Lucene search
+L

2422 matches found

RedHat Linux
RedHat Linux
•added 2018/08/29 6:29 p.m.•28 views

Kernel: hw: cpu: L1 terminal fault (L1TF)

Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented speculative execution of...

5.6CVSS6.9AI score0.08573EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
•added 2018/08/15 3:25 p.m.•16 views

Kernel: hw: cpu: L1 terminal fault (L1TF)

Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented speculative execution of...

5.6CVSS6.8AI score0.05577EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
•added 2018/08/14 8:53 p.m.•20 views

Kernel: hw: cpu: L1 terminal fault (L1TF)

Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented speculative execution of...

5.6CVSS6.9AI score0.08573EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
•added 2018/08/14 8:18 p.m.•16 views

Kernel: hw: cpu: L1 terminal fault (L1TF)

Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented speculative execution of...

5.6CVSS6.9AI score0.08573EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
•added 2018/08/14 8:10 p.m.•18 views

Kernel: hw: cpu: L1 terminal fault (L1TF)

Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented speculative execution of...

5.6CVSS6.9AI score0.08573EPSS
SaveExploits0References10
CNVD
CNVD
•added 2018/06/27 12:00 a.m.•21 views

Pivotal Spring Framework Cross Domain Request Vulnerability

Pivotal Spring Framework is the United States Pivotal Software's set of open source Java, Java EE application framework. The framework helps developers build high-quality applications . A security vulnerability exists in Pivotal Spring Framework versions 5.0.x prior to 5.0.7, 4.3.x prior to 4.3.1...

7.5CVSS5.7AI score0.03229EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/06/26 12:00 a.m.•11 views

Micro Focus Solutions Business Manager Information Disclosure Vulnerability

Micro Focus Solutions Business Manager SBM is a suite of business process automation management solutions from Micro Focus UK. The solution is primarily used for process automation, including software development lifecycle and IT business process management. A security vulnerability exists in Mic...

6.5CVSS6.5AI score0.0084EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/06/25 3:29 p.m.•45 views

CVE-2018-11040

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP JSON with Padding through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser...

7.5CVSS6.8AI score0.03229EPSS
SaveExploits0References2
OSV
OSV
•added 2018/06/25 3:29 p.m.•10 views

DEBIAN-CVE-2018-11040

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP JSON with Padding through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser...

7.5CVSS8.8AI score0.03229EPSS
SaveExploits0References1
OSV
OSV
•added 2018/06/25 3:29 p.m.•38 views

CVE-2018-11040

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP JSON with Padding through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser...

7.5CVSS7.7AI score
SaveExploits0References9
NVD
NVD
•added 2018/06/25 3:29 p.m.•35 views

CVE-2018-11040

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP JSON with Padding through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser...

7.5CVSS7.9AI score0.03229EPSS
SaveExploits0References9
Mend
Mend
•added 2018/06/25 3:00 p.m.•1 views

CVE-2018-11040

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP JSON with Padding through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser...

8.7CVSS0.03229EPSS
SaveExploits0References14
CVE
CVE
•added 2018/06/25 3:00 p.m.•185 views

CVE-2018-11040

CVE-2018-11040 affects Spring Framework: 5.0.x before 5.0.7 and 4.3.x before 4.3.18 (and older unsupported versions). The issue arises because JSONP support can be enabled via JSONP parameters when MappingJackson2JsonView is configured, allowing cross-domain requests through AbstractJsonpResponse...

7.5CVSS8.3AI score0.03229EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
•added 2018/06/25 3:00 p.m.•55 views

CVE-2018-11040

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP JSON with Padding through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser...

8.4AI score0.03229EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2018/06/25 3:00 p.m.•94 views

CVE-2018-11040

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP JSON with Padding through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser...

7.5CVSS5.8AI score0.03229EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/25 12:00 a.m.•4 views

CVE-2018-11040: Inclusion of Functionality from Untrusted Control Sphere

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP JSON with Padding through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser...

7.5CVSS6.5AI score0.03229EPSS
SaveExploits0References20
OSV
OSV
•added 2018/06/22 10:29 p.m.•12 views

CVE-2018-7682

Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains...

6.5CVSS5.8AI score0.0084EPSS
SaveExploits0References1
NVD
NVD
•added 2018/06/22 10:29 p.m.•30 views

CVE-2018-7682

Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains...

6.5CVSS6.4AI score0.0084EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/06/22 10:00 p.m.•32 views

CVE-2018-7682

Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains...

6.4AI score0.0084EPSS
SaveExploits0References1
CVE
CVE
•added 2018/06/22 10:00 p.m.•54 views

CVE-2018-7682

Micro Focus Solutions Business Manager (SBM) prior to version 11.4 is affected by a cross-domain call vulnerability affecting SBM RESTful services. The CVE entry notes that an attacker could invoke SBM RESTful endpoints across domains, implying potential information exposure or unintended access ...

6.5CVSS6.3AI score0.0084EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder