Lucene search
K

4665 matches found

BDU FSTEC
BDU FSTEC
added 2021/04/16 12:0 a.m.1 views

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

10CVSS8AI score0.02315EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/04/16 12:0 a.m.2 views

The vulnerability of the Hyper-V hardware virtualization system for Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Hyper-V hardware virtualization technology for Microsoft Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.5CVSS6.5AI score0.0076EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/04/14 12:0 a.m.1 views

The vulnerability of the SeaMonkey web browser software lies in the lack of protection for sensitive data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the SeaMonkey web browser lies in the lack of protection for sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.8CVSS5.5AI score
Exploits0References4Affected Software2
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.2 views

PT-2021-2593 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient protection of sensitive data in the Hyper-V hardware virtualization system of Microsoft Windows, which can allow an attacker to gain unauthorize...

6.5CVSS6.1AI score0.0076EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.2 views

PT-2021-2683 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Domain Name System DNS service of Microsoft Windows operating systems. It allows a remote attacker to cause a denial o...

6.8CVSS3.8AI score0.06599EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.2 views

PT-2021-2633

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows operating system, which can allow an attacker to gain unauthorized access to protected information. This can...

5.5CVSS6.1AI score0.00806EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.4 views

PT-2021-2618 · Microsoft · Windows Codecs Library +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Codecs Library affected versions not specified Description: The vulnerability in the Microsoft Windows Codecs Library is related to insufficient protection of internal data. It allows attackers to obtain sensitive informatio...

5.5CVSS5AI score0.00769EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.1 views

PT-2021-2679 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows DNS service, which can be exploited by a remote attacker to gain unauthorized access to protected information...

6.5CVSS6.3AI score0.02494EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.1 views

PT-2021-2582 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Installer component of Microsoft Windows operating systems. This can allow an attacker to gain unauthorized...

5.5CVSS5.2AI score0.0076EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.5 views

PT-2021-2710 · Microsoft · Windows Media Photo Codec +1

Name of the Vulnerable Software and Affected Versions: Windows Media Photo Codec affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Media Photo Codec component, which can allow an attacker to gain unauthorized access to...

6.8CVSS5.3AI score0.0292EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.5 views

PT-2021-2733 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient protection of internal data in the Visual Studio Code editor, which can be exploited to execute arbitrary code. Recommendations: At the momen...

7.8CVSS6.9AI score0.02295EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.2 views

PT-2021-2732 · Microsoft · Windows Console Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Console Driver affected versions not specified Description: The issue is related to insufficient protection of system data in the Windows Console Driver component, which can be exploited to cause a denial of service. This allows an...

5.5CVSS5.2AI score0.00677EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.2 views

The vulnerability of NETGEAR ProSafe Plus JGS516PE microcontroller-based software, related to the lack of protection for service data, allows a intruder to trigger a service failure.

The vulnerability of NETGEAR ProSafe Plus JGS516PE microcontroller-based devices lies in the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

10CVSS8.1AI score0.54294EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.2 views

The vulnerability of Microprogrammed Wi-Fi router software from NETGEAR models D6200, D7000, R6020, R6080, R6050, and JR6150 lies in the lack of protection for operational data. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as D6200, D7000, R6020, R6080, R6050, and JR6150, stems from the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...

6.3CVSS6.6AI score0.0046EPSS
Exploits0References4Affected Software14
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.2 views

The vulnerability of NETGEAR GS808E switch’s microprogramming software, related to the lack of protection for service data, allows a intruder to trigger a maintenance failure.

The vulnerability of NETGEAR GS808E switch microprogramming software is related to the lack of protection for service data. Exploiting this vulnerability could allow an intruder to cause a service failure...

3.2CVSS5.4AI score0.00278EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.1 views

The vulnerability of the Mutt email client, related to insufficient data protection, allows a hacker to execute a “man-in-the-middle” attack.

The vulnerability of the Mutt mail client is related to insufficient data protection. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...

5.9CVSS6.6AI score0.0214EPSS
Exploits0References11Affected Software5
Akamai Blog
Akamai Blog
added 2021/04/09 2:30 p.m.46 views

Caught on Camera: Rethinking IoT Security

We all know that we're on camera pretty much constantly -- most coffee shops, convenience stores, and even offices employ security cameras for protection. But what happens when those devices built to keep us safe become unsafe? Hacks are becoming more frequent and attacking personal, private data...

0.4AI score
Exploits0
Positive Technologies
Positive Technologies
added 2021/04/09 12:0 a.m.1 views

PT-2021-2799 · Sonicwall · Sonicwall Hosted Email Security +1

Name of the Vulnerable Software and Affected Versions: SonicWall Email Security version 10.0.9.x SonicWall Hosted Email Security affected versions not specified Description: The issue is related to insufficient file checking during upload, allowing a remote attacker to gain unauthorized access to...

9CVSS6.9AI score0.16509EPSS
Exploits0References11
Krebs on Security
Krebs on Security
added 2021/04/06 6:55 p.m.45 views

Are You One of the 533M People Who Got Facebooked?

Neer-do-wells leaked personal data -- including phone numbers -- for some 553 million Facebook users this week. Facebook says the data was collected before 2020 when it changed things to prevent such information from being scraped from profiles. To my mind, this just reinforces the need to remove...

6.9AI score
Exploits0
Microsoft Secure
Microsoft Secure
added 2021/04/05 6:0 p.m.41 views

Microsoft Defender for Endpoint now supports Windows 10 on Arm devices

Today, we are excited to announce that Microsoft Defender for Endpoint support of Windows 10 on Arm devices is generally available. This expanded support is part of our continued efforts to extend Microsoft Defender for Endpoint capabilities across all the endpoints defenders need to secure. Arm...

0.3AI score
Exploits0
Rows per page
Query Builder