Lucene search
+L

7860 matches found

Positive Technologies
Positive Technologies
•added 2024/05/17 12:0 a.m.•10 views

PT-2024-40163 Ā· Flow3 Ā· Flow3

Name of the Vulnerable Software and Affected Versions: FLOW3 affected versions not specified Description: The issue is related to a missing signature HMAC for a request argument, which could allow an attacker to unserialize arbitrary objects within FLOW3. It is noted that code injection through...

3.7CVSS7.5AI score
SaveExploits0References4
NVD
NVD
•added 2024/05/16 9:16 p.m.•24 views

CVE-2024-21841

Uncontrolled search path for some IntelR Distribution for GDB software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS6.8AI score0.00174EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/16 8:47 p.m.•81 views

CVE-2024-21841

Intel Distribution for GDB prior to version 2024.0 contains an uncontrolled search path vulnerability that may allow an authenticated local user to escalate privileges. Affected product: Intel Distribution for GDB. Root cause: uncontrolled search path in the software before 2024.0. Impact: potent...

6.7CVSS7.1AI score0.00174EPSS
SaveExploits0References1
Fedora
Fedora
•added 2024/05/16 1:27 a.m.•23 views

[SECURITY] Fedora 38 Update: djvulibre-3.5.28-6.fc38

DjVu is a web-centric format and software platform for distributing documents and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution picture s. DjVu content downloads faster, displays and renders faster,...

6.5CVSS6.7AI score0.00862EPSS
SaveExploits2
Fedora
Fedora
•added 2024/05/16 1:9 a.m.•18 views

[SECURITY] Fedora 39 Update: djvulibre-3.5.28-7.fc39

DjVu is a web-centric format and software platform for distributing documents and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution picture s. DjVu content downloads faster, displays and renders faster,...

6.5CVSS6.7AI score0.00862EPSS
SaveExploits2
CNNVD
CNNVD
•added 2024/05/16 12:0 a.m.•7 views

Intel Distribution for GDB å®‰å…Øę¼ę“ž

Intel Distribution for GDB is a superset of the GNU Project Debugger GDB from Intel Corporation USA that extends some of the existing commands and functionality of GDB and in some cases adds additional debugger commands. A security vulnerability previously existed in Intel Distribution for GDB...

6.7CVSS6.7AI score0.00174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/05/16 12:0 a.m.•9 views

PT-2024-19086 Ā· Intel Ā· Intel Distribution For Gdb

Name of the Vulnerable Software and Affected Versions: IntelR Distribution for GDB software versions prior to 2024.0 Description: The issue is related to an uncontrolled search path in the IntelR Distribution for GDB software. This may allow an authenticated user to potentially enable escalation ...

6.7CVSS7.4AI score0.00174EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/15 12:0 a.m.•11 views

Cyber Power Systems PowerPanel Business Edition å®‰å…Øę¼ę“ž

Cyber Power Systems PowerPanel Business Edition is a suite of power management software from Cyber Power Systems, USA. The software automates the shutdown of physical and virtual infrastructures, and monitors and manages CyberPower UPS systems and network-connected PDUs Power Distribution Units. ...

9.8CVSS6.5AI score0.00474EPSS
SaveExploits0References3
OSV
OSV
•added 2024/05/14 3:22 p.m.•6 views

UBUNTU-CVE-2024-30259

FastDDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed RTPS packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS...

8.2CVSS6.1AI score0.00866EPSS
SaveExploits1References5
NVD
NVD
•added 2024/05/14 3:13 p.m.•33 views

CVE-2024-27852

A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages...

6.5CVSS5.3AI score0.00389EPSS
SaveExploits0References4
Securelist
Securelist
•added 2024/05/14 11:0 a.m.•16 views

Incident response analyst report 2023

Incident response analyst report 2023 As an information security company, our services include incident response and investigation, and malware analysis. Our customer base spans Russia, Europe, Asia, South and North America, Africa and the Middle East. Our annual Incident Response Report presents...

7.4AI score
SaveExploits0
Cvelist
Cvelist
•added 2024/05/13 11:0 p.m.•39 views

CVE-2024-27852

A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages...

4.7AI score0.00389EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/13 2:45 p.m.•17 views

CVE-2024-30259 FastDDS heap buffer overflow when publisher sends malformed packet

FastDDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed RTPS packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS...

8.2CVSS7.4AI score0.00866EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2024/05/13 2:41 p.m.•83 views

CVE-2024-30258

FastDDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed RTPS packet, the subscriber crashes when creating pthread. This can remotely crash any Fast-DD...

8.2CVSS8.2AI score0.00791EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2024/05/13 12:0 a.m.•10 views

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...

6.5CVSS6.5AI score0.00252EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/05/13 12:0 a.m.•13 views

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...

6.5CVSS6.5AI score0.00252EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/05/13 12:0 a.m.•9 views

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...

6.5CVSS6.5AI score0.00252EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/05/13 12:0 a.m.•10 views

The vulnerability of Xenstore information storage in Xen hypervisors allows a attacker to cause a service failure.

The vulnerability of Xenstore information storage system in Xen hypervisors is related to the unlimited distribution of resources. Exploiting this vulnerability can allow attackers to cause service failures...

6.5CVSS6.5AI score0.00252EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/05/02 12:0 a.m.•9 views

The vulnerability of the RDP client FreeRDP, related to unlimited resource distribution, allows attackers to trigger a service failure.

The vulnerability of the RDP client FreeRDP is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.01168EPSS
SaveExploits0References15Affected Software8
Securelist
Securelist
•added 2024/04/30 9:0 a.m.•17 views

Managed Detection and Response in 2023

Managed Detection and Response in 2023 PDF Alongside other security solutions, we provide Kaspersky Managed Detection and Response MDR to organizations worldwide, delivering expert monitoring and incident response 24/7. The task involves collecting telemetry for analysis by both machine-learning ...

7AI score
SaveExploits0
Rows per page
Query Builder