Lucene search
+L

9508 matches found

UbuntuCve
UbuntuCve
added 2021/03/15 1:15 p.m.32 views

CVE-2021-20179

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity...

8.1CVSS6.2AI score0.01187EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/03/15 12:01 p.m.35 views

CVE-2021-20179

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity...

7.9AI score0.01187EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the WebRTC extension in the Google Chrome web browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebRTC extension in the Google Chrome web browser relates to its use after release. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

7.3CVSS7.6AI score0.01376EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the samba networking interaction software library smbd lies in the lack of privilege control mechanisms and access management tools. This allows attackers to compromise data integrity.

The vulnerability of the samba networking interaction software library smbd is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability allows an attacker to compromise data integrity...

7.2CVSS6.6AI score0.13274EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.7 views

The vulnerability of the LDAP library in the Samba networking software package allows attackers to compromise data integrity due to security flaws.

The vulnerability of the LDAP library in the Samba networking software package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.9CVSS6.6AI score0.09345EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.6 views

The vulnerability of TightVNC’s remote access components to a computer’s desktop allows a intruder to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of TightVNC’s remote desktop access system components is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.8CVSS7.8AI score0.19461EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the Audio component in the Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Audio component in the Google Chrome browser is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially crafted web page...

8.8CVSS8.2AI score0.23847EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the clidfs.c, libsmb_server.c, and smbXcli_base.c components of the Samba network communication software package lies in the lack of a mechanism to verify input data. This allows attackers to compromise the integrity of the data.

The vulnerability of the clidfs.c, libsmbserver.c, and smbXclibase.c components of the Samba network communication software package is related to a lack of mechanisms for checking input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

5.4CVSS6.6AI score0.07263EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.8 views

The vulnerability of the `dojox.xmpp.util.xmlEncode` component in the dojox JavaScript library allows a attacker to compromise data integrity.

The vulnerability of the dojox.xmpp.util.xmlEncode component in the dojox JavaScript library is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

5.3CVSS7AI score0.01853EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.7 views

The vulnerability of the Samba networking communication package is related to deficiencies in the cryptographic security mechanism. This allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Samba networking communication package is related to deficiencies in the cryptographic security mechanism. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and compromise its integrity...

7.4CVSS6.7AI score0.02581EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.12 views

The vulnerability of many functions in the PHPMailer class in the PHPMailer library allows a attacker to compromise data integrity.

The vulnerability of many functions in the PHPMailer class library is related to the lack of mechanisms for encoding or encrypting output data. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

7.5CVSS6.9AI score0.0378EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.9 views

The vulnerability of the signature verification function in Cisco SD-WAN vEdge Router software allows a attacker to compromise the integrity of protected information, as facilitated by the centralized network management system Cisco SD-WAN vManage.

The vulnerability of the signature verification function in Cisco SD-WAN vEdge Router software is related to errors in verifying the cryptographic signatures. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

6.8CVSS5.5AI score0.00398EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.6 views

The vulnerability of the DCE/RPC-based networking interaction package for Samba lies in its information disclosure capabilities, which allow attackers to compromise data integrity.

The vulnerability of the DCE/RPC-based networking communication package for Samba is related to a implementation error at the DCE-RPC level. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

5.9CVSS6.5AI score0.19103EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.8 views

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.9CVSS6.6AI score0.08305EPSS
SaveExploits0References12Affected Software3
Positive Technologies
Positive Technologies
added 2021/03/15 12:00 a.m.4 views

PT-2021-7756 · Gstreamer +5 · Gstreamer +5

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.18.4 Description: The issue is related to a buffer overflow in the GStreamer multimedia framework, which can be exploited by a remote attacker using a malformed Matroska file. This exploitation can lead to...

10CVSS6.8AI score0.05372EPSS
SaveExploits0References47
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.8 views

The vulnerability of the mpatch_apply function in the Mercuria version control software allows a attacker to compromise data integrity.

The vulnerability of the mpatchapply function in the Mercuria version control tool is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

7.5CVSS6.8AI score0.02356EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.12 views

The vulnerability of the mpatch_decode function in the Mercuria version control software allows a hacker to compromise data integrity.

The vulnerability of the mpatchdecode function in the Mercuria version control software is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker who operates remotely to compromise the integrity of data...

7.5CVSS6.8AI score0.02104EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.10 views

The vulnerability of the SMB1 protocol implementation in Samba network communication software is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the SMB1 protocol implementation in the Samba networking software package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.9CVSS6.6AI score0.02601EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.10 views

The vulnerability in the `parse_cookies_header` function of the `utils.rb` module in the Rack web server and web application interface allows a attacker to compromise data integrity.

The vulnerability of the parsecookiesheader function in the utils.rb module of the Rack web server and web application interface is related to the lack of a mechanism for checking input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

7.5CVSS6.5AI score0.02938EPSS
SaveExploits1References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.15 views

The vulnerabilities of the mem_cache_store.rb and redis_cache_store.rb components of the Ruby on Rails software platform allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the memcachestore.rb and rediscachestore.rb components of the Ruby on Rails software framework is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

9.8CVSS7.1AI score0.45732EPSS
SaveExploits5References11Affected Software5
Rows per page
Query Builder