Lucene search
+L

17573 matches found

OpenVAS
OpenVAS
•added 2022/03/23 12:00 a.m.•30 views

Fedora: Security Advisory for dotnet6.0 (FEDORA-2022-61d4028014)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.2AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/03/23 12:00 a.m.•34 views

Fedora: Security Advisory for dotnet6.0 (FEDORA-2022-3b24db8072)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.2AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/03/23 12:00 a.m.•38 views

SUSE: Security Advisory (SUSE-SU-2022:0930-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.00338EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2022/03/22 7:01 a.m.•29 views

Security Bulletin: IBM Transformation Extender Advanced is vulnerable to information exposure due to IBM WebSphere Application Server Liberty (CVE-2022-22310)

Summary IBM Transformation Extender Advanced, previously known as IBM Standards Processing Engine, uses IBM WebSphere Application Server Liberty. An information exposure in IBM WebSphere Application Server Liberty has been addressed. Vulnerability Details CVEID: CVE-2022-22310 DESCRIPTION: IBM...

6.5CVSS6.2AI score0.01012EPSS
SaveExploits0Affected Software1
Fedora
Fedora
•added 2022/03/22 3:44 a.m.•59 views

[SECURITY] Fedora 35 Update: dotnet6.0-6.0.103-1.fc35

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

7.5CVSS7AI score0.03551EPSS
SaveExploits0
Fedora
Fedora
•added 2022/03/22 3:19 a.m.•47 views

[SECURITY] Fedora 34 Update: dotnet6.0-6.0.103-1.fc34

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

7.5CVSS7AI score0.03551EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2022/03/21 12:00 a.m.•24 views

SUSE: Security Advisory (SUSE-SU-2022:0901-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.0108EPSS
SaveExploits5References2
Qualys Blog
Qualys Blog
•added 2022/03/18 1:01 p.m.•35 views

Infographic: Log4Shell Vulnerability Impact by the Numbers

The full scope of risk presented by the Log4Shell vulnerability is something unprecedented, spanning every type of organization across every industry. Hard to find but easy to exploit, Log4Shell immediately places hundreds of millions of Java-based applications, databases, and devices at risk...

0.1AI score
SaveExploits0
Citrix
Citrix
•added 2022/03/18 12:00 a.m.•43 views

Automatically launch the downloaded .ica files when using Chrome browser

When you try to launch a published application or desktop from a browser by browsing to storefront or gateway URL, an".ica"file is downloaded. You need to click the .ica file to launch the session instead of auto launch...

7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/18 12:00 a.m.•9 views

CVE-2022-22609: Undefined Security Weakness

The issue was addressed with additional permissions checks. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to read other applications' settings...

7.5CVSS7.2AI score0.01344EPSS
SaveExploits0References1
ThreatPost
ThreatPost
•added 2022/03/17 2:36 p.m.•941 views

Misconfigured Firebase Databases Exposing Data in Mobile Apps

Thousands of mobile apps – some of which have been downloaded tens of millions of times – are exposing sensitive data from open cloud-based databases due to misconfigured cloud implementations, new research from Check Point has found. Check Point Research CPR found that in three months’ time, 2,1...

8.8AI score
SaveExploits0References5
NVD
NVD
•added 2022/03/16 3:15 p.m.•31 views

CVE-2020-25721

Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...

8.8CVSS0.02201EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/03/16 12:00 a.m.•41 views

CVE-2020-25721

Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...

8.4AI score0.02201EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/03/16 12:00 a.m.•37 views

SUSE: Security Advisory (SUSE-SU-2022:0841-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00894EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2022/03/16 12:00 a.m.•56 views

CVE-2020-25721

Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...

8.8CVSS8.6AI score0.02201EPSS
SaveExploits0
NVD
NVD
•added 2022/03/15 3:15 p.m.•53 views

CVE-2022-24752

SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting were passed directly to the database. The maintainers do not know if this could lead to direct SQL injections but took steps to remediate t...

9.8CVSS0.01392EPSS
SaveExploits0References5
Prion
Prion
•added 2022/03/15 3:15 p.m.•25 views

Sql injection

SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting were passed directly to the database. The maintainers do not know if this could lead to direct SQL injections but took steps to remediate t...

7.5CVSS9.2AI score0.01392EPSS
SaveExploits0References5Affected Software1
Imperva Blog
Imperva Blog
•added 2022/03/14 1:37 p.m.•26 views

How Web Applications Are Attacked Through APIs

Happy Pi Day, everyone! As a technician, pi is a number that represents a constant. This constant reflects the ongoing cyberthreats that put enterprise assets at continuous risk as digital transformation and the resultant attack surface grow in parallel. Whether it’s a simple identity theft hack...

0.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/03/14 12:00 a.m.•5 views

PT-2022-15561

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 15.4 Apple iOS versions prior to 15.4 Apple iPadOS versions prior to 15.4 Apple macOS Monterey versions prior to 12.3 Apple watchOS versions prior to 8.5 Description The issue allows a malicious application to read...

7.5CVSS5.8AI score0.01344EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2022/03/14 12:00 a.m.•22 views

Apple iOS and Apple iPadOS access control error vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. An Access Control Error vulnerability exists in the MediaRemote module of Apple iOS and iPadOS, where a malicious...

4.3CVSS5AI score0.00694EPSS
SaveExploits0References8
Rows per page
Query Builder