Lucene search
+L

19037 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/29 5:55 p.m.8 views

Malicious code in kiln-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced7fe4f98a9d76766dce93b281c2cb0bbefc77a4698e0cfe9a74686ddb1013a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2024/06/28 12:00 a.m.10 views

June 28, 2024—KB5039304 (OS Build 26100.1000) Preview

None None...

5.9AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2024/06/27 7:15 p.m.8 views

CVE-2024-3331

Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected...

6.8CVSS5.8AI score0.00377EPSS
SaveExploits0References2Affected Software5
Vulnrichment
Vulnrichment
added 2024/06/27 6:50 p.m.16 views

CVE-2024-3331 Spotfire: NTLM token leakage

Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected...

6.8CVSS7AI score0.00377EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/27 6:50 p.m.60 views

CVE-2024-3331

CVE-2024-3331 affects TIBCO Spotfire products: Enterprise Runtime for R - Server Edition (1.12.7–1.20.0), Statistics Services (12.0.7–12.3.1, 14.0.0–14.3.0), Analyst (12.0.9–12.5.0, 14.0.0–14.3.0), Desktop (14.0–14.3.0), and Server (12.0.10–12.5.0, 14.0.0–14.3.0). The issue is described as an NTL...

6.8CVSS6.7AI score0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/27 6:50 p.m.47 views

CVE-2024-3331 Spotfire: NTLM token leakage

Vulnerability in Spotfire Spotfire Enterprise Runtime for R - Server Edition, Spotfire Spotfire Statistics Services, Spotfire Spotfire Analyst, Spotfire Spotfire Desktop, Spotfire Spotfire Server allows The impact of this vulnerability depends on the privileges of the user running the affected...

6.8CVSS0.00377EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/27 4:15 p.m.50 views

CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

5.9CVSS0.00147EPSS
SaveExploits0References3
OSV
OSV
added 2024/06/27 3:39 p.m.34 views

CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

5.9CVSS6.8AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2024/06/27 3:39 p.m.11 views

CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

5.9CVSS7.1AI score0.00147EPSS
SaveExploits0References3
CVE
CVE
added 2024/06/27 3:39 p.m.79 views

CVE-2024-6388

CVE-2024-6388 affects the Ubuntu Advantage Desktop Daemon before version 1.12. The issue is that the Pro token is leaked to unprivileged users by being passed as a plaintext argument, which could enable an attacker to gain unauthorized access to an Ubuntu Pro subscription. The vulnerability is do...

5.9CVSS6.9AI score0.00147EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/06/27 3:39 p.m.73 views

CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

5.9CVSS0.00147EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/27 12:00 a.m.10 views

Multiple TIBCO Software Products Security Vulnerabilities

TIBCO Software Spotfire Server and others are products of TIBCO Software, Inc. TIBCO Software Spotfire Server is a platform for integrating, running and managing organizations based on TIBCO Spotfire a data analysis and mining tool.TIBCO Software Spotfire Statistics Services is a comprehensive...

6.8CVSS7AI score0.00377EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2024/06/27 12:00 a.m.32 views

CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

5.9CVSS5.8AI score0.00147EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/06/27 12:00 a.m.11 views

Canonical Ubuntu Advantage Desktop Daemon Security Vulnerability

Canonical Ubuntu Advantage Desktop Daemon is a daemon from Canonical UK that allows desktop applications to interact with Ubuntu Advantage. A security vulnerability exists in Canonical Ubuntu Advantage Desktop Daemon versions prior to 1.12, which originated from passing the Pro token as a paramet...

5.9CVSS6.7AI score0.00147EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/27 12:00 a.m.82 views

UBUNTU-CVE-2024-6388

Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext...

5.9CVSS5.8AI score0.00147EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/06/27 12:00 a.m.15 views

PT-2024-37585 · Canonical +1 · Ubuntu Advantage Desktop Daemon +2

Name of the Vulnerable Software and Affected Versions: Ubuntu Advantage Desktop Daemon versions prior to 1.12 Description: The Ubuntu Advantage Desktop Daemon leaks the Pro token to unprivileged users by passing the token as an argument in plaintext. Recommendations: For versions prior to 1.12,...

5.9CVSS7.2AI score0.00147EPSS
SaveExploits0References13
OSV
OSV
added 2024/06/26 5:15 p.m.5 views

CVE-2024-6354

Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...

7.2CVSS5.8AI score0.00786EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/26 5:15 p.m.24 views

CVE-2024-6354

Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...

7.2CVSS0.00786EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/26 4:20 p.m.33 views

CVE-2024-6354

Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...

0.00786EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/26 4:20 p.m.14 views

CVE-2024-6354

Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...

7AI score0.00786EPSS
SaveExploits0References1
Rows per page
Query Builder