Lucene search
+L

35965 matches found

CVE
CVE
added 2020/10/07 9:49 p.m.44 views

CVE-2015-7379

This CVE entry is rejected/not used per the initial description.

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/10/07 12:00 a.m.30 views

Kentico CMS < 8.2.42 Multiple Vulnerabilities

According to its self-reported version number, the version of Kentico CMS on the remote host is prior to 8.2.42. It is, therefore, affected by multiple vulnerabilities : - Multiple cross-site scripting XSS vulnerabilities exist in the UIPage.aspx parameter name and the CMSBodyClass cookie variabl...

5.8CVSS5.8AI score0.05143EPSS
SaveExploits4References4
RedHat Linux
RedHat Linux
added 2020/10/01 11:38 a.m.79 views

Moderate: Red Hat Security Advisory: Red Hat AMQ Broker 7.4.5 release and security update

Red Hat AMQ Broker 7.4.5 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

9.8CVSS7.2AI score0.20702EPSS
SaveExploits3References5
RedHat Linux
RedHat Linux
added 2020/09/29 8:27 p.m.41 views

Moderate: Red Hat Security Advisory: libsrtp security and bug fix update

An update for libsrtp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.8CVSS7.3AI score0.08253EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2020/09/29 12:00 a.m.72 views

EulerOS Virtualization for ARM 64 3.0.6.0 : perl-DBD-MySQL (EulerOS-SA-2020-2044)

According to the version of the perl-DBD-MySQL package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The DBD::mysql module through 4.043 for Perl uses the mysqlssl=1 setting to mean that SSL is optional even though...

5.9CVSS6.8AI score0.07083EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/09/29 12:00 a.m.17 views

Huawei EulerOS: Security Advisory for perl-Email-Address (EulerOS-SA-2020-2104)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.03072EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/28 12:00 a.m.49 views

EulerOS 2.0 SP3 : perl-Email-Address (EulerOS-SA-2020-2104)

According to the versions of the perl-Email-Address package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Algorithmic complexity vulnerability in Address.pm in the Email-Address module 1.908 and earlier for Perl allows remote attackers to...

7.8CVSS7.2AI score0.03072EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2020/09/26 6:24 p.m.53 views

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) (CVE-2015-0899, CVE-2014-0114, CVE-2016-1181 and CVE-2016-1182)

Summary WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager SKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in t...

8.2CVSS2.7AI score0.99032EPSS
SaveExploits4Affected Software1
Circl
Circl
added 2020/09/24 7:55 a.m.7 views

CVE-2015-4719

creationtimestamp| type| source ---|---|--- 2020-09-24 07:55:15+00:00| seen| https://t.me/cibsecurity/14868...

9.8CVSS8.7AI score0.01464EPSS
SaveExploits0References1
CVE
CVE
added 2020/09/24 1:13 a.m.82 views

CVE-2015-4719

CVE-2015-4719 affects Pexip Infinity prior to v10, where the client API authentication mechanism allows remote attackers to gain privileges via a crafted request. Documents from NVD/Red Hat/CVE lists repeat this description and identify the impact as privilege escalation with network access and n...

9.8CVSS9.5AI score0.01464EPSS
SaveExploits0References1Affected Software1
Check Point Advisories
Check Point Advisories
added 2020/09/21 12:00 a.m.33 views

Microsoft Internet Explorer Memory Corruption (CVE-2015-2419)

A remote code execution vulnerability exists in the way that the JScript engine, when rendered in Internet Explorer, handles objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Internet Explorer...

9.3CVSS4.3AI score0.53407EPSS
SaveExploits2
Prion
Prion
added 2020/09/19 4:15 a.m.37 views

Design/Logic Flaw

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter...

3.6CVSS8.8AI score0.10736EPSS
SaveExploits2References24Affected Software35
ATTACKERKB
ATTACKERKB
added 2020/09/17 12:00 a.m.5 views

CVE-2020-5421

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter...

8.7CVSS7AI score0.10736EPSS
SaveExploits1References41Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:00 a.m.11 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can...

10CVSS8.2AI score0.04187EPSS
SaveExploits0References3
Spring Security Advisories
Spring Security Advisories
added 2020/09/17 12:00 a.m.13 views

RFD Protection Bypass via jsessionid

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter...

8.7CVSS7.3AI score0.10736EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:00 a.m.11 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can...

7.1CVSS7.2AI score0.03231EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:00 a.m.9 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to writing data beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 is related to data writing beyond the buffer limits in memory. Exploiting this vulnerability can...

9.3CVSS8.1AI score0.03293EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:00 a.m.11 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 is related to the use of memory after it is freed. Exploiting this vulnerability can...

9.3CVSS7.9AI score0.04243EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2020/09/12 10:33 a.m.15 views

www2.letao-cn.com Cross Site Scripting vulnerability OBB-1329250

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.6AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2020/09/10 5:03 p.m.18 views

Security Bulletin: A Security Vulnerability, exists in the Android platform used by the Cordova tools in Rational Software Architect for WebSphere Software (CVE-2015-1835)

Summary A security vulnerability, CVE-2015-1835, has been discovered that affects the Android platform used by the Cordova tools in Rational Software Architect for WebSphere Software. Vulnerability Details CVEID: CVE-2015-1835 DESCRIPTION: The Apache Cordova could allow a remote attacker to execu...

5.3CVSS1.2AI score0.06568EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder