Lucene search
+L

5742 matches found

Mend
Mend
•added 2014/11/15 9:00 p.m.•7 views

CVE-2014-3500

Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL...

6.9CVSS0.04097EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/15 12:00 a.m.•6 views

CVE-2014-3500: Undefined Security Weakness

Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL...

6.4CVSS5.9AI score0.04097EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/11/15 12:00 a.m.•8 views

PT-2014-5362

Name of the Vulnerable Software and Affected Versions Apache Cordova Android versions prior to 3.5.1 Description The issue allows remote attackers to change the start page via a crafted intent URL. Recommendations For versions prior to 3.5.1, update to version 3.5.1 or later to resolve the issue...

6.4CVSS0.04097EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2014/11/04 12:00 a.m.•27 views

Windows Services Start

This routine starts not running but required windows services before launching an authenticated scan. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.2AI score
SaveExploits0
Prion
Prion
•added 2014/10/07 2:55 p.m.•28 views

Information disclosure

gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the 1 a1 or 2 a2 parameter in a start action...

10CVSS7.8AI score0.03321EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2014/10/07 2:00 p.m.•43 views

CVE-2014-6433

gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the 1 a1 or 2 a2 parameter in a start action...

7.3AI score0.03321EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2014/10/02 12:00 a.m.•7 views

PT-2014-7218

Name of the Vulnerable Software and Affected Versions GoPro HERO 3+ affected versions not specified Description The issue allows remote attackers to execute arbitrary files. This is achieved via the a1 or a2 parameter in a start action. No information is provided about the estimated number of...

10CVSS0.03321EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2014/10/01 12:00 a.m.•66 views

CentOS Update for nss CESA-2014:1246 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.06329EPSS
SaveExploits5References2
The Hacker News
The Hacker News
•added 2014/09/30 11:25 p.m.•20 views

Microsoft Unveils Windows 10 — The Next Version Of Windows Operating system

While the whole world was waiting for the next generation of Windows operating system, i.e. Windows 9, but skipping right over 9, Microsoft has announced the next version of its Windows is Windows 10, disclosing its first details on Tuesday at an event in San Francisco. The latest version of...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2014/09/29 12:00 a.m.•58 views

Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20140916)

A flaw was found in the way TLS False Start was implemented in NSS. An attacker could use this flaw to potentially return unencrypted information from the server. CVE-2013-1740 A race condition was found in the way NSS implemented session ticket handling as specified by RFC 5077. An attacker coul...

10CVSS7.4AI score0.06329EPSS
SaveExploits5References6
OpenVAS
OpenVAS
•added 2014/09/17 12:00 a.m.•62 views

RedHat Update for nss and nspr RHSA-2014:1246-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.06329EPSS
SaveExploits5References2
RedHat Linux
RedHat Linux
•added 2014/09/16 5:39 a.m.•64 views

Moderate: Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update

Updated nss and nspr packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

10CVSS7.3AI score0.06329EPSS
SaveExploits5References9
RedHat Linux
RedHat Linux
•added 2014/09/16 5:39 a.m.•11 views

nss: false start PR_Recv information disclosure security issue

A flaw was found in the way TLS False Start was implemented in NSS. An attacker could use this flaw to potentially return unencrypted information from the server...

5.8CVSS6.6AI score0.01664EPSS
SaveExploits1References4
The Hacker News
The Hacker News
•added 2014/09/12 9:40 p.m.•14 views

Windows 9 Start Menu Demo Video Leaked Online

After providing the glimpses of the next Windows, one of the screenshot leakers has now obtained a short video showing off a build of the very new Windows 9, aka "Threshold," features as well as how users can expect to use it. Two German sites, ComputerBase and WinFuture, posted 20 screenshots on...

6.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2014/08/07 12:00 a.m.•5 views

PT-2014-5489

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.20 Description The issue allows remote attackers to bypass access restrictions. This can be achieved by sending a request to "index.php" followed by a direct request to a file that calls the session start functio...

7.5CVSS0.02646EPSS
SaveExploits1References6
Patchstack
Patchstack
•added 2014/08/01 12:00 a.m.•12 views

WordPress Smart Start Theme - Cross Site Scripting

This WordPress theme is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the theme...

3.6AI score
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2014/07/31 12:00 a.m.•62 views

Oracle Traffic Director Multiple Vulnerabilities (July 2014 CPU)

The remote host is running an unpatched version of Oracle Traffic Director that is affected by the following vulnerabilities : - The implementation of Network Security Services NSS does not ensure that data structures are initialized, which could result in a denial of service or disclosure of...

9.3CVSS6.8AI score0.04601EPSS
SaveExploits5References9
RedHat Linux
RedHat Linux
•added 2014/07/29 3:40 p.m.•22 views

libjpeg: information leak (read of uninitialized memory)

The getsos function in jdmarker.c in 1 libjpeg 6b and 2 libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan SOS JPEG markers,...

5CVSS7AI score0.0973EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2014/07/28 12:00 a.m.•59 views

CentOS Update for nss-util CESA-2014:0917 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.06329EPSS
SaveExploits5References2
OpenVAS
OpenVAS
•added 2014/07/28 12:00 a.m.•66 views

CentOS Update for nss CESA-2014:0917 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.06329EPSS
SaveExploits5References2
Rows per page
Query Builder