Lucene search
+L

10324 matches found

The Hacker News
The Hacker News
added 2024/12/02 7:02 a.m.6 views

INTERPOL Arrests 5,500 in Global Cybercrime Crackdown, Seizes Over $400 Million

A global law enforcement operation has led to the arrest of more than 5,500 suspects involved in financial crimes and the seizure of more than $400 million in virtual assets and government-backed currencies. The coordinated exercise saw the participation of authorities from 40 countries,...

7.2AI score
SaveExploits0
OSV
OSV
added 2024/11/27 8:15 p.m.8 views

CVE-2017-13319

In pvmp3getmaindatasize of pvmp3getmaindatasize.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS6AI score0.00338EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/27 8:15 p.m.20 views

CVE-2017-13319

In pvmp3getmaindatasize of pvmp3getmaindatasize.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS0.00338EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/27 7:55 p.m.20 views

CVE-2017-13319

In pvmp3getmaindatasize of pvmp3getmaindatasize.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/27 7:55 p.m.12 views

CVE-2017-13319

In pvmp3getmaindatasize of pvmp3getmaindatasize.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation...

6.8AI score0.00338EPSS
SaveExploits0References1
HackRead
HackRead
added 2024/11/25 7:19 p.m.14 views

Cyber Resiliency in the AI Era: Building the Unbreakable Shield

Digital networks are the backbone of global business and communication, making cyber resiliency essential for organizations to thrive.…...

7.3AI score
SaveExploits0
Atlassian
Atlassian
added 2024/11/25 6:11 a.m.26 views

Individual users with System Administrator access under Global Permissions are able to view the names of restricted spaces that they are not permitted to access.

h3. Issue Summary Individual users with System Administrator who can also have both Confluence Administrator and System Administrator access under Global Permissions can view the names of restricted spaces that they are not permitted to access. This is reproducible on Data Center: yes h3. Steps t...

6.6AI score
SaveExploits0Affected Software1
Trend Micro Simply Security
Trend Micro Simply Security
added 2024/11/25 12:00 a.m.17 views

Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions

Since 2023, APT group Earth Estries has aggressively targeted key industries globally with sophisticated techniques and new backdoors, like GHOSTSPIDER and MASOL RAT, for prolonged espionage operations...

7.4AI score
SaveExploits0
HackRead
HackRead
added 2024/11/23 5:00 p.m.12 views

Why New York is a Prime Location for Leading Mobile Development Agencies

New York, the city that never sleeps, is renowned as a global epicentre for innovation, creativity, and business…...

7.4AI score
SaveExploits0
AstraLinux
AstraLinux
added 2024/11/23 3:04 a.m.13 views

Astra Linux – Vulnerability in Python 3.11

The “ipaddress” module contained incorrect information regarding whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the isprivate and isglobal properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and...

7.5CVSS6.7AI score0.01079EPSS
SaveExploits0References3
CVE
CVE
added 2024/11/22 8:05 p.m.68 views

CVE-2023-52334

CVE-2023-52334 concerns Allegra’s downloadAttachmentGlobal path handling. The vulnerability stems from insufficient validation of a user-supplied path before file operations, enabling directory traversal and potential disclosure of stored credentials. Multiple connected sources (NVD/NVD mirror, Z...

7.5CVSS7.3AI score0.01931EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2024/11/21 12:00 a.m.16 views

Nextcloud Information Disclosure Vulnerability (CNVD-2025-11221)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from an information disclosure vulnerability that stems from the fact that after storing "global credentials" on the server, the API returns...

5.9CVSS6.4AI score0.00597EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/19 2:14 p.m.26 views

Security Bulletin: IBM Sterling Global Availability Mailbox is affected by a WebSphere Liberty vulnerability (CVE-2023-46158)

Summary IBM Sterling Global Availability Mailbox is affected by IBM WebSphere Application Server Liberty it could provide weaker than expected security with the appSecurity-1.0, appSecurity-2.0, appSecurity-3.0, appSecurity-4.0 or appSecurity-5.0 feature enabled. Vulnerability Details...

9.8CVSS9.1AI score0.00456EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/19 2:12 p.m.18 views

Security Bulletin: IBM Global Availability Mailbox is affected by a Bouncy Castle vulnerability that could allow a remote attacker to obtain sensitive information (CVE-2023-33201)

Summary IBM Global Availability Mailbox is affected by the Bouncy Castle Crypto Package For Java bc-java it could allow a remote attacker to obtain sensitive information, caused by not validating the X.500 name of any certificate in the implementation of the X509LDAPCertStoreSpi.java class. By...

5.3CVSS6.5AI score0.00772EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/19 2:10 p.m.38 views

Security Bulletin: IBM Sterling Global Mailbox is affected by a IBM WebSphere Vulnerability that could cause denial of service (CVE-2023-44487)

Summary IBM Sterling Global High Availability Mailbox is affected by IBM WebSphere Application Server Liberty it is vulnerable to a denial of service with the servlet-3.1, servlet-4.0, servlet-5.0, or servlet-6.0 feature with the HTTP/2 protocol enabled. Vulnerability Details CVEID:CVE-2023-44487...

7.5CVSS7.7AI score0.99999EPSS
SaveExploits21Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/19 2:08 p.m.12 views

Security Bulletin: IBM Sterling Global High Availability Mailbox is affected by IBM WebSphere Application Server Liberty is vulnerable to information disclosure due to Apache Santuario (CVE-2023-44483)

Summary IBM Sterling Global High Availability Mailbox is affected by a vulnerability in the Apache Santuario library used by IBM WebSphere Application Server Liberty when the wsSecurity-1.1, wsSecuritySaml-1.1 or samlWeb-2.0 feature is enabled. Vulnerability Details CVEID:CVE-2023-44483...

6.5CVSS6.1AI score0.01222EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/19 2:06 p.m.20 views

Security Bulletin: IBM Sterling Global High Availability Mailbox is affected byWebSphere liberty vulnerability (CVE-2023-46158)

Summary IBM Sterling Global High Availability Mailbox is affected by IBM WebSphere Application Server Liberty it could provide weaker than expected security with the appSecurity-1.0, appSecurity-2.0, appSecurity-3.0, appSecurity-4.0 or appSecurity-5.0 feature enabled. Vulnerability Details...

9.8CVSS9.1AI score0.00456EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/19 1:57 p.m.8 views

Security Bulletin: IBM Sterling Global High Availability Mailbox is affected by WebSphere Liberty vulnerability (CVE-2023-38737)

Summary IBM Sterling Global High Availability Mailbox is affected by IBM WebSphere Application Server Liberty it is vulnerable to a denial of service with the restfulWS-3.0 or restfulWS-3.1 feature enabled. This has been addressed in the remediation section. Vulnerability Details...

7.5CVSS6.7AI score0.01022EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/19 1:48 p.m.15 views

Security Bulletin: IBM Sterling Global High Availability Mailbox is affected by a SnakeYaml deserialization vulnerability (CVE-2022-1471)

Summary IBM Sterling Global High Availability Mailbox is affected by SnakeYaml's Constructor class it does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's...

9.8CVSS8.2AI score0.99569EPSS
SaveExploits10Affected Software1
OSV
OSV
added 2024/11/19 2:16 a.m.3 views

DEBIAN-CVE-2024-50286

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-use-after-free in ksmbdsmb2sessioncreate There is a race condition between ksmbdsmb2sessioncreate and ksmbdexpiresession. This patch add missing sessionstablelock while adding/deleting session from global session...

7CVSS6.1AI score0.0067EPSS
SaveExploits0References1
Rows per page
Query Builder