Lucene search
K

1176 matches found

CNVD
CNVD
added 2020/07/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40799)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

7.5CVSS9.1AI score0.00372EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40798)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

7.5CVSS9AI score0.00416EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40796)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

7.5CVSS9AI score0.00547EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40793)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

6.5CVSS9AI score0.00444EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.3 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40794)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

7.5CVSS9AI score0.00554EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40781)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

5CVSS8.9AI score0.0039EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40780)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

4.4CVSS8.9AI score0.00382EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/15 12:0 a.m.4 views

Unspecified Vulnerability in Oracle GoldenGate (CNVD-2020-43707)

OOracle GoldenGate is a comprehensive package for real-time data integration and replication in IT environments from Oracle USA. The product supports real-time data integration, transactional change data capture, data services, transformation and validation capabilities. A security vulnerability...

9.6CVSS9AI score0.01864EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.3 views

The vulnerability of the gf_sm_load_init function on the GPAC multimedia platform, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gfsmloadinit function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.7AI score0.01479EPSS
Exploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.1 views

The vulnerability of the multimedia platform GPAC, related to reading beyond the buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the multimedia platform GPAC is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.9AI score0.02521EPSS
Exploits1References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.2 views

The vulnerability of the gf_text_get_utf8_line function in the multimedia platform GPAC, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gftextgetutf8line function on the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.5AI score0.01411EPSS
Exploits1References7Affected Software4
RedHat Linux
RedHat Linux
added 2020/06/11 9:3 a.m.2 views

jackson-databind: Lacks certain xbean-reflect/JNDI blocking

A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A "gadget" exploit is possible due to a lack of a Java object being blocking from being deserialized. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabili...

9.8CVSS7.1AI score0.26587EPSS
Exploits5References4
RedHat Linux
RedHat Linux
added 2020/06/10 7:23 p.m.2 views

jackson-databind: Serialization gadgets in ibatis-sqlmap

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.1AI score0.18671EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.3 views

The vulnerability in the implementation of the channel between virtual machines of the Cisco IOS operating system arises from insufficient validation of input data. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the implementation of the channel between virtual machines of the Cisco IOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

8.8CVSS7.7AI score0.0095EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.12 views

The vulnerability of the Information Manager Console component of the Oracle Knowledge business application, which allows a perpetrator to compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of the Information Manager Console component of the Oracle Knowledge business application relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the integrity, confidentiality, and accessibility of protected information...

10CVSS7.7AI score0.02129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.2 views

The vulnerability of the Libraries component of Oracle Java SE and Oracle Java SE Embedded software platforms allows attackers to compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of the Libraries component in Oracle Java SE and Oracle Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity, confidentiality, and accessibility of protected...

8.3CVSS6.6AI score0.04051EPSS
Exploits0References8Affected Software7
RedHat Linux
RedHat Linux
added 2020/05/28 6:56 p.m.3 views

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

6.6CVSS5.8AI score0.01845EPSS
Exploits1References4
CNVD
CNVD
added 2020/05/06 12:0 a.m.6 views

Grin has an unspecified vulnerability

Grin is an implementation of the MimbleWimble protocol. A security vulnerability exists in Grin versions prior to 3.1.0. An attacker could exploit the vulnerability to affect the availability of data...

5.3CVSS6.6AI score0.01551EPSS
Exploits0References1
NVD
NVD
added 2020/05/05 10:15 p.m.22 views

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

5.3CVSS5.3AI score0.01551EPSS
Exploits0References3
Prion
Prion
added 2020/05/05 10:15 p.m.10 views

Design/Logic Flaw

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

5CVSS5.3AI score0.01551EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder