Lucene search

K

HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X Security Vulnerabilities

cvelist
cvelist

CVE-2019-11405

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved...

7.5AI Score

0.003EPSS

2019-04-21 04:07 PM
2
krebs
krebs

‘Land Lordz’ Service Powers Airbnb Scams

Scammers who make a living swindling Airbnb.com customers have a powerful new tool at their disposal: A software-as-a-service offering called "Land Lordz," which helps automate the creation and management of fake Airbnb Web sites and the sending of messages to advertise the fraudulent listings....

7.1AI Score

2019-04-14 06:40 PM
148
mskb
mskb

Description of the security update for SharePoint Foundation 2013: April 9, 2019

Description of the security update for SharePoint Foundation 2013: April 9, 2019 Summary This security update resolves a cross-site–scripting (XSS) vulnerability that exists when Microsoft SharePoint Server does not correctly sanitize a specially crafted web request that's made to an affected...

5.6AI Score

0.001EPSS

2019-04-09 07:00 AM
10
mskb
mskb

Description of the security update for SharePoint Server 2010: April 9, 2019

Description of the security update for SharePoint Server 2010: April 9, 2019 Summary This security update resolves a cross-site–scripting (XSS) vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request that's made to an affected SharePoint....

5.5AI Score

0.001EPSS

2019-04-09 07:00 AM
10
malwarebytes
malwarebytes

How gamers can protect against increasing cyberthreats

A few years ago, cybersecurity scryers predicted that the video gaming industry would be the next big target of cybercriminals. Whether this will come true in the future or not, the average gamer may have little to no idea of what awaits them, much less be prepared for it. In fact, while generally....

-0.3AI Score

2019-04-03 03:00 PM
133
nessus
nessus

openSUSE Security Update : openssl-1_1 (openSUSE-2019-550)

This update for openssl-1_1 fixes the following issues : CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period ...

-0.6AI Score

2019-03-27 12:00 AM
19
mskb
mskb

Description of the security update for SharePoint Foundation 2013: March 12, 2019

Description of the security update for SharePoint Foundation 2013: March 12, 2019 Summary This security update resolves a cross-site-scripting (XSS) vulnerability if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To learn...

5.7AI Score

0.001EPSS

2019-03-12 07:00 AM
14
vulnerlab

7.1AI Score

2019-03-07 12:00 AM
57
nessus
nessus

Fedora 28 : php-erusev-parsedown (2019-009fdcfb60)

1.7.1 #475: 'Loose' lists will now contain paragraphs in all items, not just some. #433: Links will no longer be double nested #525: The info-string when beginning a code block may now contain non-word characters (e.g. c++) #561: The mbstring extension (which we already depend ...

AI Score

2019-03-07 12:00 AM
14
vulnerlab

7.1AI Score

2019-03-07 12:00 AM
104
packetstorm

-0.4AI Score

2019-03-07 12:00 AM
63
nessus
nessus

Fedora 29 : php-erusev-parsedown (2019-b02e9bf467)

1.7.1 #475: 'Loose' lists will now contain paragraphs in all items, not just some. #433: Links will no longer be double nested #525: The info-string when beginning a code block may now contain non-word characters (e.g. c++) #561: The mbstring extension (which we already depend ...

AI Score

2019-03-06 12:00 AM
10
exploitpack
exploitpack

Navicat for Oracle 12.1.15 - _Password_ Denial of Service (PoC)

Navicat for Oracle 12.1.15 - Password Denial of Service...

0.3AI Score

2019-02-15 12:00 AM
8
packetstorm

-0.2AI Score

2019-02-15 12:00 AM
21
mskb
mskb

Description of the security update for SharePoint Foundation 2013: February 12, 2019

Description of the security update for SharePoint Foundation 2013: February 12, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

9AI Score

0.974EPSS

2019-02-12 08:00 AM
33
mskb
mskb

Description of the security update for SharePoint Server 2010: March 12, 2019

Description of the security update for SharePoint Server 2010: March 12, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft SharePoint if the software does not check the source markup of an application package. To learn more about the...

9.7AI Score

0.974EPSS

2019-02-12 08:00 AM
156
packetstorm

0.3AI Score

2019-02-05 12:00 AM
67
exploitdb

7.4AI Score

2019-02-05 12:00 AM
46
exploitpack
exploitpack

devolo dLAN 550 duo+ Starter Kit - Remote Code Execution

devolo dLAN 550 duo+ Starter Kit - Remote Code...

-0.2AI Score

2019-02-05 12:00 AM
24
exploitpack
exploitpack

devolo dLAN 550 duo+ Starter Kit - Cross-Site Request Forgery

devolo dLAN 550 duo+ Starter Kit - Cross-Site Request...

0.3AI Score

2019-02-05 12:00 AM
24
zdt
zdt

devolo dLAN 550 duo+ Starter Kit - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web...

AI Score

2019-02-05 12:00 AM
21
exploitdb

7.4AI Score

2019-02-05 12:00 AM
67
packetstorm

-0.2AI Score

2019-02-05 12:00 AM
76
zdt
zdt

devolo dLAN 550 duo+ Starter Kit - Remote Code Execution Vulnerability

Exploit for hardware platform in category web...

-0.1AI Score

2019-02-05 12:00 AM
75
zeroscience
zeroscience

devolo dLAN 550 duo+ Starter Kit Cross-Site Request Forgery

Title: devolo dLAN 550 duo+ Starter Kit Cross-Site Request Forgery Advisory ID: ZSL-2019-5507 Type: Remote/Local Impact: Cross-Site Scripting Risk: (3/5) Release Date: 03.02.2019 Summary Devolo dLAN® 550 duo+ Starter Kit is Powerlineadapter which is a cost-effective and helpful networking...

6.9AI Score

2019-02-03 12:00 AM
75
zeroscience
zeroscience

devolo dLAN 550 duo+ Starter Kit Remote Code Execution

Title: devolo dLAN 550 duo+ Starter Kit Remote Code Execution Advisory ID: ZSL-2019-5508 Type: Remote/Local Impact: System Access, DoS Risk: (4/5) Release Date: 03.02.2019 Summary Devolo dLAN® 550 duo+ Starter Kit is Powerlineadapter which is a cost-effective and helpful networking alternative...

8.6AI Score

2019-02-03 12:00 AM
80
akamaiblog
akamaiblog

A Look Back At The DDoS Trends of 2018

As mentioned in the 2018 Year in Review State of the Internet / Security report, trends in DDoS are remarkably stable. The size of the largest attacks have grown by approximately 6% on an annual basis, with occasional outliers like the Mirai botnet. The median size of attacks has been much more...

0.1AI Score

2019-01-28 01:49 PM
54
threatpost
threatpost

Critical, Unpatched Cisco Flaw Leaves Small Business Networks Wide Open

A critical and unpatched vulnerability in the widely deployed Cisco Small Business Switch software leaves the door open to remote, unauthenticated attackers gaining full administrative control over the device – and therefore the network. Cisco Small Business Switches were developed for small...

1.1AI Score

0.002EPSS

2019-01-18 05:30 PM
16
mskb
mskb

Description of the security update for SharePoint Server 2010 Office Web Apps: January 8, 2019

Description of the security update for SharePoint Server 2010 Office Web Apps: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

7.8AI Score

0.199EPSS

2019-01-08 08:00 AM
34
mskb
mskb

Description of the security update for Outlook 2013: January 8, 2019

Description of the security update for Outlook 2013: January 8, 2019 Summary This security update resolves an information disclosure vulnerability that exists when Microsoft Outlook improperly handles certain types of messages. To learn more about the information disclosure vulnerability, see...

6.5AI Score

0.014EPSS

2019-01-08 08:00 AM
14
mskb
mskb

Description of the security update for SharePoint Server 2010: January 8, 2019

Description of the security update for SharePoint Server 2010: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft.....

6.4AI Score

0.001EPSS

2019-01-08 08:00 AM
18
mskb
mskb

Description of the security update for SharePoint Foundation 2013: January 8, 2019

Description of the security update for SharePoint Foundation 2013: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

6.4AI Score

0.001EPSS

2019-01-08 08:00 AM
14
nessus
nessus

Fedora 28 : knot-resolver (2018-389bc4e911)

Knot Resolver 2.3.0 (2018-04-23) ================================ Security fix CVE-2018-1110: denial of service triggered by malformed DNS messages (!550, !558, security!2, security!4) increase resilience against slow lorris attack (security!5) Bugfixes validation: fix...

-0.5AI Score

2019-01-03 12:00 AM
8
mskb
mskb

Description of the security update for SharePoint Server 2010: December 11, 2018

Description of the security update for SharePoint Server 2010: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see ...

9AI Score

0.001EPSS

2018-12-11 08:00 AM
19
mskb
mskb

Description of the security update for SharePoint Server 2010 Office Web Apps: December 11, 2018

Description of the security update for SharePoint Server 2010 Office Web Apps: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

8.1AI Score

0.022EPSS

2018-12-11 08:00 AM
17
mskb
mskb

Description of the security update for Outlook 2013: December 11, 2018

Description of the security update for Outlook 2013: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

8.1AI Score

0.028EPSS

2018-12-11 08:00 AM
17
mskb
mskb

Description of the security update for Outlook 2013: November 13, 2018

Description of the security update for Outlook 2013: November 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

8.1AI Score

0.21EPSS

2018-11-13 08:00 AM
17
mskb
mskb

Description of the security update for SharePoint Server 2010 Office Web Apps: November 13, 2018

Description of the security update for SharePoint Server 2010 Office Web Apps: November 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

8.1AI Score

0.118EPSS

2018-11-13 08:00 AM
23
mskb
mskb

Description of the security update for SharePoint Foundation 2013: November 13, 2018

Description of the security update for SharePoint Foundation 2013: November 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

8.6AI Score

0.467EPSS

2018-11-13 08:00 AM
13
zdt
zdt

OpenSLP 2.0.0 - Multiple Vulnerabilities

Exploit for linux platform in category local...

AI Score

0.111EPSS

2018-11-09 12:00 AM
195
packetstorm

-0.5AI Score

0.111EPSS

2018-11-09 12:00 AM
240
threatpost
threatpost

Cisco Accidentally Released Dirty CoW Exploit Code in Software

Cisco Systems revealed in a security bulletin Wednesday that it “inadvertently” shipped in-house exploit code that was used in security tests of scripts as part of its TelePresence Video Communication Server and Expressway Series software. The code exploits the Dirty Cow vulnerability...

1.2AI Score

0.975EPSS

2018-11-08 04:39 PM
47
cisco
cisco

Cisco Small Business Switches Privileged Access Vulnerability

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account...

2.1AI Score

0.002EPSS

2018-11-07 04:00 PM
605
exploitpack
exploitpack

OpenSLP 2.0.0 - Multiple Vulnerabilities

OpenSLP 2.0.0 - Multiple...

9.8CVSS

0.2AI Score

2018-11-07 12:00 AM
19
exploitdb

9.5AI Score

0.119EPSS

2018-11-07 12:00 AM
23
zdt
zdt

FaceTime - VCPDecompressionDecodeFrame Memory Corruption Exploit

Exploit for macOS platform in category dos /...

0.5AI Score

0.014EPSS

2018-11-06 12:00 AM
339
exploitpack
exploitpack

FaceTime - VCPDecompressionDecodeFrame Memory Corruption

FaceTime - VCPDecompressionDecodeFrame Memory...

0.9AI Score

2018-11-06 12:00 AM
6
Total number of security vulnerabilities1803