Lucene search
+L

92 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.4 views

Malicious code in wlwz-2312-5401 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0b009ba4ab99b7752b4f12d1745fc6a5d191530ce50e682ff44a94d5fbf21d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/01/24 8:23 p.m.8 views

MAL-2024-657 Malicious code in wlwz-2312-5401 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0b009ba4ab99b7752b4f12d1745fc6a5d191530ce50e682ff44a94d5fbf21d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/05/04 12:0 a.m.30 views

Ubuntu 20.04 LTS / 22.04 LTS : DPDK vulnerabilities (USN-5401-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5401-1 advisory. Wenxiang Qian discovered that DPDK incorrectly checked certain payloads. An attacker could use this issue to cause DPDK to crash, resulting i...

7.5CVSS7.3AI score0.01259EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/04/28 8:15 p.m.8 views

CVE-2022-29081

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

9.8CVSS7.2AI score0.83543EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.28 views

Mageia: Security Advisory (MGASA-2018-0018)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.7AI score0.18756EPSS
Exploits68References10
OpenVAS
OpenVAS
added 2021/11/08 12:0 a.m.22 views

Mozilla Firefox Security Advisory (MFSA2017-05) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

10CVSS7.8AI score0.17484EPSS
Exploits19References27
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2017:0732-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.3AI score0.17484EPSS
Exploits9References5
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2017:0714-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.3AI score0.17484EPSS
Exploits9References4
Tenable Nessus
Tenable Nessus
added 2020/12/15 12:0 a.m.40 views

Oracle Linux 8 : libpq (ELSA-2020-5401)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5401 advisory. 12.5-1 - Rebase to upstream release 12.5 Resolves: rhbz1898228 Resolves: rhbz1901558 Tenable has extracted the preceding description block directly fro...

8.1CVSS6.6AI score0.02586EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2020/12/14 12:58 p.m.77 views

Important: Red Hat Security Advisory: libpq security update

An update for libpq is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.1CVSS6.7AI score0.02586EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2020/12/14 12:0 a.m.45 views

RHEL 8 : libpq (RHSA-2020:5401)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5401 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. The following...

8.1CVSS6.7AI score0.02586EPSS
Exploits0References6
CVE
CVE
added 2020/02/27 7:30 p.m.49 views

CVE-2020-5401

CVE-2020-5401 affects Cloud Foundry Routing Release (prior to 0.197.0) which includes GoRouter. Malicious clients can send invalid headers, causing caching layers to reject subsequent legitimate clients. The vulnerability, described in multiple sources, results in degraded access for users to app...

5.3CVSS5.2AI score0.01037EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/02/27 7:30 p.m.22 views

CVE-2020-5401 Cloud Foundry GoRouter is vulnerable to cache poisoning

Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app...

5.3CVSS5.3AI score0.01037EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.24 views

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2017-1047)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.1AI score0.17484EPSS
Exploits9References2
CNVD
CNVD
added 2019/12/11 12:0 a.m.7 views

Siemens SiNVR 3 Video Server Authentication Bypass Vulnerability

SiNVR is the Siemens OEM version of SiVMS, a video management solution acquired by PKE Deutsch land gmmbH and formerly distributed by Schille Informationssysteme gmmbH. An authentication bypass vulnerability exists in the HTTP service default port 5401/tcp of the Siemens SiNVR 3 Video Server. A...

9.8CVSS7AI score0.02652EPSS
Exploits0References1
Circl
Circl
added 2019/03/26 7:32 p.m.8 views

CVE-2014-5401

creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:11+00:00| seen| https://t.me/cibsecurity/3363...

10CVSS8.7AI score0.05009EPSS
Exploits0References1
CVE
CVE
added 2019/03/26 4:21 p.m.45 views

CVE-2014-5401

The CVE-2014-5401 issue affects Hospira MedNet software versions 5.8 and earlier, which bundle vulnerable JBoss Enterprise Application Platform components. The root cause is improper handling of the affected JBoss code, enabling unauthenticated remote code execution on MedNet servers. Hospira has...

10CVSS9.6AI score0.05009EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2018/10/08 3:0 p.m.94 views

CVE-2018-5401

CVE-2018-5401 affects Auto-Maskin DCU 210E, RP-210E and Marine Pro Observer Android App. The embedded systems transmit process control data in cleartext via unencrypted Modbus, allowing network-based observers to infer configurations, sensors in use, and related details. Affected: ARMv7 devices p...

9.1CVSS6.4AI score0.00868EPSS
Exploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/18 12:33 a.m.64 views

Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM SONAS

Summary There are security vulnerabilities in versions of Mozilla Firefox that are shipped with versions 1.5.1.0 to 1.5.2.5 of IBM SONAS Vulnerability Details IBM SONAS is shipped with Mozilla Firefox. There are vulnerabilities in certain versions of Mozilla Firefox shipped in certain versions of...

10CVSS1.9AI score0.17484EPSS
Exploits13Affected Software1
OSV
OSV
added 2018/06/11 9:29 p.m.4 views

CVE-2017-5401

A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...

9.8CVSS7.7AI score
Exploits0References14
Rows per page
Query Builder