Lucene search
+L

7691 matches found

Positive Technologies
Positive Technologies
added 2023/09/08 12:00 a.m.11 views

PT-2023-28243 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7.1AI score0.00391EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/09/08 12:00 a.m.8 views

PT-2023-7513 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.62 Description: The issue is related to a use after free vulnerability in the Media Capture component of Google Chrome, which could potentially allow a remote attacker to exploit heap corruption...

9.8CVSS7.1AI score0.99979EPSS
SaveExploits129References1110
Positive Technologies
Positive Technologies
added 2023/09/08 12:00 a.m.26 views

PT-2023-28255 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

5.5CVSS6.9AI score0.00415EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/09/08 12:00 a.m.8 views

PT-2023-28259 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7.1AI score0.00391EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/09/07 12:00 a.m.4 views

PT-2023-36419 · Undefined · Undefined

Уязвимость метода DownloadDataFromUri почтового сервера Microsoft Exchange Server связана с отсутствием защиты служебных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть защищаемую информацию...

7.5CVSS7.2AI score
SaveExploits0References2
HPE Security Bulletins
HPE Security Bulletins
added 2023/09/07 12:00 a.m.15 views

HPESBGN04530 rev.2 - HPE OneView, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - All versions prior to 6.60.05, 7.00.00, 7.10.00, 7.20.00, 8.00.00, 8.10.00, 8.20.00, 8.30.00, 8.40.00,...

9.8CVSS6.1AI score0.75116EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/09/07 12:00 a.m.13 views

Hewlett Packard Enterprise OneView Security Breach

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. Hewlett Packard Enterprise OneView has a security vulnerability that stems from the presence of potential security holes that can be exploited remotely...

9.8CVSS6.6AI score0.01216EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/09/07 12:00 a.m.7 views

PT-2023-23038 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: A remote authentication bypass issue exists in the HPE OneView API. This issue could be remotely exploited to allow authentication bypass, disclosure of sensitive information, and denia...

9.8CVSS7.4AI score0.01216EPSS
SaveExploits0References17
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:00 a.m.15 views

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the insufficient checking of incoming requests. This allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to insufficient validation of incoming requests. Exploiting this vulnerability can allow a malicious actor to expose sensitive information or cause service failures by...

8.5CVSS7.4AI score0.01957EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/06 12:00 a.m.9 views

PT-2023-27762

Name of the Vulnerable Software and Affected Versions AccessControl versions prior to 4.4 AccessControl versions prior to 5.8 AccessControl versions prior to 6.2 Description The issue arises from Python's "format" functionality, which allows someone controlling the format string to access objects...

7.7CVSS6.1AI score0.00524EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2023/09/06 12:00 a.m.11 views

PT-2023-9273 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.5 IBM Sterling B2B Integrator Standard Edition versions 6.2.0.0 through 6.2.0.2 Description: The issue is related to the disclosure of system data to unauthorized...

3.7CVSS6.8AI score0.00314EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2023/09/05 12:30 p.m.38 views

Salt can cause Git Providers to get wrong data

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.6AI score0.00288EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/09/05 12:30 p.m.24 views

GHSA-QVH6-3J7X-3HQ7 Salt can cause Git Providers to get wrong data

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS5.6AI score0.00288EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2023/09/05 11:15 a.m.87 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.1AI score0.00288EPSS
SaveExploits0
NVD
NVD
added 2023/09/05 11:15 a.m.21 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.7AI score0.00288EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2023/09/05 11:15 a.m.31 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.1AI score0.00288EPSS
SaveExploits0References2
PyPA
PyPA
added 2023/09/05 11:15 a.m.12 views

PYSEC-2023-169

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7AI score0.00288EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/09/05 11:15 a.m.32 views

Design/Logic Flaw

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

3.5CVSS7.5AI score0.00288EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/09/05 11:15 a.m.25 views

PYSEC-2023-169

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.2AI score0.00288EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/05 11:15 a.m.8 views

UBUNTU-CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.8AI score0.00288EPSS
SaveExploits0References3
Rows per page
Query Builder