MITM) attacks and spoof servers via an arbitrary certificate from a trusted CA....

5.5

CVSSv3

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.UnsortedSegmentJoin` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a...

Google Tensorflow 2.7.0 Google Tensorflow Google Tensorflow 2.8.0 Google Tensorflow 2.9.01 Github repository available

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook