Vulnerabilities by risk score

10

CVSSv3

Malicious code exists in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific fun...

Tukaani Xz 5.6.1 Tukaani Xz 5.6.0

73 Github repositories4 Articles

10

CVSSv3

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems.

Connectwise Screenconnect

4 Github repositories10 Articles

10

CVSSv3

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted network packet can lead to arbitrary code execution. An attacker can send a malicious packet to trigger this vulnerability.

1 Github repository

10

CVSSv3

Loomio version 2.22.0 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to OS Command Injection.

10

CVSSv3

Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.

2 Github repositories

10

CVSSv3

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote malicious user to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is...

Cisco Unified Communications Manager Cisco Unified Communications Manager Im And Presence Service Cisco Unity Connection Cisco Unified Contact Center Express 12.5\\(1\\)Cisco Virtualized Voice Browser 12.6\\(2\\)Cisco Virtualized Voice Browser 12.6\\(1\\)Cisco Virtualized Voice Browser 12.5\\(1\\)

10

CVSSv3

In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for remote system management, unauthorized access can occur, with data modification and information disclosure. This affects 3.00.23484 up to a...

Microchip Maxview Storage Manager

10

CVSSv3

The Remote Application Server in Parallels RAS prior to 19.2.23975 does not segment virtualized applications from the server, which allows a remote malicious user to achieve remote code execution via standard kiosk breakout techniques.

Parallels Remote Application Server

10

CVSSv3

TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape.

Tinylab Linux Lab 1.1 Tinylab Cloud Lab 1.1 Tinylab Cloud Lab 0.8

10

CVSSv3

XXL-RPC is a high performance, distributed RPC framework. With it, a TCP server can be set up using the Netty framework and the Hessian serialization mechanism. When such a configuration is used, attackers may be able to connect to the server and provide malicious serialized obje...

Xxl-rpc Project Xxl-rpc

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook