Lucene search
+L

362 matches found

OSV
OSV
•added 2021/01/11 10:15 a.m.•19 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7AI score
SaveExploits0References1
NVD
NVD
•added 2021/01/11 10:15 a.m.•30 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.3AI score0.0202EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2021/01/11 10:15 a.m.•32 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.1AI score0.0202EPSS
SaveExploits0References3
Prion
Prion
•added 2021/01/11 10:15 a.m.•21 views

Design/Logic Flaw

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

5CVSS7.3AI score0.0202EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/01/11 9:40 a.m.•37 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.3AI score0.0202EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2021/01/11 9:40 a.m.•55 views

CVE-2020-17509

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.4AI score0.01792EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/01/11 9:40 a.m.•59 views

CVE-2020-17508

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS7.3AI score0.0202EPSS
SaveExploits0
CVE
CVE
•added 2021/01/11 9:40 a.m.•117 views

CVE-2020-17508

The CVE-2020-17508 entry concerns Apache Traffic Server’s ATS ESI plugin, with a memory disclosure vulnerability. Affected are ATS/Plugin versions: 7.0.0–7.1.11 and 8.0.0–8.1.0. The available data state that upgrading the plugin is required; no additional exploit details, affected file paths, or ...

7.5CVSS7.2AI score0.0202EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/01/11 9:40 a.m.•100 views

CVE-2020-17509

CVE-2020-17509 affects Apache Traffic Server (ATS) where the negative cache option is vulnerable to cache poisoning. Affected versions are ATS 7.0.0–7.1.11 and 8.0.0–8.1.0. The underlying issue is linked to the negative cache option enabling a cache poisoning attack; if this option is enabled, up...

7.5CVSS7.3AI score0.01792EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/01/11 9:40 a.m.•40 views

CVE-2020-17509

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.4AI score0.01792EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/11 12:00 a.m.•3 views

CVE-2020-17508: Undefined Security Weakness

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected...

7.5CVSS5.8AI score0.0202EPSS
SaveExploits0References1
Microsoft Malware Protection
Microsoft Malware Protection
•added 2020/12/08 5:00 p.m.•37 views

Digital Defense integrates with Microsoft to detect attacks missed by traditional endpoint security

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. You can learn more about MISA here. Cybercriminals have ramped up their initial compromises through phishing and pharming attacks using a variety of tools and tactics that, while numerous, are simple...

0.1AI score
SaveExploits0
Veracode
Veracode
•added 2020/12/07 5:03 a.m.•28 views

Information Disclosure

trafficserver is vulnerable to information disclosure. The ATS ESI plugin allows an attacker to obtain confidential information...

7.5CVSS2.9AI score0.0202EPSS
SaveExploits0References3Affected Software1
Securelist
Securelist
•added 2020/12/04 10:00 a.m.•142 views

The chronicles of Emotet

More than six years have passed since the banking Trojan Emotet was first detected. During this time it has repeatedly mutated, changed direction, acquired partners, picked up modules, and generally been the cause of high-profile incidents and multimillion-dollar losses. The malware is still in...

0.3AI score
SaveExploits0
Apple
Apple
•added 2020/11/12 7:38 a.m.•127 views

About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS0.7AI score0.11091EPSS
SaveExploits12Affected Software4
Openbugbounty
Openbugbounty
•added 2020/10/11 5:59 p.m.•10 views

academy.ats-global.com Cross Site Scripting vulnerability OBB-1398809

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/10/04 11:59 a.m.•14 views

ats-brakes.ru Cross Site Scripting vulnerability OBB-1381242

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Apple
Apple
•added 2020/07/27 8:14 a.m.•78 views

About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

10CVSS0.6AI score0.73829EPSS
SaveExploits24Affected Software3
OSV
OSV
•added 2020/04/27 10:15 p.m.•28 views

CVE-2020-9481

Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read attack...

7.5CVSS6.5AI score
SaveExploits0References2
NVD
NVD
•added 2020/04/27 10:15 p.m.•27 views

CVE-2020-9481

Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read attack...

7.5CVSS7.8AI score0.02387EPSS
SaveExploits0References2
Rows per page
Query Builder