Lucene search
+L

13335 matches found

BDU FSTEC
BDU FSTEC
•added 2019/04/12 12:00 a.m.•16 views

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmioctlcreatedevice function in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

9.3CVSS7.2AI score0.16523EPSS
SaveExploits3References53Affected Software5
CNVD
CNVD
•added 2019/04/11 12:00 a.m.•24 views

SAP Crystal Reports for Visual Studio Information Disclosure Vulnerability

SAP Crystal Reports for Visual Studio is the German SAP SAP company's set of Crystal report design software for Visual Studio development platform. An information disclosure vulnerability exists in SAP Crystal Reports for Visual Studio, which arises from errors such as configuration during...

9.8CVSS6.1AI score0.06609EPSS
SaveExploits4References1
OpenVAS
OpenVAS
•added 2019/04/11 12:00 a.m.•52 views

Adobe Acrobat Reader 2017 Security Updates (APSB19-17) - Windows

Adobe Acrobat Reader 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.7AI score0.55742EPSS
SaveExploits4References1
OpenVAS
OpenVAS
•added 2019/04/11 12:00 a.m.•48 views

Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-17) - Mac OS X

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.8AI score0.55742EPSS
SaveExploits4References1
OpenVAS
OpenVAS
•added 2019/04/11 12:00 a.m.•55 views

Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-17) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.8AI score0.55742EPSS
SaveExploits4References1
CNVD
CNVD
•added 2019/04/10 12:00 a.m.•17 views

Microsoft Edge Information Disclosure Vulnerability (CNVD-2019-10456)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An information disclosure vulnerability exists in Microsoft Edge that originates from errors such as configuration during operation of a networked system or product. An unauthorized...

6.5CVSS5.8AI score0.07115EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2019/04/09 7:47 p.m.•32 views

GHSA-926Q-WXR6-3CRQ Moderate severity vulnerability that affects roundup

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6.1CVSS5.8AI score0.01581EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2019/04/09 7:47 p.m.•45 views

Moderate severity vulnerability that affects roundup

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6.1CVSS4.9AI score0.01581EPSS
SaveExploits1References9Affected Software1
Positive Technologies
Positive Technologies
•added 2019/04/09 12:00 a.m.•3 views

PT-2019-1786

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to errors in handling objects in memory within the Microsoft Office Access Connectivity Engine component of the Microsoft Office package. This can allow an...

7.8CVSS0.10505EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2019/04/09 12:00 a.m.•8 views

PT-2019-1776 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue exists due to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining th...

7.6CVSS7.8AI score0.1866EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2019/04/08 12:00 a.m.•51 views

Apple Safari < 12.0.3 Multiple Vulnerabilities

Binary data 700508.prm...

8.8CVSS7.8AI score0.09755EPSS
SaveExploits4References12
NVD
NVD
•added 2019/04/06 8:29 p.m.•58 views

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6.1CVSS6AI score0.01581EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2019/04/06 8:29 p.m.•35 views

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6.1CVSS6.3AI score0.01581EPSS
SaveExploits1References6
CVE
CVE
•added 2019/04/06 7:40 p.m.•106 views

CVE-2019-10904

CVE-2019-10904 affects Roundup 1.6: XSS via the URI caused by improper 404 handling in the web front-end, specifically in frontend/roundup.cgi and roundup/cgi/wsgi_handler.py. Practical impact is client-side code execution due to crafted URIs. Exploitation details are not provided in the supplied...

6.1CVSS5.8AI score0.01581EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2019/04/06 7:40 p.m.•56 views

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6AI score0.01581EPSS
SaveExploits1References5
Mend
Mend
•added 2019/04/06 7:40 p.m.•5 views

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6.1CVSS0.01581EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/06 12:00 a.m.•5 views

CVE-2019-10904: Improper Neutralization of Input During Web Page Generation

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6.1CVSS5.8AI score0.01581EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2019/04/04 12:00 a.m.•10 views

PostgreSQL Authentication Privilege Escalation

The vulnerability of the PostgreSQL database management system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

7.5CVSS7.2AI score0.02241EPSS
SaveExploits0References6Affected Software2
CNVD
CNVD
•added 2019/04/02 12:00 a.m.•16 views

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2020-17612)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server, which arises from erro...

6.5CVSS6AI score0.01437EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/03/29 12:00 a.m.•26 views

RichFaces Arbitrary Java Code Execution

The vulnerability of the RichFaces library is related to errors in code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary Java code with privileges of the target server...

9.8CVSS8.2AI score0.19041EPSS
SaveExploits4References7Affected Software1
Rows per page
Query Builder