Lucene search
+L

9940 matches found

OSV
OSV
•added 2019/06/26 6:15 p.m.•16 views

CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

5.5CVSS7.5AI score
SaveExploits0References11
NVD
NVD
•added 2019/06/26 6:15 p.m.•30 views

CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

5.5CVSS5.7AI score0.02365EPSS
SaveExploits0References11
Prion
Prion
•added 2019/06/26 6:15 p.m.•37 views

Null pointer dereference

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

4.3CVSS6.3AI score0.02365EPSS
SaveExploits0References11Affected Software1
UbuntuCve
UbuntuCve
•added 2019/06/26 12:00 a.m.•38 views

CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

5.5CVSS6.4AI score0.02365EPSS
SaveExploits0References5
OSV
OSV
•added 2019/06/26 12:00 a.m.•17 views

UBUNTU-CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

6.8CVSS6.7AI score0.02365EPSS
SaveExploits0References6
Microsoft KB
Microsoft KB
•added 2019/06/20 12:00 a.m.•23 views

End of support for Office 2010

End of support for Office 2010 Support for Office 2010 ended on October 13, 2020 and there will be no extension and no extended security updates.Buy or try Microsoft 365 Tip: Not sure what version of Office you have? See Find details for other versions of Office to help you determine what version...

5.6AI score
SaveExploits0
Veracode
Veracode
•added 2019/06/18 1:40 a.m.•15 views

Cross-Site Scripting (XSS)

sanitize-html is vulnerable to cross-site scripting XSS. The opentag function in index.js fails to sanitize HTML attributes when sanitizing HTML tags that have been modified using a custom tag transformation. If an application uses custom tag transformations, and places user input in an HTML...

6.2AI score
SaveExploits0
CNVD
CNVD
•added 2019/06/12 12:00 a.m.•15 views

Siemens Siveillance VMS Authorization Bypass Vulnerability

Siemens Siveillance VMS is a set of surveillance video management software from Siemens Germany. A security vulnerability exists in Siemens Siveillance VMS. An attacker could exploit the vulnerability to change user-defined event attributes...

7.1CVSS6.8AI score0.01034EPSS
SaveExploits0References1
Prion
Prion
•added 2019/05/08 1:29 p.m.•24 views

Design/Logic Flaw

An issue was discovered in app/View/Elements/Events/View/valuefield.ctp in MISP before 2.4.107. There is persistent XSS via link type attributes with javascript:// links...

4.3CVSS5.9AI score0.00806EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2019/05/08 1:00 p.m.•3 views

CVE-2019-11813

An issue was discovered in app/View/Elements/Events/View/valuefield.ctp in MISP before 2.4.107. There is persistent XSS via link type attributes with javascript:// links...

6.1CVSS0.00806EPSS
SaveExploits0References1
CVE
CVE
•added 2019/05/08 1:00 p.m.•61 views

CVE-2019-11813

CVE-2019-11813 applies to MISP before 2.4.107, affecting the view component app/View/Elements/Events/View/value_field.ctp. The issue is a persistent XSS via link type attributes using javascript:// links, enabling potentially scripted payloads in affected installations. Root cause is improper han...

6.1CVSS5.9AI score0.00806EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/05/08 12:00 a.m.•2 views

PT-2019-12502

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.107 Description The issue is related to persistent XSS via link type attributes with javascript:// links in the value field.ctp file. Recommendations For versions prior to 2.4.107, update to version 2.4.107 or later ...

6.1CVSS0.00806EPSS
SaveExploits0References3
Fedora
Fedora
•added 2019/04/10 2:48 a.m.•39 views

[SECURITY] Fedora 30 Update: mod_auth_mellon-0.14.2-1.fc30

The modauthmellon module is an authentication service that implements the SAML 2.0 federation protocol. It grants access based on the attributes received in assertions generated by a IdP server...

8.1CVSS3.4AI score0.02969EPSS
SaveExploits1
Cvelist
Cvelist
•added 2019/04/08 2:30 p.m.•41 views

CVE-2018-19006

OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attributes containing JavaScript are affected. This vulnerability requires the ability of authorized AF users to store...

4.8AI score0.00687EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/04/08 12:00 a.m.•5 views

PT-2019-9699

Name of the Vulnerable Software and Affected Versions OSIsoft PI Vision versions PI Vision 2017 through PI Vision 2017 R2 Description The application contains a cross-site scripting issue where displays that reference AF elements and attributes containing JavaScript are affected. This issue...

4.8CVSS0.00687EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2019/04/06 12:00 a.m.•28 views

Fedora Update for ntfs-3g FEDORA-2019-c1e6c6edd9

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7CVSS7AI score0.00531EPSS
SaveExploits0References2
Fedora
Fedora
•added 2019/04/04 3:14 a.m.•50 views

[SECURITY] Fedora 29 Update: ntfs-3g-2017.3.23-11.fc29

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

7CVSS1.4AI score0.00531EPSS
SaveExploits0
Fedora
Fedora
•added 2019/04/02 12:03 a.m.•49 views

[SECURITY] Fedora 30 Update: ntfs-3g-2017.3.23-11.fc30

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

7CVSS1.4AI score0.00531EPSS
SaveExploits0
Veracode
Veracode
•added 2019/03/25 8:40 a.m.•36 views

ROBOT Attack

Bouncy Castle Cryptography API is vulnerable to ROBOT attack. The vulnerability exists due to the usage of simple RSA CMS signatures without signed attributes...

10CVSS7.2AI score0.02413EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2019/03/21 4:01 p.m.•26 views

CVE-2019-8934

hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest...

3.3CVSS6.4AI score
SaveExploits0References6
Rows per page
Query Builder