Lucene search
+L

4325 matches found

OSV
OSV
•added 2020/02/07 12:00 p.m.•10 views

RUSTSEC-2020-0169 multi_mut is Unmaintained

Last release was about 6 years ago. There is an outstanding soundness issue. The maintainer has not responded for two years to the existing soundness issue. Rust compiler has enabled errors relating to LLVM noalias rules and may not compile anymore where as the old compiler versions had turned...

7.2AI score
SaveExploits0References5
RustSec
RustSec
•added 2020/02/07 12:00 p.m.•16 views

multi_mut is Unmaintained

Last release was about 6 years ago. There is an outstanding soundness issue. The maintainer has not responded for two years to the existing soundness issue. Rust compiler has enabled errors relating to LLVM noalias rules and may not compile anymore where as the old compiler versions had turned...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/02/06 12:00 a.m.•22 views

The vulnerability of the GraalVM Compiler component of the Oracle GraalVM Enterprise Edition allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GraalVM Compiler component in the Oracle GraalVM Enterprise Edition is related to access control deficiencies. Exploiting this vulnerability may allow an attacker operating remotely to gain unauthorized access to protected information...

5.8CVSS6.5AI score0.01489EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/01/30 12:00 a.m.•50 views

Joomla! 3.x < 3.9.15 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A cross-site request forgery CSRF exists in versions 3.0.0 to 3.9.14 due to a missing token checks in the batch actions of various components CVE-2020-8419 - A cross-site...

8.8CVSS7.6AI score0.01015EPSS
SaveExploits0References7
NVD
NVD
•added 2020/01/28 9:15 p.m.•35 views

CVE-2020-8420

An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...

8.8CVSS8.7AI score0.00736EPSS
SaveExploits0References1
OSV
OSV
•added 2020/01/28 9:15 p.m.•23 views

CVE-2020-8420

An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...

8.8CVSS6.8AI score
SaveExploits0References1
Prion
Prion
•added 2020/01/28 9:15 p.m.•21 views

Cross site request forgery (csrf)

An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...

6.8CVSS8.6AI score0.00736EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/01/28 9:15 p.m.•10 views

CVE-2020-8420

An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...

8.8CVSS5.3AI score0.00736EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/01/28 8:58 p.m.•44 views

CVE-2020-8420

An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...

8.7AI score0.00736EPSS
SaveExploits0References1
CVE
CVE
•added 2020/01/28 8:58 p.m.•180 views

CVE-2020-8420

CVE-2020-8420 affects Joomla! up to version 3.9.14 (before 3.9.15). The issue is a CSRF vulnerability caused by a missing CSRF token check in the LESS compiler of com_templates. The provided connected documents confirm the vulnerable component and root cause but do not provide exploit details or ...

8.8CVSS8.5AI score0.00736EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/01/28 12:00 a.m.•10 views

PT-2020-20125 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.15 Description: A missing CSRF token check in the LESS compiler of com templates causes a CSRF issue. This allows for potential exploitation. Recommendations: For versions prior to 3.9.15, update to version 3.9.1...

8.8CVSS7.3AI score0.00736EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/28 12:00 a.m.•2 views

CVE-2020-8420: Cross-Site Request Forgery (CSRF)

An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler of comtemplates causes a CSRF vulnerability...

8.8CVSS7.7AI score0.00736EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•38 views

Huawei EulerOS: Security Advisory for gcc (EulerOS-SA-2019-2073)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.03181EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/01/20 12:00 a.m.•11 views

The vulnerability of the IonMonkey JIT-compiler for Firefox and Firefox ESR browsers lies in the access to resources through incompatible types. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the IonMonkey JavaScript compiler for Firefox and Firefox ESR browsers is related to a data type conversion error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a...

10CVSS8AI score0.46311EPSS
SaveExploits7References8Affected Software4
RedhatCVE
RedhatCVE
•added 2020/01/19 9:45 a.m.•33 views

CVE-2019-15847

The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimize multiple calls of the builtindarn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single...

7.5CVSS3.7AI score0.03181EPSS
SaveExploits0References4
Veracode
Veracode
•added 2020/01/18 1:01 a.m.•47 views

Arbitrary Code Execution

mozilla firefox is vulnerable to arbitrary code execution. Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion...

8.8CVSS4.4AI score0.46311EPSS
SaveExploits7References9Affected Software5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/15 12:00 a.m.•5 views

CVE-2020-2595: Undefined Security Weakness

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: GraalVM Compiler. The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalV...

5.8CVSS6AI score0.01489EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/01/14 12:00 a.m.•89 views

Mozilla Thunderbird Security Advisory (MFSA2020-04) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

8.8CVSS7.7AI score0.46311EPSS
SaveExploits9References3
Symantec
Symantec
•added 2020/01/14 12:00 a.m.•54 views

Oracle GraalVM Enterprise Edition CVE-2020-2595 Remote Security Vulnerability

Description Oracle GraalVM Enterprise Edition is prone to a remote security vulnerability. This vulnerability can be exploited over the 'Multiple' protocols. The 'GraalVM Compiler' component is affected. This vulnerability affects the following supported versions: 19.3.0.2 Technologies Affected...

1AI score0.01489EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/01/14 12:00 a.m.•132 views

CVE-2020-0646

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ‘.NET Framework Remote Code Execution Injection Vulnerability’. Recent assessments: zeroSteiner at March 20, 2020 1:31pm UTC reported: The SharePoint WorkFlow component is affected...

10CVSS8.7AI score0.99222EPSS
SaveIn wildExploits5References3
Rows per page
Query Builder