Lucene search
K

888 matches found

CNVD
CNVD
added 2020/09/25 12:0 a.m.13 views

Pexip Infinity has an unspecified vulnerability

Pexip Infinity pexip video conferencing cloud collaboration platform is a video conferencing cloud collaboration platform from the Norwegian company pexip. Pexip Infinity version 10 previously had a security vulnerability that could be exploited by remote attackers to gain privileges through...

9.8CVSS4.7AI score0.01464EPSS
Exploits0References1
NVD
NVD
added 2020/09/24 2:15 a.m.17 views

CVE-2015-4719

The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request...

9.8CVSS0.01464EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/09/24 1:13 a.m.23 views

CVE-2015-4719

The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request...

9.6AI score0.01464EPSS
Exploits0References1
CVE
CVE
added 2020/09/24 1:13 a.m.58 views

CVE-2015-4719

CVE-2015-4719 affects Pexip Infinity prior to v10, where the client API authentication mechanism allows remote attackers to gain privileges via a crafted request. Documents from NVD/Red Hat/CVE lists repeat this description and identify the impact as privilege escalation with network access and n...

9.8CVSS9.5AI score0.01464EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2020/09/22 12:0 a.m.26 views

WordPress Import XML and RSS Feeds plugin <= 2.0.1 - Server-Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability discovered by Suzhou Aurora Infinity Information Technology Co., Ltd. in WordPress Import XML and RSS Feeds plugin versions = 2.0.1. Solution Update the WordPress Import XML and RSS Feeds plugin to the latest available version at least 2.0.2...

9.1CVSS2.4AI score0.14745EPSS
Exploits1References3Affected Software1
Patchstack
Patchstack
added 2020/08/13 12:0 a.m.12 views

WordPress Podcast Importer SecondLine plugin <= 1.1.4 - Server-Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability discovered by Suzhou Aurora Infinity Information Technology Co., Ltd. in WordPress Podcast Importer SecondLine plugin versions = 1.1.4. Solution Update the WordPress Podcast Importer SecondLine plugin to the latest available version at least 1.1.5...

7.5CVSS2.6AI score0.01695EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2020/07/01 12:0 a.m.11 views

Activision Infinity Ward Call of Duty Modern Warfare 2 Buffer Overflow Vulnerability

Activision Infinity Ward Call of Duty Modern Warfare 2 Call of Duty is an American first-person shooter game by Activision. A buffer overflow vulnerability exists in Activision Infinity Ward Call of Duty Modern Warfare 2 2019-12-11 and earlier versions. An attacker can exploit this vulnerability ...

10CVSS8AI score0.02165EPSS
Exploits0References1
NVD
NVD
added 2020/06/30 12:15 p.m.27 views

CVE-2019-20893

An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHostHandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by using a crafted joinParty packet. This can be utilized to conduct arbitrary code execution on a victim'...

10CVSS0.02165EPSS
Exploits0References1
Prion
Prion
added 2020/06/30 12:15 p.m.17 views

Buffer overflow

An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHostHandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by using a crafted joinParty packet. This can be utilized to conduct arbitrary code execution on a victim'...

10CVSS9.7AI score0.02165EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/06/30 11:35 a.m.29 views

CVE-2019-20893

An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHostHandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by using a crafted joinParty packet. This can be utilized to conduct arbitrary code execution on a victim'...

9.8AI score0.02165EPSS
Exploits0References1
CVE
CVE
added 2020/06/30 11:35 a.m.64 views

CVE-2019-20893

CVE-2019-20893 concerns a buffer overflow in Activision Infinity Ward’s Call of Duty Modern Warfare 2 (and up to 2019-12-11). The vulnerability is located in the PartyHost_HandleJoinPartyRequest function, exploitable via a crafted joinParty packet, which can yield arbitrary code execution on a vi...

10CVSS9.6AI score0.02165EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2020/06/02 9:15 p.m.19 views

CVE-2020-12607

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...

7.5CVSS7.4AI score0.01268EPSS
Exploits1References4
PyPA
PyPA
added 2020/06/02 9:15 p.m.4 views

PYSEC-2020-42

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...

7.5CVSS7AI score0.01268EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2020/06/02 9:0 p.m.19 views

CVE-2020-12607

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...

7.4AI score0.01268EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2020/06/02 12:0 a.m.3 views

PT-2020-13166 · Fastecdsa · Fastecdsa

Name of the Vulnerable Software and Affected Versions: fastecdsa versions prior to 2.1.2 Description: An issue was discovered in the ECDSA implementation when using the NIST P-256 curve. The point at infinity is mishandled, which means that for extreme values in k and s^-1, the signature...

8.7CVSS7.2AI score0.01268EPSS
Exploits1References13
ThreatPost
ThreatPost
added 2020/05/06 7:42 p.m.54 views

InfinityBlack Dismantled After Selling Millions of Credentials

The InfinityBlack hacking group, which is responsible for selling millions of stolen credentials, has been dismantled. Polish and Swiss law-enforcement authorities, supported by Europol, arrested five individuals in Poland believed to be members of InfinityBlack, on April 29. According to Europol...

7.4AI score
Exploits0References10
Openbugbounty
Openbugbounty
added 2020/02/20 1:50 p.m.11 views

infinity-rs.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1097971 Security Researcher haxmov Helped patch 715 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting infinity-rs.com.br website an...

0.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2019/10/09 1:52 p.m.11 views

fumador.it Cross Site Scripting vulnerability

Security Researcher aammoccia Helped patch 19 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting fumador.it website and its users. Following coordinated and responsible vulnerability...

0.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2019/10/09 1:36 p.m.11 views

playxtreme.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-990525 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

0.6AI score
Exploits0
Openbugbounty
Openbugbounty
added 2019/10/09 1:12 p.m.8 views

biciclo.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-990521 Security Researcher aammoccia Helped patch 19 vulnerabilities Received 1 Coordinated Disclosure badges Received 1 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting biciclo.it website and its...

0.2AI score
Exploits0
Rows per page
Query Builder