Lucene search
+L

140 matches found

OSV
OSV
added 2024/01/16 10:15 p.m.12 views

CVE-2024-0601

A vulnerability was found in ZhongFuCheng3y Austin 1.0. It has been rated as critical. Affected by this issue is the function getRemoteUrl2File of the file src\main\java\com\java3y\austin\support\utils\AustinFileUtils.java of the component Email Message Template Handler. The manipulation leads to...

6.5CVSS5.4AI score0.00482EPSS
SaveExploits1References3
CVE
CVE
added 2024/01/16 9:31 p.m.48 views

CVE-2024-0601

CVE-2024-0601 affects ZhongFuCheng3y Austin 1.0, specifically the getRemoteUrl2File function in AustinFileUtils.java (Email Message Template Handler). Multiple connected sources (NVD, Red Hat, PRION, PT-SEC) corroborate a server-side request forgery (SSRF) condition triggered by insufficient vali...

6.5CVSS6.5AI score0.00482EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/08/31 12:15 p.m.7 views

BELL-CVE-2020-0601 CVE-2020-0601 does not affect BellSoft software

Bulletin has no description...

8.1CVSS5.8AI score0.89436EPSS
SaveExploits15References1
Tenable Nessus
Tenable Nessus
added 2023/06/01 12:00 a.m.46 views

Splunk Enterprise 8.1.0 < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0601)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0601 advisory. - On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted message...

7.7CVSS6.7AI score0.00602EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/02/06 12:00 a.m.18 views

RHEL 8 : thunderbird (RHSA-2023:0601)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0601 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocati...

6.5CVSS7.6AI score0.00372EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/01/23 12:00 a.m.59 views

RHEL 6 / 7 / 8 : AMQ Clients 2.6.0 Release (Important) (RHSA-2020:0601)

The remote Redhat Enterprise Linux 6 / 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0601 advisory. Red Hat AMQ Clients enable connecting, sending, and receiving messages over the AMQP 1.0 wire transport protocol to or from AMQ Brok...

9.1CVSS7.2AI score0.13474EPSS
SaveExploits3References26
Tenable Nessus
Tenable Nessus
added 2022/11/14 12:00 a.m.50 views

EulerOS 2.0 SP9 : golang (EulerOS-SA-2022-2731)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker coul...

8.1CVSS7.3AI score0.89436EPSS
SaveExploits16References5
OpenVAS
OpenVAS
added 2022/11/14 12:00 a.m.38 views

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2731)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.3AI score0.89436EPSS
SaveExploits16References4
Packet Storm
Packet Storm
added 2022/05/16 12:00 a.m.239 views

Ransom.Conti MVID-2022-0601 Code Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/b485c36f28c5c967a50001c9e8d2c29c.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Ransom.Conti Vulnerability: Code Execution Description: Conti looks for and executes DLLs ...

7.4AI score
SaveExploits0
CVE
CVE
added 2022/03/14 2:41 p.m.90 views

CVE-2022-0601

Summary: CVE-2022-0601 corresponds to a reflected XSS in the Countdown, Coming Soon, Maintenance WordPress plugin prior to version 2.2.9. The root cause is inadequate sanitization/escaping of the post parameter before it is output on an admin page. Impact stated in sources is reflected XSS; explo...

6.1CVSS6.2AI score0.00876EPSS
SaveExploits2References2Affected Software1
Circl
Circl
added 2021/12/17 11:07 a.m.12 views

CVE-2021-0601

creationtimestamp| type| source ---|---|--- 2021-12-17 11:07:01+00:00| seen| https://t.me/CyberSecurityTechnologies/4994 2026-09-01 20:02:04+00:00| seen| https://t.me/hackingAttack/35270 2026-09-02 01:02:30+00:00| seen| https://t.me/hackingAttack/35270...

5.5CVSS5.5AI score0.00131EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/14 1:45 p.m.125 views

CVE-2021-0601

CVE-2021-0601 : Android Media Framework vulnerability in encodeFrames of avc_enc_fuzzer.cpp enables a possible out-of-bounds write due to a double free, leading to local information disclosure with no special privileges required. Exploitation requires no user interaction. Affected products/versio...

5.5CVSS5.1AI score0.00131EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/14 1:45 p.m.30 views

CVE-2021-0601

In encodeFrames of avcencfuzzer.cpp, there is a possible out of bounds write due to a double free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

5.5AI score0.00131EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/03/09 12:00 a.m.25 views

SUSE SLED12 Security Update : gimp (SUSE-SU-2020:0601-1)

This update for gimp fixes the following issues : Fix for crashing due to segmentation fault caused by importing ghostscript files. bsc1161998 Security issues fixed: CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625 CVE-2017-17786: Fixed an out-of-bounds read in TGA...

7.8CVSS6.1AI score0.01337EPSS
SaveExploits0References11
GithubExploit
GithubExploit
added 2020/02/03 1:58 p.m.88 views

Exploit for Improper Certificate Validation in Microsoft

CVE-2020-0601 PoC for CVE-2020-0601 – Windows CryptoAPI Cry...

8.1CVSS7AI score0.89436EPSS
SaveExploits15
Kaspersky
Kaspersky
added 2020/01/22 12:00 a.m.105 views

KLA11720 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in speech recognizer can be exploited to...

8.8CVSS9.9AI score0.89436EPSS
SaveExploits16References5
Trend Micro Simply Security
Trend Micro Simply Security
added 2020/01/17 5:40 p.m.119 views

Don’t Let the Vulnera-Bullies Win. Use our free tool to see if you are patched against Vulnerability CVE-2020-0601

So much for a quiet January! By now you must have heard about the new Microsoft® vulnerability CVE-2020-0601, first disclosed by the NSA making it the first Windows bug publicly attributed to the National Security Agency. This vulnerability is found in a cryptographic component that has a range o...

5.8CVSS8.8AI score0.89436EPSS
SaveExploits15
Talos Blog
Talos Blog
added 2020/01/17 10:14 a.m.175 views

Microsoft Patch Tuesday — Jan. 2020: Vulnerability disclosures and Snort coverage

By Jon Munshaw. Updated January 15th: Added an Advanced Custom Detection ACD signature for AMP that can be used to detect exploitation of CVE-2020-0601 by spoofing certificates masquerading as a Microsoft ECC Code Signing Certificate Authority. Microsoft released its monthly security update today...

10CVSS0.7AI score0.99222EPSS
SaveExploits36
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2020/01/17 8:52 a.m.17 views

Minor update (3) for Vivaldi 2.10

Download Vivaldi The following change was made since the second 2.10 update: Upgraded Chromium to 79.0.3945.131 Main photo byJessica Henderson. One of the changes is a mitigation for the widely discussed Windows ECC certificate validation vulnerabilityCVE-2020-0601. However, we strongly recommend...

8.1CVSS7.3AI score0.89436EPSS
SaveExploits15References1
OpenVAS
OpenVAS
added 2020/01/17 12:00 a.m.57 views

Google Chrome Security Update (stable-channel-update-for-desktop_16-2020-01) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.6AI score0.89436EPSS
SaveExploits16References3
Rows per page
Query Builder