Lucene search
+L

10350 matches found

OSV
OSV
added 2021/05/28 12:00 a.m.20 views

OSV-2021-808 Global-buffer-overflow in DoEmbedded2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34718 Crash type: Global-buffer-overflow READ 4 Crash state: DoEmbedded2 CalcLengths SpeakNextClause...

7.2AI score
SaveExploits0References1
Wired Threat Level
Wired Threat Level
added 2021/05/27 11:17 p.m.45 views

WhatsApp’s Fight With India Has Global Implications

The country’s “traceability” requirement would undermine the privacy of the encrypted messaging app’s users far beyond its borders...

2.8AI score
SaveExploits0
NVD
NVD
added 2021/05/26 12:15 p.m.28 views

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

7CVSS0.01026EPSS
SaveExploits1References9
OSV
OSV
added 2021/05/26 12:15 p.m.14 views

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

7CVSS7.2AI score
SaveExploits0References9
Prion
Prion
added 2021/05/26 12:15 p.m.30 views

Design/Logic Flaw

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

6.9CVSS7AI score0.01026EPSS
SaveExploits1References9Affected Software2
ThreatPost
ThreatPost
added 2021/05/26 12:01 p.m.225 views

‘Privateer’ Threat Actors Emerge from Cybercrime Swamp

A new type of cybercriminal is emerging in a cyber-threat landscape that’s historically been dominated by either state-sponsored threat actors or financially-motivated criminals that are hunted and prosecuted by law enforcement. Dubbed “privateers” by researchers at Cisco Talos Intelligence, thes...

7AI score
SaveExploits0References12
Cvelist
Cvelist
added 2021/05/26 11:11 a.m.30 views

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

7.5AI score0.01026EPSS
SaveExploits1References9
Debian CVE
Debian CVE
added 2021/05/26 11:11 a.m.241 views

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

7CVSS6.4AI score0.01026EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/05/25 12:00 a.m.28 views

openSUSE Security Update : python-httplib2 (openSUSE-2021-772)

This update for python-httplib2 contains the following fixes : Security fixes included in this update : - CVE-2021-21240: Fixed a regular expression denial of service via malicious header bsc1182053. - CVE-2020-11078: Fixed an issue where an attacker could change request headers and body...

7.5CVSS6.9AI score0.03626EPSS
SaveExploits1References23
OPENSUSE Linux
OPENSUSE Linux
added 2021/05/23 12:00 a.m.72 views

Security update for python-httplib2 (moderate)

openSUSE Security Update: Security update for python-httplib2 Announcement ID: openSUSE-SU-2021:0772-1 Rating: moderate References: 1171998 1182053 Cross-References: CVE-2020-11078 CVE-2021-21240 CVSS scores: CVE-2020-11078 NVD : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2020-11078 SUS...

6.8CVSS6.8AI score0.03626EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2021/05/22 4:57 a.m.109 views

Air India Hack Exposes Credit Card and Passport Info of 4.5 Million Passengers

India's flag carrier airline, Air India, has disclosed a data breach affecting 4.5 million of its customers over a period stretching nearly 10 years after its Passenger Service System PSS provider SITA fell victim to a cyber attack earlier this year. The breach involves personal data registered...

1.6AI score
SaveExploits0
OSV
OSV
added 2021/05/21 2:23 p.m.41 views

GHSA-P45V-V4PW-77JR Division by 0 in `QuantizedBatchNormWithGlobalNormalization`

Impact An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedBatchNormWithGlobalNormalization: python import tensorflow as tf t = tf.constant, shape=0, 0, 0, 0, dtype=tf.quint8 tmin = tf.constant-10.0, dtype=tf.float32 tmax = tf.constant-10.0,...

2.5CVSS6AI score0.00189EPSS
SaveExploits1References7
OSV
OSV
added 2021/05/21 2:23 p.m.30 views

GHSA-4FG4-P75J-W5XJ Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`

Impact An attacker can cause a segfault and denial of service via accessing data outside of bounds in tf.rawops.QuantizedBatchNormWithGlobalNormalization: python import tensorflow as tf t = tf.constant1, shape=1, 1, 1, 1, dtype=tf.quint8 tmin = tf.constant, shape=0, dtype=tf.float32 tmax =...

2.5CVSS5.8AI score0.00189EPSS
SaveExploits1References7
OSV
OSV
added 2021/05/21 12:00 a.m.16 views

OSV-2021-782 Global-buffer-overflow in IsLetterGroup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34494 Crash type: Global-buffer-overflow READ 1 Crash state: IsLetterGroup MatchRule TranslateRules...

7.2AI score
SaveExploits0References1
Microsoft Malware Protection
Microsoft Malware Protection
added 2021/05/20 5:00 p.m.77 views

Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment

Phorpiex, an enduring botnet known for extortion campaigns and for using old-fashioned worms that spread via removable USB drives and instant messaging apps, began diversifying its infrastructure in recent years to become more resilient and to deliver more dangerous payloads. Today, the Phorphiex...

0.5AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2021/05/20 5:00 p.m.72 views

Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment

Phorpiex, an enduring botnet known for extortion campaigns and for using old-fashioned worms that spread via removable USB drives and instant messaging apps, began diversifying its infrastructure in recent years to become more resilient and to deliver more dangerous payloads. Today, the Phorphiex...

0.5AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2021/05/19 2:00 p.m.41 views

XITE Music Video Platform Amplifies Entertainment with Akamai's Help

By: Ralph Aantjes With so many people around the globe seeking socially distanced fun and solace, at-home entertainment has never been more important. XITE aims to offer the best music video experience in the world. Akamai is delighted that this exciting, interactive video platform chose to work...

0.1AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2021/05/19 4:00 a.m.19 views

XITE Music Video Platform Amplifies Entertainment with Akamai's Help

With so many people around the globe seeking socially distanced fun and solace, at-home entertainment has never been more important. XITE aims to offer the best music video experience in the world. Akamai is delighted that this exciting, interactive video platform chose to work with us to provide...

1AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2021/05/18 7:21 p.m.27 views

A Look Into Remote Onboarding at Rapid7

Picture this; you accept a new role and walk in on your first day with jitters. You swing the double doors open and are welcomed by the fresh scent of kombucha on tap and the buzz of office chatter. The front desk receptionist welcomes you with a warm “hello!” and a freshly brewed tea or coffee. ...

7.1AI score
SaveExploits0
Qualys Blog
Qualys Blog
added 2021/05/18 12:54 p.m.115 views

Introducing CyberSecurity Asset Management

With the rapid expansion of new IT technologies and their growing adoption rate, organizations face an increasing problem in securing their myriad on-premises, virtual & cloud-based assets. Add to that the explosion of intelligent devices on the corporate network and you have a huge landscape to...

0.6AI score
SaveExploits0
Rows per page
Query Builder