Lucene search
+L

83 matches found

Tenable Nessus
Tenable Nessus
added 2021/10/15 12:0 a.m.35 views

CentOS 8 : grafana (CESA-2021:3771)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:3771 advisory. - grafana: Snapshot authentication bypass CVE-2021-39226 Note that Nessus has not tested for this issue but has instead relied only on the application's...

9.8CVSS7.3AI score0.99888EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/10/13 12:0 a.m.42 views

RHEL 8 : grafana (RHSA-2021:3771)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3771 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Snapshot...

9.8CVSS7.4AI score0.99888EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2018:3771-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.06114EPSS
Exploits1References8
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2018:3771-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.06114EPSS
Exploits1References8
CVE
CVE
added 2020/03/25 8:35 p.m.75 views

CVE-2020-3771

CVE-2020-3771 affects Adobe Photoshop CC 2019 (versions up to 20.0.8) and Photoshop 2020 (versions up to 21.1); it is an out-of-bounds read that could disclose information. APSB20-14 notes remediation by updating to Photoshop 20.0.9 or 21.1.1 (and related fixed versions for other items). Connecte...

4.3CVSS4.9AI score0.02159EPSS
Exploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/03/20 12:0 a.m.43 views

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (APSB20-14)

The version of Adobe Photoshop CC or Photoshop installed on the remote Windows host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 an...

9.8CVSS7.3AI score0.04888EPSS
Exploits0References23
Tenable Nessus
Tenable Nessus
added 2020/03/20 12:0 a.m.32 views

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (macOS APSB20-14)

The version of Adobe Photoshop CC or Photoshop installed on the remote macOS or Mac OS X host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versio...

9.8CVSS7.3AI score0.04888EPSS
Exploits0References23
Tenable Nessus
Tenable Nessus
added 2018/12/10 12:0 a.m.26 views

SUSE SLES12 Security Update : squid (SUSE-SU-2018:3771-2)

This update for squid fixes the following issues : Security issues fixed : CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: Create runtime...

6.1CVSS6.5AI score0.06114EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2018/09/27 12:0 a.m.36 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : strongSwan vulnerabilities (USN-3771-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3771-1 advisory. It was discovered that strongSwan incorrectly handled IKEv2 key derivation. A remote attacker could possibly use this issue to...

7.5CVSS7.1AI score0.07124EPSS
Exploits0References5
OSV
OSV
added 2018/07/20 10:29 p.m.12 views

CVE-2018-3771

An XSS in statics-server = 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser...

6.1CVSS5.8AI score0.00922EPSS
Exploits1References1
CVE
CVE
added 2018/07/20 10:0 p.m.52 views

CVE-2018-3771

Summary: CVE-2018-3771 affects statics-server up to version 0.0.9, where directory listings are not HTML-escaped, allowing an attacker to inject an iframe via the filename and execute arbitrary JavaScript in a victim’s browser. This XSS occurs when the server displays the directory index. Impact ...

6.1CVSS5.9AI score0.00922EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2017/10/26 5:29 p.m.5 views

CVE-2017-3771

System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped from factory without completing BIOS/UEFI initialization process...

7.5CVSS5.8AI score0.00822EPSS
Exploits0References1
CVE
CVE
added 2017/10/26 5:0 p.m.49 views

CVE-2017-3771

CVE-2017-3771 affects Lenovo E95 and ThinkCentre M710s/M710t where the boot process was not adequately secured due to incomplete BIOS/UEFI initialization at factory. This can allow an unauthorized bootloader to run during system startup, weakening protection against rootkits. Lenovo’s advisory LE...

7.5CVSS7.5AI score0.00822EPSS
Exploits0References1Affected Software1
Lenovo
Lenovo
added 2017/10/24 12:0 a.m.16 views

Secure BIOS/UEFI Set-up Incomplete in Lenovo E95 and ThinkCentre M710s/M710t - Lenovo Support US

No description provided...

7.7AI score
Exploits0
Lenovo
Lenovo
added 2017/10/24 12:0 a.m.85 views

Secure BIOS/UEFI Set-up Incomplete in Lenovo E95 and ThinkCentre M710s/M710t - us

Lenovo Security Advisory: LEN-17417 Potential Impact: Unauthorized bootloader allowed to run during system boot, reducing protection against rootkits Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3771 Summary Description: System boot process is not adequately secured...

5CVSS7.5AI score0.00822EPSS
Exploits0
OpenVAS
OpenVAS
added 2017/01/24 12:0 a.m.26 views

Debian: Security Advisory (DSA-3771-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.33199EPSS
Exploits16References3
UbuntuCve
UbuntuCve
added 2016/07/11 2:0 a.m.29 views

CVE-2016-3771

The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29007611 and MediaTek internal bug ALPS02703102...

9.3CVSS7.1AI score0.00421EPSS
Exploits0References2
OSV
OSV
added 2016/07/11 2:0 a.m.6 views

UBUNTU-CVE-2016-3771

The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29007611 and MediaTek internal bug ALPS02703102...

7.8CVSS7.2AI score0.00421EPSS
Exploits0References3
CVE
CVE
added 2016/07/11 1:0 a.m.49 views

CVE-2016-3771

The CVE-2016-3771 entry concerns privilege escalation in MediaTek drivers on Android One devices running before 2016-07-05. The root cause is a vulnerability in the MediaTek driver stack that can be exploited by a specially crafted application to gain elevated privileges within the device, aligne...

9.3CVSS7.5AI score0.00421EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2015/08/16 11:59 p.m.13 views

CVE-2015-3771

IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-3769 and CVE-2015-3772...

7.2CVSS6.2AI score0.00366EPSS
Exploits0References4
Rows per page
Query Builder