Lucene search
+L

2478 matches found

OSV
OSV
added 2020/04/01 6:15 p.m.5 views

CVE-2020-9773

The issue was addressed with improved handling of icon caches. This issue is fixed in iOS 14.0 and iPadOS 14.0. A malicious application may be able to identify what other applications a user has installed...

3.3CVSS6.7AI score0.00635EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/04/01 6:15 p.m.6 views

CVE-2020-9773

The issue was addressed with improved handling of icon caches. This issue is fixed in iOS 14.0 and iPadOS 14.0. A malicious application may be able to identify what other applications a user has installed...

4.3CVSS6.6AI score0.00635EPSS
SaveExploits0References9
CNVD
CNVD
added 2020/03/26 12:00 a.m.17 views

Multiple Apple Products Icons Component Information Disclosure Vulnerability

Apple iOS is an operating system for mobile devices.Apple watchOS is an operating system for smartwatches.Apple iPadOS is an operating system for iPad tablets.Icons is an icon component of the... An information disclosure vulnerability exists in the Icons component of several Apple products, whic...

4.3CVSS6AI score0.00635EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/24 12:00 a.m.7 views

OpenWrt LuCI Information Disclosure Vulnerability

OpenWrt LuCI is a graphical configuration interface for OpenWrt Linux distribution. An information disclosure vulnerability exists in the OpenWrt LuCI git-20.x version, which can be exploited by remote attackers to retrieve a list of installed packages and services...

5.3CVSS6.4AI score0.01679EPSS
SaveExploits1References1
NVD
NVD
added 2020/03/23 8:15 p.m.24 views

CVE-2020-10871

In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other more complex ways...

5.3CVSS5.3AI score0.01679EPSS
SaveExploits1References3
Prion
Prion
added 2020/03/23 8:15 p.m.29 views

Information disclosure

In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other more complex ways...

5CVSS5.3AI score0.01679EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2020/03/23 7:45 p.m.32 views

CVE-2020-10871

In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other more complex ways...

5.4AI score0.01679EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2020/03/23 12:00 a.m.13 views

PT-2020-12389 · Openwrt · Openwrt Luci

Name of the Vulnerable Software and Affected Versions: OpenWrt LuCI versions git-20.x Description: The issue allows remote unauthenticated attackers to retrieve the list of installed packages and services. The vendor disputes the significance of this report, stating that the same information is...

5.3CVSS7.1AI score0.01679EPSS
SaveExploits1References7
OSV
OSV
added 2020/03/20 1:15 a.m.8 views

CVE-2018-20333

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /updateapplist.asp to see if a USB device is attached to the router and if there are apps installed on the router...

7.5CVSS5.8AI score0.01209EPSS
SaveExploits1References1
Citrix
Citrix
added 2020/03/18 12:00 a.m.12 views

The Supplemental Grace Period is active and all installed licenses are currently in use

This alertisseen on the Director andCitrix Studio. The Supplemental Grace Period is active and all installed licenses are currently in use License server status on Director shows "not connected"...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/03/12 12:00 a.m.13 views

The vulnerability of the ServiceAgent component of the wireless access point software for Moxa AWK-3131A industrial systems allows a intruder to disclose protected information.

The vulnerability of the ServiceAgent component of the wireless access point software for Moxa AWK-3131A industrial systems is related to the use of pre-installed registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

7.8CVSS7.2AI score0.02269EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/12 12:00 a.m.10 views

The vulnerabilities of the iw_troubleshoot, iw_onekey, and iw_webs components of the wireless access point software for Moxa AWK-3131A industrial systems allow attackers to create their own diagnostic scenarios.

The vulnerability of the iwtroubleshoot, iwonekey, and iwwebs components of the wireless access point software for Moxa AWK-3131A industrial systems is related to the use of pre-installed registration data. Exploiting this vulnerability could allow attackers to create their own diagnostic scenari...

7.1CVSS6.7AI score0.00324EPSS
SaveExploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/02/28 12:00 a.m.20 views

Adobe After Effects Installed

Binary data adobeaftereffectsinstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/02/26 12:00 a.m.13 views

Spring AMQP Installed

Binary data pivotalsoftwarespringamqpinstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/02/26 12:00 a.m.32 views

Spring Data JPA Installed

Binary data pivotalsoftwarespringdatajpainstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/02/26 12:00 a.m.14 views

Spring Security OAuth Installed

Binary data pivotalsoftwarespringsecurityoauthinstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/02/26 12:00 a.m.9 views

Spring Boot Installed

Binary data pivotalsoftwarespringbootinstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/02/20 12:00 a.m.16 views

VMware Carbon Black Cloud Endpoint Standard Installed (Windows)

Binary data vmwarecarbonblackcloudendpointstandardwininstalled.nbin...

7.3AI score
SaveExploits0References1
Apple
Apple
added 2020/02/18 12:00 a.m.12 views

Apple Security Update: watchOS 5.3.5

Apple recommends to install security update watchOS 5.3.5 on devices Apple Watch Series 1, Apple Watch Series 2, Apple Watch Series 3, and Apple Watch Series 4 when paired to an iPhone with iOS 12 installed...

6.7AI score
SaveExploits0References1
FreeBSD
FreeBSD
added 2020/02/13 12:00 a.m.31 views

PostgresSQL -- ALTER ... DEPENDS ON EXTENSION is missing authorization checks

The PostgreSQL project reports: Versions Affected: 9.6 - 12 The ALTER ... DEPENDS ON EXTENSION sub-commands do not perform authorization checks, which can allow an unprivileged user to drop any function, procedure, materialized view, index, or trigger under certain conditions. This attack is...

6.5CVSS7.6AI score0.01183EPSS
SaveExploits0References1
Rows per page
Query Builder