Lucene search
+L

5794 matches found

Cvelist
Cvelist
added 2020/04/09 11:11 p.m.34 views

CVE-2019-18376

A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center MC user's web browser history or a network device that intercepts/logs traffic to MC, to obtain CSRF tokens and use them to perform CSRF attacks against MC...

5.6AI score0.00723EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2020/04/09 12:00 a.m.90 views

Update Rollup 3 for System Center 2012 R2 Operations Manager

Update Rollup 3 for System Center 2012 R2 Operations Manager Introduction This article describes the issues that are fixed in Update Rollup 3 for Microsoft System Center 2012 R2 Operations Manager. Additionally, this article contains the installation instructions for Update Rollup 3 for System...

6.2AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/04/09 12:00 a.m.13 views

October 2016 Preview of Monthly Quality Rollup for Windows Server 2012

October 2016 Preview of Monthly Quality Rollup for Windows Server 2012 The October 2016 Preview of Monthly Quality Rollup includes improvements and fixes for the Windows Server 2012 platform. We recommend that you apply this quality rollup as part of your regular maintenance routines. Improvement...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2020/04/07 12:00 p.m.322 views

Git-Hound v1.1 - GitHound Pinpoints Exposed API Keys On GitHub Using Pattern Matching, Commit History Searching, And A Unique Result Scoring System

A batch-catching, pattern-matching, patch-attacking secret snatcher. GitHound pinpoints exposed API keys and other sensitive information on GitHub using pattern matching, commit history searching, and a unique result scoring system. GitHound has earned me over $7500 applied to Bug Bounty research...

7.4AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2020/04/01 8:31 p.m.29 views

CVE-2019-11698

If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for...

6.1CVSS1.8AI score0.0147EPSS
SaveExploits0References4
OSV
OSV
added 2020/04/01 6:15 p.m.8 views

CVE-2020-9776

This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to access a user's call history...

3.3CVSS5.7AI score0.00597EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/01 6:15 p.m.23 views

CVE-2020-9776

This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to access a user's call history...

4.3CVSS4.3AI score0.00597EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/04/01 6:15 p.m.5 views

CVE-2020-9776

This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to access a user's call history...

4.3CVSS5.3AI score0.00597EPSS
SaveExploits0References2
Prion
Prion
added 2020/04/01 6:15 p.m.21 views

Design/Logic Flaw

This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to access a user's call history...

4.3CVSS4.2AI score0.00597EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/01 5:55 p.m.23 views

CVE-2020-9776

This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to access a user's call history...

5.2AI score0.00597EPSS
SaveExploits0References1
CVE
CVE
added 2020/04/01 5:55 p.m.67 views

CVE-2020-9776

CVE-2020-9776 affects macOS Catalina 10.15.x Call History component. A malicious, sandboxed or otherwise untrusted application could access a user’s call history due to an entitlement/permission issue. Apple addressed this with a new entitlement and the fix is included in macOS Catalina 10.15.4. ...

4.3CVSS4.7AI score0.00597EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/04/01 12:00 a.m.6 views

Denial of Service Vulnerability in Configuration King HistorySvr

Configuration King, i.e. Configuration King development monitoring system software, is a new type of industrial automatic control system, which replaces the traditional closed system with an integrated system composed of standard industrial computer software and hardware platforms. There is a...

7.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/03/30 12:00 a.m.119 views

openSUSE Security Update : cni / cni-plugins / conmon / etc (openSUSE-2020-398)

This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues : podman was updated to 1.8.0 : - CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that included a glob operator 3829 bsc1155217 -...

5.8CVSS6.7AI score0.0149EPSS
SaveExploits1References5
Wired Threat Level
Wired Threat Level
added 2020/03/26 2:00 p.m.49 views

The Top Reason Not to Ditch an iPhone for Android? WhatsApp

It should be simple to transfer your chat history from iOS to Android, but it's really not...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2020/03/26 12:00 a.m.7 views

Unspecified Vulnerability in Apple macOS Catalina Call History Component

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Call History is one of the call history components.... A security vulnerability in the Call History component of Apple macOS Catalina prior to version 10.15.4 can be exploited by malicious applications to...

4.3CVSS6.7AI score0.00597EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/24 7:15 p.m.9 views

CVE-2019-20574

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Wi-Fi history Content Provider. The Samsung ID is SVE-2019-14061 August 2019...

7.8CVSS7.2AI score0.00166EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/24 7:15 p.m.18 views

Sql injection

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Wi-Fi history Content Provider. The Samsung ID is SVE-2019-14061 August 2019...

4.6CVSS8AI score0.00166EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2020/03/23 3:15 p.m.33 views

CVE-2020-8497

In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps...

5.3CVSS5.3AI score0.05275EPSS
SaveExploits1References1
OSV
OSV
added 2020/03/23 3:15 p.m.17 views

CVE-2020-8497

In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps...

5.3CVSS6.1AI score0.05275EPSS
SaveExploits1References1
Prion
Prion
added 2020/03/23 3:15 p.m.24 views

Format string

In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps...

5CVSS5.3AI score0.05275EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder