Lucene search
+L

10329 matches found

CNVD
CNVD
added 2019/10/16 12:00 a.m.12 views

Unspecified Vulnerability in Oracle E-Business Suite Advanced Outbound Telephony

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management, etc. Advanced Outbound Telephony is one of the tools used for outbound ca...

8.2CVSS6.8AI score0.01412EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.12 views

The vulnerability of the sbr_process_channel function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to trigger a service failure.

The vulnerability of the sbrprocesschannel function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the swapping of the zero pointer. Exploiting this vulnerability could allow a hacker to cause a service failure...

5.5CVSS5.5AI score0.01165EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.14 views

The vulnerability of the calculate_gain() function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the escape from memory buffers. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

7.8CVSS5.5AI score0.0145EPSS
SaveExploits1References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.20 views

The vulnerability of the ifilter_bank function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to trigger a service failure.

The vulnerability of the ifilterbank function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the swapping of the zero pointer. Exploiting this vulnerability could allow a hacker to cause a service failure...

5.5CVSS5.5AI score0.01207EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.11 views

The vulnerability of the excludedchannels() function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the excludedchannels function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the issue of data being written beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to...

7.8CVSS5.7AI score0.01518EPSS
SaveExploits1References7Affected Software2
CNVD
CNVD
added 2019/10/08 12:00 a.m.14 views

IBM MQ AMQP Listeners Session Fixation Vulnerability

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. AMQP Listeners is one of the AMQP Advanced Message Queuing Protocol listener plug-in. A session fixation...

7.5CVSS6.8AI score0.01113EPSS
SaveExploits0References1
Fedora
Fedora
added 2019/10/07 12:54 a.m.30 views

[SECURITY] Fedora 30 Update: znc-1.7.5-1.fc30

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

8.8CVSS2.3AI score0.04127EPSS
SaveExploits0
FireEye
FireEye
added 2019/10/03 5:00 p.m.20 views

IDA, I Think It’s Time You And I Had a Talk: Controlling IDA Pro With Voice Control Software

Introduction This blog post is the next episode in the FireEye Labs Advanced Reverse Engineering FLARE team Script Series. Today, we are sharing something quite unusual. It is not a tool or a virtual machine distribution, nor is it a plugin or script for a popular reverse engineering tool or...

0.2AI score
SaveExploits0References7
HPE Security Bulletins
HPE Security Bulletins
added 2019/10/02 12:00 a.m.9 views

HPESBST03958 rev.1 - HPE Command View Advanced Edition (CVAE) Multiple Vulnerabilities

Potential Security Impact: Local: Multiple Vulnerabilities; Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP7 CVAE Earlier than 8.6.4-00 HPE XP7 Command View Advanced Edition Suite Earlier than 8.6.4-00 CVSS Scores: | CVE | CVSS Vector | Base...

6.5CVSS6.7AI score0.0501EPSS
SaveExploits1
HPE Security Bulletins
HPE Security Bulletins
added 2019/10/02 12:00 a.m.11 views

HPESBST03959 rev.1 - HPE Command View Advanced Edition (CVAE) Multiple Vulnerabilities

Potential Security Impact: Local: Multiple Vulnerabilities; Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP7 CVAE Earlier than 8.6.5-00 HPE XP7 Command View Advanced Edition Suite Earlier than 8.6.5-00 CVSS Scores: | CVE | CVSS Vector | Base...

8.1CVSS6.7AI score0.37618EPSS
SaveExploits4
Trellix
Trellix
added 2019/10/02 12:00 a.m.51 views

McAfee ATR Analyzes Sodinokibi aka REvil Ransomware-as-a-Service - What The Code Tells Us

McAfee ATR Analyzes Sodinokibi aka REvil Ransomware-as-a-Service – What The Code Tells Us By McAfee Labs · October 2, 2019 Episode 1: What the Code Tells Us McAfee’s Advanced Threat Research team ATR observed a new ransomware family in the wild, dubbed Sodinokibi or REvil, at the end of April 201...

8.1AI score0.70042EPSS
SaveExploits9
Positive Technologies
Positive Technologies
added 2019/10/02 12:00 a.m.25 views

PT-2019-4396 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.8 Description: The issue is related to a memory leak in the clock source create function under /gpu/drm/amd/display/dc in the Linux kernel. This leak can be exploited by a remote attacker to cause a denial o...

10CVSS7.2AI score0.16908EPSS
SaveExploits130References1638
Kitploit
Kitploit
added 2019/10/01 12:00 p.m.105 views

CryptonDie - A Ransomware Developed For Study Purposes

CryptonDie is a ransomware developed for study purposes. Options --key key used to encrypt and decrypt files, default is random stringrecommended --dir Home directory for the attack, default is / --encrypt Encrypt all files --decrypt Decrypt all files --verbose Active verbose mode, default is Fal...

7.3AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2019/10/01 10:35 a.m.53 views

(RHSA-2019:2947) Low: Red Hat Enterprise Linux 5.9 Advanced Mission Critical (AMC) Six-Month Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Advanced Mission Critical for Red Hat Enterprise Linux 5.9 will be retired as of March 31, 2020, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critical...

SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:00 a.m.8 views

The vulnerability of Windows operating systems, related to errors in processing Advanced Local Process Call (ALPC) calls, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of Windows operating systems is related to errors in processing Advanced Local Process Call ALPC calls. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

6.3CVSS5.9AI score0.01047EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2019/09/25 1:00 p.m.111 views

What You Need to Know About Next Gen EDR

Endpoint Detection & Response EDR is the main mode of cybersecurity utilized by many organizations. Already recognized in 2012 as its own category, EDR was pushed as the ideal response to the rapidly changing threatscape that until then had been dealt with though not so successfully primarily...

SaveExploits0References5
The Hacker News
The Hacker News
added 2019/09/24 10:41 a.m.121 views

Cynet 360: The Next Generation of EDR

Many organizations regard Endpoint Detection and Response EDR as their main protection against breaches. EDR, as a category, emerged in 2012 and was rapidly acknowledged as the best answer to the numerous threats that legacy AV unsuccessfully struggled to overcome – exploits, zero-day malware and...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2019/09/16 12:00 a.m.26 views

WordPress Advanced Custom Fields Plugin < 5.7.8 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113529";...

5.4CVSS5.5AI score0.00948EPSS
SaveExploits0References3
Debian
Debian
added 2019/09/15 3:55 p.m.143 views

[SECURITY] [DSA 4522-1] faad2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4522-1 [email protected] https://www.debian.org/security/ Hugo Lefeuvre September 15, 2019 https://www.debian.org/security/faq -...

7.8CVSS8.3AI score0.01518EPSS
SaveExploits12
OpenVAS
OpenVAS
added 2019/09/11 12:00 a.m.55 views

Microsoft Windows Multiple Vulnerabilities (KB4516070)

This host is missing a critical security update according to Microsoft KB4516070 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.3CVSS7AI score0.60366EPSS
SaveExploits8References3
Rows per page
Query Builder