Lucene search
+L

3200 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2021/04/26 8:8 p.m.33 views

Security Bulletin: IBM® Db2® is vulnerable to weak file permissions allowing access to specific files (CVE-2020-4976)

Summary IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local user to read and write specific files due to weak file permissions. Vulnerability Details CVEID: CVE-2020-4976 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a loc...

5.1CVSS0.5AI score0.00339EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2021/04/26 12:1 p.m.5 views

Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. Note: This issue only affected x86-32 platforms. Other platforms are unaffected.. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

6.5CVSS7.3AI score0.01208EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/04/26 6:4 a.m.7 views

Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. Note: This issue only affected x86-32 platforms. Other platforms are unaffected.. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

6.5CVSS7.3AI score0.01208EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/04/26 5:51 a.m.3 views

Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads

The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. Note: This issue only affected x86-32 platforms. Other platforms are unaffected.. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

6.5CVSS7.3AI score0.01208EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/04/20 12:59 p.m.13 views

perl: heap-based buffer overflow in regular expression compiler leads to DoS

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...

8.2CVSS7.2AI score0.11334EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2018:1009-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.03543EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2018:1031-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.03543EPSS
SaveExploits1References8
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2018:1010-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.03543EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2018:1005-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.03543EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2018:1008-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.03543EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.12 views

SUSE: Security Advisory (SUSE-SU-2018:0993-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.03543EPSS
SaveExploits1References8
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2018:0834-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.2AI score0.52841EPSS
SaveExploits5References34
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2018:1014-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.03543EPSS
SaveExploits1References7
Mageia
Mageia
added 2021/03/27 2:27 p.m.37 views

Updated redis packages fix security vulnerability

It was discovered that there were a number of integer overflow issues in Redis. It is currently believed that the issues only affect 32-bit based systems CVE-2021-21309...

8.8CVSS3.1AI score0.047EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/26 11:2 a.m.3 views

OESA-2021-1093 redis security update

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bi...

8.8CVSS8.3AI score0.047EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/03/23 12:0 a.m.53 views

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4751-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4751-1 advisory. It was discovered that the console keyboard driver in the Linux kernel contained a race condition. A local attacker could use this to expose sensitive...

8.8CVSS7AI score0.01129EPSS
SaveExploits10References19
RedhatCVE
RedhatCVE
added 2021/03/11 11:4 p.m.19 views

CVE-2021-20249

A potential integer overflow in hdrblobVerifyRegion if einfo.offset exceeds SIZEMAX - REGIONTAGCOUNT. This is only possible on 32-bit systems...

3.3AI score
SaveExploits0References1
Microsoft Security Update
Microsoft Security Update
added 2021/03/09 6:0 p.m.37 views

Security Update for Microsoft Office 2016 (KB4493225) 32-Bit Edition

A security vulnerability exists in Microsoft Office 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

3.4AI score
SaveExploits0
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.8 views

Microsoft Windows WalletService 安全漏洞

Microsoft Windows WalletService is an application from Microsoft Corporation USA. hosts objects used by the Wallet Client. A security vulnerability exists in Microsoft Windows WalletService. The following products and editions are affected: Windows 10 Version 1803 for 32-bit Systems,Windows 10...

7.8CVSS7.3AI score0.03215EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.7 views

Microsoft Office ClickToRun 安全漏洞

Microsoft Office ClickToRun is a component of Microsoft Corporation USA for downloading and installing Microsoft Office products. A security vulnerability exists in Microsoft Office ClickToRun. The following products and versions are affected: Microsoft 365 Apps for Enterprise for 32-bit Systems,...

9.3CVSS7.2AI score0.03469EPSS
SaveExploits0References3
Rows per page
Query Builder