Lucene search
+L

7088 matches found

osv_alea
osv_alea
•added 2019/11/05 5:46 p.m.•23 views

ALEA-2019:3444 new packages: gcc-toolset-9-valgrind

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-9-valgrind packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC...

7AI score
SaveExploits0References1
Rockylinux
Rockylinux
•added 2019/11/05 5:46 p.m.•29 views

new packages: gcc-toolset-9-valgrind

An update is available for gcc-toolset-9-valgrind. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset is a compiler toolset that provides recent version...

2.2AI score
SaveExploits0
osv_alea
osv_alea
•added 2019/11/05 5:46 p.m.•33 views

ALEA-2019:3443 new packages: gcc-toolset-9-elfutils

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-9-elfutils packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC...

7AI score
SaveExploits0References1
AlmaLinux
AlmaLinux
•added 2019/11/05 5:46 p.m.•35 views

new packages: gcc-toolset-9-elfutils

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-9-elfutils packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC...

3AI score
SaveExploits0References1
osv_alba
osv_alba
•added 2019/11/05 5:46 p.m.•25 views

ALBA-2019:3439 new packages: gcc-toolset-9-dwz

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-9-dwz packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC...

7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/10/29 12:00 a.m.•71 views

ActUWzd.dll Code Execution

The vulnerability of the ActUWzd.dll library component of the Mitsubishi MX Component 3 system used for data collection and process control in Citect SCADA is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using a long string...

10CVSS6.5AI score0.10771EPSS
SaveExploits2References4Affected Software2
Fedora
Fedora
•added 2019/10/27 2:05 a.m.•61 views

[SECURITY] Fedora 29 Update: libpcap-1.9.1-1.fc29

Libpcap provides a portable framework for low-level network monitoring. Libpcap can provide network statistics collection, security monitoring and network debugging. Since almost every system vendor provides a different interface for packet capture, the libpcap authors created this...

7.8CVSS2.7AI score0.04436EPSS
SaveExploits0
ThreatPost
ThreatPost
•added 2019/10/23 4:43 p.m.•59 views

ThreatList: Google's Advertising Network Dominates Global Data Collection

When it comes to data collection, Google’s combined arsenal of advertising tools and services continue to help it dominate at a global level. Close behind are AOL Advertising, Moat and AppNexus. Each are singled out by researchers in new report that brings to mind the privacy-busting quote, “If...

0.6AI score
SaveExploits0References11
Veracode
Veracode
•added 2019/10/21 5:29 a.m.•19 views

Denial Of Service (DoS)

mongodb is vulnerable to denial of service. Failure to properly catch an exception arising from an invalid collection name when a database does not exist results in an application crash...

2.4AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2019/10/18 7:01 p.m.•158 views

Execs Could Face Jail Time For Privacy Violations

A new data privacy bill threatens large tech firms, like Facebook, with tough penalties – including monetary fines and up to 20 years of jail time for executives – if they violate user privacy policies. The “Mind Your Own Business Act,” proposed by Sen. Ron Wyden D-Ore. on Thursday, gives the...

SaveExploits0References10
CNVD
CNVD
•added 2019/10/17 12:00 a.m.•18 views

WordPress history-collection plugin path traversal vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. history-collection is a history plugin used in it. A path traversal vulnerability exists in the WordPress history-collection plugi...

7.5CVSS6.7AI score0.04126EPSS
SaveExploits1References1
NVD
NVD
•added 2019/10/10 5:15 p.m.•31 views

CVE-2015-9470

The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter...

7.5CVSS7.7AI score0.04126EPSS
SaveExploits1References2
CVE
CVE
•added 2019/10/10 4:08 p.m.•96 views

CVE-2015-9470

CVE-2015-9470 concerns the WordPress history-collection plugin (

7.5CVSS8.1AI score0.04126EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2019/10/10 4:08 p.m.•36 views

CVE-2015-9470

The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter...

7.8AI score0.04126EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/10/10 12:00 a.m.•8 views

PT-2019-7429

Name of the Vulnerable Software and Affected Versions history-collection plugin versions through 1.1.1 for WordPress Description The issue concerns directory traversal via the var parameter in the download.php endpoint. This allows unauthorized access to sensitive files and directories...

7.5CVSS0.04126EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/10 12:00 a.m.•7 views

CVE-2015-9470: Improper Limitation of a Pathname to a Restricted Directory

The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter...

7.5CVSS7.5AI score0.04126EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2019/10/04 12:00 a.m.•366 views

PHP 7.3 disable_functions Bypass

= 0; $j-- $address = 8; return $out; function write&$str, $p, $v, $n = 8 $i = 0; for$i = 0; $i = 8; function leak$addr, $p = 0, $s = 8 global $abc, $helper; write$abc, 0x68, $addr + $p - 0x10; $leak = strlen$helper-a; if$s != 8 $leak %= 2 $s 8 - 1; return $leak; function parseelf$base $etype =...

SaveExploits0
Kitploit
Kitploit
•added 2019/10/02 11:59 a.m.•309 views

Lockdoor Framework - A Penetration Testing Framework With Cyber Security Resources

Lockdoor Framework : A Penetration Testing Framework With Cyber Security Resources. 09/2019 : 1.0Beta Information Gathring Tools 21 Web Hacking Tools15 Reverse Engineering Tools 15 Exploitation Tools 6 Pentesting & Security Assessment Findings Report Templates 6 Password Attack Tools 4 Shell Tool...

7.5AI score
SaveExploits0References98
Schneier on Security
Schneier on Security
•added 2019/09/26 11:21 a.m.•85 views

On Chinese "Spy Trains"

The trade war with China has reached a new industry: subway cars. Congress is considering legislation that would prevent the world's largest train maker, the Chinese-owned CRRC Corporation, from competing on new contracts in the United States. Part of the reasoning behind this legislation is...

7.3AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2019/09/23 2:33 p.m.•105 views

Google Assistant Audio Privacy Controls Updated After Outcry

Google is unveiling new privacy controls for the Google Assistant virtual assistant, after the company came under fire earlier this year for eavesdropping on users’ personal audio snippets – without their permission. The tech giant on Monday promised more transparency around the audio data that i...

0.4AI score
SaveExploits0References15
Rows per page
Query Builder