Lucene search
+L

115 matches found

Cvelist
Cvelist
•added 2020/02/27 4:00 a.m.•37 views

CVE-2020-3924 TONNET DVR – Firmware Injection

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system...

6.4CVSS9.6AI score0.01258EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/02/27 12:00 a.m.•4 views

PT-2020-17800

Name of the Vulnerable Software and Affected Versions TONNET TAT-76 series affected versions not specified TONNET TAT-77 series affected versions not specified Description The issue concerns the DVR firmware in TAT-76 and TAT-77 series of products, which do not properly verify patch files. This...

10CVSS0.01258EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/02/27 12:00 a.m.•3 views

PT-2020-17799

Name of the Vulnerable Software and Affected Versions TONNET DVR firmware versions in TAT-76 and TAT-77 series affected versions not specified Description The issue concerns a misconfigured authentication mechanism in the DVR firmware. This allows attackers to crack the default password and gain...

10CVSS0.01679EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/27 12:00 a.m.•3 views

CVE-2020-3924: Improper Neutralization of Special Elements used in a Command

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system...

10CVSS8.2AI score0.01258EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/27 12:00 a.m.•4 views

CVE-2020-3923: Improper Authentication

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...

10CVSS8.2AI score0.01679EPSS
SaveExploits0References2
OSV
OSV
•added 2019/11/25 3:15 p.m.•4 views

DEBIAN-CVE-2019-5868

Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

5.5CVSS7AI score0.00526EPSS
SaveExploits0References1
OSV
OSV
•added 2019/11/25 3:15 p.m.•9 views

DEBIAN-CVE-2019-5853

Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.00984EPSS
SaveExploits0References1
OSV
OSV
•added 2019/11/25 3:15 p.m.•15 views

UBUNTU-CVE-2019-5850

Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS7.3AI score0.01009EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2019/09/25 11:02 a.m.•12 views

moliseweb.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-980521 Security Researcher Faizanmark Helped patch 76 vulnerabilities Received 6 Coordinated Disclosure badges Received 58 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting moliseweb.it website and i...

0.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2019/08/12 7:48 a.m.•17 views

chromium-browser: Use-after-poison in offline audio context

Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.00937EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/08/12 7:48 a.m.•11 views

chromium-browser: Site isolation bypass from compromised renderer

Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS7.3AI score0.00739EPSS
SaveExploits0References5
CNVD
CNVD
•added 2019/08/02 12:00 a.m.•18 views

Google Chrome Security Bypass Vulnerability (CNVD-2019-26520)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 76.0.3809.87, which stems from the program not adequately filtering the Open URL service parameter. The vulnerability can be exploited by an attacker to bypass...

8.8CVSS8.6AI score0.0094EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/08/01 3:40 p.m.•46 views

CVE-2016-10843

cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...

8.3AI score0.01444EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/01 3:40 p.m.•66 views

CVE-2016-10843

Summary: CVE-2016-10843 affects cPanel prior to 11.54.0.4 and allows code execution in the context of shared users via the JSON-API (SEC-76). Affected product/vector: cPanel software; vulnerability arises through the JSON-API, enabling code execution in shared-user context. Root cause / impact: N...

8.1CVSS8.2AI score0.01444EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/01 12:00 a.m.•5 views

CVE-2016-10843: Improper Neutralization of Special Elements used in a Command

cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...

8.1CVSS6.1AI score0.01444EPSS
SaveExploits0References2
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2019/07/30 12:00 a.m.•60 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 76 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 76.0.3809.87 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

9.6CVSS7.9AI score0.01076EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2019/05/21 12:00 a.m.•22 views

Rockwell Automation/Allen-Bradley MicroLogix 1100 L16xxx < 10.000 HTTP Remote DoS

Binary data 76.prm...

7.3AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2018/09/06 12:29 p.m.•11 views

ffmc.76.free.fr Improper Access Control vulnerability

Open Bug Bounty ID: OBB-673639 Description| Value ---|--- Affected Website:| ffmc.76.free.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2018/03/12 12:00 a.m.•13 views

Solaris 10 (x86) : 147694-76

JavaSE 7x86: update 76 patch equivalent to JDK 7u76. Date this patch was last updated by Sun : Jan/19/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2018/03/12 12:00 a.m.•17 views

Solaris 10 (sparc) : 147693-76

JavaSE 7: update 76 patch equivalent to JDK 7u76, 64bit. Date this patch was last updated by Sun : Jan/19/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

7AI score
SaveExploits0References1
Rows per page
Query Builder