Lucene search
+L

8726 matches found

Positive Technologies
Positive Technologies
•added 2019/08/13 12:00 a.m.•5 views

PT-2019-7255

Name of the Vulnerable Software and Affected Versions download-monitor plugin versions prior to 1.7.1 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It affects the add query arg function. No information is provided about the estimated number of potentially affected...

6.1CVSS0.00923EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2019/08/07 7:56 p.m.•16 views

kernel: OOB write due to missing bounds check leads to local privilege escalation

A flaw was found in the USB monitor driver of the Linux kernel. This flaw allows an attacker with physical access to the system to crash the system or potentially escalate their privileges...

6.7CVSS7.1AI score0.00197EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2019/08/06 12:47 p.m.•10 views

kernel: OOB write due to missing bounds check leads to local privilege escalation

A flaw was found in the USB monitor driver of the Linux kernel. This flaw allows an attacker with physical access to the system to crash the system or potentially escalate their privileges...

6.7CVSS7.1AI score0.00197EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/08/06 12:00 a.m.•23 views

PT-2019-19665 · Google +3 · Android Kernel +3

Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue is related to a missing bounds check in the Pixel C USB monitor driver, which could lead to a possible out-of-bounds OOB write. This could result in local escalation of...

10CVSS6.9AI score0.98745EPSS
SaveExploits76References1194
OSV
OSV
•added 2019/08/05 3:56 p.m.•22 views

SUSE-SU-2019:2049-1 Security update for ceph

This update for ceph fixes the following issues: Security issues fixed: - CVE-2019-3821: civetweb: fix file descriptor leak bsc1125080 - CVE-2018-16889: rgw: sanitize customer encryption keys from log output in v4 auth bsc1121567 Non-security issues fixed: - install grafana dashboards world...

7.5CVSS6.6AI score0.02946EPSS
SaveExploits1References17
Tenable Nessus
Tenable Nessus
•added 2019/08/02 12:00 a.m.•13 views

FANUC 180is-IA Operation Panel and Monitor

Binary data 764760.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/08/02 12:00 a.m.•17 views

FANUC 180is Operation Panel and Monitor

Binary data 764762.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/08/02 12:00 a.m.•10 views

FANUC 180is-IB Operation Panel and Monitor

Binary data 764761.prm...

7.3AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2019/07/25 2:55 p.m.•21 views

Security Bulletin: External Service invocation in IBM Business Space affects IBM Business Monitor (CVE-2018-1885)

Summary A vulnerability in IBM Business Space can allow an attacker to cause an external service invocation. Vulnerability Details CVEID: CVE-2018-1885 DESCRIPTION: IBM Business Space could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. CV...

5.3CVSS1.7AI score0.01809EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2019/07/17 5:15 p.m.•29 views

CVE-2019-12175

In Zeek Network Security Monitor formerly known as Bro before 2.6.2, a NULL pointer dereference in the Kerberos aka KRB protocol parser leads to DoS because a case-type index is mishandled...

7.5CVSS6.6AI score
SaveExploits0References1
NVD
NVD
•added 2019/07/17 5:15 p.m.•37 views

CVE-2019-12175

In Zeek Network Security Monitor formerly known as Bro before 2.6.2, a NULL pointer dereference in the Kerberos aka KRB protocol parser leads to DoS because a case-type index is mishandled...

7.5CVSS7.4AI score0.01411EPSS
SaveExploits0References1
Prion
Prion
•added 2019/07/17 5:15 p.m.•26 views

Null pointer dereference

In Zeek Network Security Monitor formerly known as Bro before 2.6.2, a NULL pointer dereference in the Kerberos aka KRB protocol parser leads to DoS because a case-type index is mishandled...

5CVSS7.4AI score0.01411EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2019/07/17 5:15 p.m.•45 views

CVE-2019-12175

In Zeek Network Security Monitor formerly known as Bro before 2.6.2, a NULL pointer dereference in the Kerberos aka KRB protocol parser leads to DoS because a case-type index is mishandled...

7.5CVSS7.1AI score0.01411EPSS
SaveExploits0References1
CVE
CVE
•added 2019/07/17 4:40 p.m.•112 views

CVE-2019-12175

The CVE-2019-12175 entry concerns Zeek (Bro) Network Security Monitor prior to version 2.6.2, where a NULL pointer dereference in the Kerberos (KRB) protocol parser causes a denial of service due to mishandling of a case-type index. Public details from multiple connected sources confirm the affec...

7.5CVSS6.9AI score0.01411EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/07/17 4:40 p.m.•42 views

CVE-2019-12175

In Zeek Network Security Monitor formerly known as Bro before 2.6.2, a NULL pointer dereference in the Kerberos aka KRB protocol parser leads to DoS because a case-type index is mishandled...

7.4AI score0.01411EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/17 12:00 a.m.•5 views

CVE-2019-12175: NULL Pointer Dereference

In Zeek Network Security Monitor formerly known as Bro before 2.6.2, a NULL pointer dereference in the Kerberos aka KRB protocol parser leads to DoS because a case-type index is mishandled...

7.5CVSS6.9AI score0.01411EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/07/17 12:00 a.m.•25 views

SolarWinds Network Performance Monitor SQL Injection Vulnerability

SolarWinds Network Performance Monitor NPM is a network performance monitor from SolarWinds, Inc. that provides monitoring and reporting, tracking of up/down status, real-time analytics, and network performance statistics for routers, virtualized environments, and other devices. A SQL injection...

8.8CVSS8.2AI score0.01665EPSS
SaveExploits0References1
OSV
OSV
•added 2019/07/16 6:15 p.m.•22 views

CVE-2018-13442

SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter...

8.8CVSS5.8AI score0.01665EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/07/16 12:00 a.m.•7 views

PT-2019-8970

Name of the Vulnerable Software and Affected Versions SolarWinds Network Performance Monitor version 12.3 Description The issue allows SQL Injection via the "/api/ActiveAlertsOnThisEntity/GetActiveAlerts" TriggeringObjectEntityNames parameter. Recommendations For SolarWinds Network Performance...

8.8CVSS0.01665EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/16 12:00 a.m.•7 views

CVE-2018-13442: Improper Neutralization of Special Elements used in an SQL Command

SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter...

8.8CVSS5.8AI score0.01665EPSS
SaveExploits0References2
Rows per page
Query Builder