Lucene search
K

8697 matches found

OpenVAS
OpenVAS
added 2023/09/25 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2023:3739-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.3AI score0.00132EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/09/25 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2023:3731-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS8AI score0.00581EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/22 12:0 a.m.3 views

The vulnerability relates to the set of tools and libraries used for creating, importing, and exporting 3D models with the Autodesk FBX SDK. It stems from the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the tools and libraries used for creating, importing, and exporting 3D models in the Autodesk FBX SDK is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created FBX file...

7.8CVSS7.8AI score0.00138EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:0 a.m.3 views

The vulnerability of the libbrd library in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the libbrd library in the GNU Binutils development environment is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.8AI score0.00319EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:0 a.m.1 views

The vulnerability of the libbfd library in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the libbfd library in the GNU Binutils development environment is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00319EPSS
Exploits1References4Affected Software2
Fedora
Fedora
added 2023/09/15 7:2 p.m.25 views

[SECURITY] Fedora 39 Update: python-pyramid-2.0.2-1.fc39

Pyramid is a small, fast, down-to-earth, open source Python web development framework. It makes real-world web application development and deployment more fun, more predictable, and more productive...

5.3CVSS5.2AI score0.00435EPSS
Exploits0
Citrix
Citrix
added 2023/09/14 12:0 a.m.5 views

Microsoft Security Update Validation Report September 2023

Microsoft’s September 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues September still be found upon implementation. Follow best practices for testing and installing...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/09/12 8:46 a.m.3 views

Malicious code in cloud-message-sdks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 479df48e71ae41e05b71f56e47a5a0a444e5992d40ed13730baf980dd5d3e7ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Schneier on Security
Schneier on Security
added 2023/09/11 11:4 a.m.55 views

On Robots Killing People

The robot revolution began long ago, and so did the killing. One day in 1979, a robot at a Ford Motor Company casting plant malfunctioned--human workers determined that it was not going fast enough. And so twenty-five-year-old Robert Williams was asked to climb into a storage rack to help move...

6.8AI score
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2023/09/07 3:13 p.m.18 views

A Look at Our Development Process of the Cloud Resource Enrichment API

In today's ever-evolving cybersecurity landscape, detecting and responding to cyber threats is paramount for organizations in cloud environments. At the same time, investigating cyber threat alerts can be arduous due to the time-consuming and complex process of data collection. To tackle this pai...

6.7AI score
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2023/09/07 3:13 p.m.3 views

A Look at Our Development Process of the Cloud Resource Enrichment API

In today's ever-evolving cybersecurity landscape, detecting and responding to cyber threats is paramount for organizations in cloud environments. At the same time, investigating cyber threat alerts can be arduous due to the time-consuming and complex process of data collection. To tackle this pai...

6.8AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:0 a.m.1 views

The vulnerability of the application development environment and the Angular development platform, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the application development environment and the Angular single-page application platform exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.7AI score0.04265EPSS
Exploits1References7Affected Software1
Fedora
Fedora
added 2023/09/05 12:41 a.m.34 views

[SECURITY] Fedora 38 Update: python-pyramid-2.0.2-1.fc38

Pyramid is a small, fast, down-to-earth, open source Python web development framework. It makes real-world web application development and deployment more fun, more predictable, and more productive...

5.3CVSS5.2AI score0.00435EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:0 a.m.1 views

The vulnerability of the angular.copy() function in the application design environment and the Angular development platform allows a attacker to trigger a service failure.

The vulnerability of the angular.copy function in the application and platform development environment for one-page applications related to Angular involves the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause...

5.3CVSS6.5AI score0.00272EPSS
Exploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:0 a.m.1 views

The vulnerability of the input[url] function in the application development environment and the Angular platform allows attackers to trigger a service failure.

The vulnerability of the inputurl function in the application development environment and the Angular platform is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

5.3CVSS6.5AI score0.00521EPSS
Exploits1References8Affected Software2
OpenVAS
OpenVAS
added 2023/09/05 12:0 a.m.14 views

Fedora: Security Advisory for python-pyramid (FEDORA-2023-b213d84a16)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.5AI score0.00435EPSS
Exploits0References2
NVD
NVD
added 2023/09/04 6:15 p.m.11 views

CVE-2023-41052

Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions uint256addmod, uint256mulmod, ecadd and ecmul does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side...

5.3CVSS4.6AI score0.00087EPSS
Exploits1References2
Prion
Prion
added 2023/09/04 6:15 p.m.73 views

Design/Logic Flaw

Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions uint256addmod, uint256mulmod, ecadd and ecmul does not follow source order. This behaviour is problematic when the evaluation of one of the arguments produces side...

5CVSS5.3AI score0.00087EPSS
Exploits1References2Affected Software1
Citrix
Citrix
added 2023/09/01 12:0 a.m.5 views

How to add custom app icon in Android Play Store applications

...

7.2AI score
Exploits0
Rockylinux
Rockylinux
added 2023/08/31 4:54 p.m.51 views

nodejs:16 security update

An update is available for nodejs-nodemon, module.nodejs, nodejs, module.nodejs-nodemon, module.nodejs-packaging, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS8.5AI score0.00399EPSS
Exploits0
Rows per page
Query Builder