Lucene search
+L

9604 matches found

Patchstack
Patchstack
added 2020/11/25 12:0 a.m.8 views

WordPress Events Manager plugin <= 5.9.8.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found by Nguyen Van Khanh in WordPress Events Manager plugin versions = 5.9.8.1. Solution 2020-11-25 - we were unable to find a patched version of this plugin use at your own risk, we recommend to deactivate and delete the plugin until t...

1.8AI score
SaveExploits0References2Affected Software1
Circl
Circl
added 2020/11/24 10:46 p.m.11 views

CVE-2020-28329

creationtimestamp| type| source ---|---|--- 2020-11-24 22:46:58+00:00| seen| https://t.me/cibsecurity/16808 2020-11-24 22:47:07+00:00| seen| https://t.me/cibsecurity/16814...

9.8CVSS7.7AI score0.01543EPSS
SaveExploits7References2
Akamai Blog
Akamai Blog
added 2020/11/24 2:0 p.m.171 views

Going Beyond Advertising: Revenue Diversification in Publishing

The pandemic has had a profound short-term effect on publishers around the world -- a jump in readership somewhat dampened by disappearing advertising revenue. In many media firms, the digital channel has become most important, accelerating the move to digital while also highlighting the fragilit...

7AI score
SaveExploits0
NVD
NVD
added 2020/11/24 3:15 a.m.14 views

CVE-2020-26890

Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...

7.5CVSS7.5AI score0.02967EPSS
SaveExploits0References3
OSV
OSV
added 2020/11/24 3:15 a.m.3 views

DEBIAN-CVE-2020-26890

Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...

7.5CVSS7.1AI score0.02967EPSS
SaveExploits0References1
PyPA
PyPA
added 2020/11/24 3:15 a.m.8 views

PYSEC-2020-237

Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...

7.5CVSS7.1AI score0.02967EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/11/24 3:15 a.m.8 views

UBUNTU-CVE-2020-26890

Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...

7.5CVSS7.2AI score0.02967EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2020/11/24 2:7 a.m.81 views

CVE-2020-26890

Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service attack against the federation and common Matrix clients. If such a malformed event is accepted into th...

7.5CVSS7.5AI score0.02967EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2020/11/24 12:0 a.m.63 views

resource-agents security update

4.1.1-68 - azure-lb: fix redirect issue Resolves: rhbz1850778 4.1.1-67 - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz1846733 4.1.1-65 - azure-events: handle exceptions in urlopen Resolves: rhbz1845574 4.1.1-64 - nfsserver: fix NFSv4-only support - azure-events: new resource...

6.8CVSS7AI score0.02593EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.9 views

The vulnerability in the driver/xen/events/events_base.c component of Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the drivers/xen/events/eventsbase.c component in Linux operating systems arises from the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS6.6AI score0.00269EPSS
SaveExploits0References32Affected Software4
Microsoft KB
Microsoft KB
added 2020/11/19 12:0 a.m.7 views

November 19, 2020—KB4586839 (OS Build 17763.1613) Preview

None None...

5.8AI score
SaveExploits0
Circl
Circl
added 2020/11/18 10:40 p.m.17 views

CVE-2020-3471

creationtimestamp| type| source ---|---|--- 2020-11-18 22:40:50+00:00| seen| https://t.me/cibsecurity/16557 2020-11-19 15:00:02+00:00| seen| https://t.me/SecLabNews/9269 2020-12-09 06:25:12+00:00| seen| https://t.me/cibsecurity/17391...

6.5CVSS6.3AI score0.01756EPSS
SaveExploits0References3
Circl
Circl
added 2020/11/18 2:28 p.m.7 views

CVE-2020-17049

creationtimestamp| type| source ---|---|--- 2020-11-18 14:28:35+00:00| seen| https://t.me/BleepingComputer/8566 2020-11-19 11:32:03+00:00| seen| https://t.me/cKure/2902 2020-11-19 17:05:31+00:00| seen| https://t.me/tomhunter/178 2020-11-25 11:20:19+00:00| seen| https://t.me/CyberGovIL/956...

9CVSS6.8AI score0.13794EPSS
SaveExploits0References15
Circl
Circl
added 2020/11/17 10:39 p.m.9 views

CVE-2020-25988

creationtimestamp| type| source ---|---|--- 2020-11-17 22:39:20+00:00| seen| https://t.me/cibsecurity/16466 2020-11-21 19:18:00+00:00| published-proof-of-concept| Telegram/UxTNBzpYPuAvWiUw14OoLCI4dqVav6XCEd41yK8XAnw 2020-12-09 03:25:22+00:00| seen| https://t.me/cibsecurity/17346 2020-12-09...

6.5CVSS6.4AI score0.03052EPSS
SaveExploits3References4
Circl
Circl
added 2020/11/17 8:39 p.m.10 views

CVE-2020-26701

creationtimestamp| type| source ---|---|--- 2020-11-17 20:39:13+00:00| seen| https://t.me/cibsecurity/16458 2020-12-09 02:45:18+00:00| seen| https://t.me/cibsecurity/17330 2020-12-09 03:25:13+00:00| seen| https://t.me/cibsecurity/17338...

5.4CVSS5.5AI score0.00914EPSS
SaveExploits2References3
Circl
Circl
added 2020/11/17 6:39 p.m.11 views

CVE-2020-21665

creationtimestamp| type| source ---|---|--- 2020-11-17 18:39:17+00:00| seen| https://t.me/cibsecurity/16453 2020-12-09 02:42:36+00:00| seen| https://t.me/cibsecurity/17321 2020-12-09 02:45:10+00:00| seen| https://t.me/cibsecurity/17325 2020-12-09 03:25:05+00:00| seen| https://t.me/cibsecurity/173...

7.2CVSS7AI score0.0096EPSS
SaveExploits0References4
Circl
Circl
added 2020/11/17 6:39 p.m.9 views

CVE-2020-27556

creationtimestamp| type| source ---|---|--- 2020-11-17 18:39:15+00:00| seen| https://t.me/cibsecurity/16451 2020-12-09 02:36:27+00:00| seen| https://t.me/cibsecurity/17317 2020-12-09 02:42:34+00:00| seen| https://t.me/cibsecurity/17319 2020-12-09 02:45:09+00:00| seen| https://t.me/cibsecurity/173...

5.3CVSS5.5AI score0.01043EPSS
SaveExploits1References5
NVD
NVD
added 2020/11/17 4:15 p.m.27 views

CVE-2020-13958

A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the target users file system. These hyperlinks can be triggered unconditionally. In fixed versions no internal protocol may be called from the documen...

9.3CVSS7.3AI score0.0272EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/17 4:15 p.m.6 views

CVE-2020-13958

A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the target users file system. These hyperlinks can be triggered unconditionally. In fixed versions no internal protocol may be called from the documen...

7.8CVSS7.1AI score0.0272EPSS
SaveExploits0References1
CVE
CVE
added 2020/11/17 3:17 p.m.79 views

CVE-2020-13958

Summary: CVE-2020-13958 affects Apache OpenOffice

9.3CVSS7.3AI score0.0272EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder