Lucene search
+L

38684 matches found

ThreatPost
ThreatPost
added 2021/08/31 8:12 p.m.64 views

Proxyware Services Open Orgs to Abuse – Report

Services that allow consumers to resell their own internet bandwidth for profit to businesses that want to resell it are ripe for abuse, according to researchers. The burgeoning business model is growing in popularity with consumers who earn about $1 for every 10GB of their bandwidth shared with...

7.1AI score
SaveExploits0References2
NVD
NVD
added 2021/08/31 4:15 p.m.32 views

CVE-2021-35240

A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'...

6.5CVSS0.01074EPSS
SaveExploits0References4
OSV
OSV
added 2021/08/31 4:15 p.m.12 views

CVE-2021-35240

A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'...

4.8CVSS5.8AI score0.01074EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/08/31 4:15 p.m.7 views

CVE-2021-35240

A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'...

6.5CVSS5.9AI score0.01074EPSS
SaveExploits0References5
Prion
Prion
added 2021/08/31 4:15 p.m.20 views

Cross site scripting

A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'...

3.5CVSS4.7AI score0.01074EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2021/08/31 3:57 p.m.103 views

CVE-2021-35240

CVE-2021-35240 is a stored XSS vulnerability in SolarWinds Orion Platform related to the Help Server setting. The issue affects systems prior to 2020.2.6 HF1, with IE users being impacted due to lack of rel=noopener. It is listed among multiple vulnerabilities for the affected version (CVE-2021-3...

6.5CVSS5.3AI score0.01074EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2021/08/31 3:57 p.m.35 views

CVE-2021-35240 Stored XSS via Help Server settings

A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'...

6.5CVSS7.5AI score0.01074EPSS
SaveExploits0References4
ICS
ICS
added 2021/08/31 12:00 a.m.97 views

FANUC Robot Controllers (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION: Exploitable remotely Vendor: FANUC Equipment: R-30iA and R-30iB series controllers Vulnerabilities: Integer Coercion Error, Out-of-bounds Write 2. UPDATE INFORMATION This advisory is a follow-up to the original advisory titled ICSA-21-243-02P FANUC...

8.8CVSS8.6AI score0.01183EPSS
SaveExploits0References5
OSV
OSV
added 2021/08/30 6:15 a.m.10 views

AZL-7227 CVE-2021-39272 affecting package fetchmail for versions less than 6.4.22-1

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH...

5.9CVSS6AI score0.00925EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/30 6:15 a.m.9 views

UBUNTU-CVE-2021-39272

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH...

5.9CVSS5.8AI score0.00925EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/08/30 12:00 a.m.6 views

Fetchmail 加密问题漏洞

Fetchmail is an application for downloading emails. Fetchmail versions prior to 6.4.22 have a security vulnerability that prevents the implementation of STARTTLS session encryption in certain cases, such as IMAP and pre-authorization in certain situations...

5.9CVSS5.5AI score0.00925EPSS
SaveExploits0References14
Openbugbounty
Openbugbounty
added 2021/08/29 12:34 p.m.19 views

internet-design.ru Cross Site Scripting vulnerability OBB-2128716

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Exploit DB
Exploit DB
added 2021/08/27 12:00 a.m.234 views

COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNC_Ctrl.dll' Heap Buffer Overflow

Exploit Title: COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNCCtrl.dll' Heap Buffer Overflow Date: 02.08.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.commax.com COMMAX UMS Client ActiveX Control 1.7.0.2 CNCCtrl.dll Heap Buffer Overflow Vendor: COMMAX Co., Ltd. Prodcut web page:...

5.3AI score
SaveExploits0
zdt
zdt
added 2021/08/27 12:00 a.m.153 views

COMMAX UMS Client ActiveX Control 1.7.0.2 - (CNC_Ctrl.dll) Heap Buffer Overflow Vulnerability

Exploit Title: COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNCCtrl.dll' Heap Buffer Overflow Exploit Author: LiquidWorm Vendor Homepage: https://www.commax.com COMMAX UMS Client ActiveX Control 1.7.0.2 CNCCtrl.dll Heap Buffer Overflow Vendor: COMMAX Co., Ltd. Prodcut web page:...

0.6AI score
SaveExploits0
zdt
zdt
added 2021/08/27 12:00 a.m.150 views

COMMAX WebViewer ActiveX Control 2.1.4.5 - (Commax_WebViewer.ocx) Buffer Overflow Vulnerability

Exploit Title: COMMAX WebViewer ActiveX Control 2.1.4.5 - 'CommaxWebViewer.ocx' Buffer Overflow Exploit Author: LiquidWorm Vendor Homepage: https://www.commax.com COMMAX WebViewer ActiveX Control 2.1.4.5 CommaxWebViewer.ocx Buffer Overflow Vendor: COMMAX Co., Ltd. Prodcut web page:...

0.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2021/08/27 12:00 a.m.273 views

COMMAX WebViewer ActiveX Control 2.1.4.5 - 'Commax_WebViewer.ocx' Buffer Overflow

Exploit Title: COMMAX WebViewer ActiveX Control 2.1.4.5 - 'CommaxWebViewer.ocx' Buffer Overflow Date: 02.08.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.commax.com COMMAX WebViewer ActiveX Control 2.1.4.5 CommaxWebViewer.ocx Buffer Overflow Vendor: COMMAX Co., Ltd. Prodcut web pag...

5.3AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2021/08/26 10:20 p.m.19 views

A Bad Solar Storm Could Cause an 'Internet Apocalypse'

The undersea cables that connect much of the world would be hit especially hard by a coronal mass ejection...

2.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/08/26 12:00 a.m.23 views

Fedora: Security Advisory for tor (FEDORA-2021-52d6a75d28)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.01685EPSS
SaveExploits1References2
Schneier on Security
Schneier on Security
added 2021/08/25 3:13 p.m.33 views

Surveillance of the Internet Backbone

Vice has an article about how data brokers sell access to the Internet backbone. This is netflow data. Its useful for cybersecurity forensics, but can also be used for things like tracing VPN activity. At a high level, netflow data creates a picture of traffic flow and volume across a network. It...

2.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/08/24 12:00 a.m.9 views

PT-2021-5659

Name of the Vulnerable Software and Affected Versions tvOS versions prior to 15.2 macOS Monterey versions prior to 12.1 Safari versions prior to 15.2 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 Description An integer overflow issue has been addressed wit...

8.8CVSS6.2AI score0.06964EPSS
SaveExploits1References148
Rows per page
Query Builder