Lucene search
+L

604 matches found

Imperva Blog
Imperva Blog
added 2022/02/24 3:06 p.m.18 views

Let’s Get Under the Hood of Imperva Snapshot

A stress-free guide for the prudent cloud operator With minimal setup, Imperva Snapshot enables you to immediately start your in-depth Amazon Web Services AWS RDS database assessment. With no prior training required, cloud operators can use this useful tool to pinpoint deficiencies in their...

0.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/01/19 12:00 a.m.12 views

The vulnerability in the isolated iframe of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, allows an attacker to exploit incorrect restrictions on the visible layers or frames of the user interface.

The vulnerability in the isolated iframe of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to an incorrect limitation on the visible layers or frames of the user interface. This issue arises due to a mistake in navigation within the iframe when requesting...

7.8CVSS6.5AI score0.00643EPSS
SaveExploits0References10Affected Software7
NVD
NVD
added 2022/01/10 2:12 p.m.25 views

CVE-2022-22287

Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox...

4.6CVSS0.00243EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/10 2:12 p.m.27 views

Improper access control

Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox...

2.1CVSS4.7AI score0.00243EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:00 a.m.12 views

The vulnerability in the isolated iframe environment of Google Chrome allows a perpetrator to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability in the isolated iframe environment of Google Chrome relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information through a specially created web page...

6.4CVSS7.6AI score0.00805EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:00 a.m.15 views

The vulnerability of the Portals components in Google Chrome and Microsoft Edge allows a hacker to escape from an isolated software environment.

The vulnerability of the Portals components in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to escape from an isolated software environment remotely...

10CVSS7.8AI score0.11641EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/10/15 12:00 a.m.11 views

The vulnerability of the isolated programming environment AppContainer in Microsoft Windows operating systems, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the isolated programming environment AppContainer in Microsoft Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.5CVSS7.2AI score0.02403EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/17 2:15 a.m.8 views

CVE-2021-20791

Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors...

9.3CVSS7.3AI score0.00842EPSS
SaveExploits0References2
Prion
Prion
added 2021/09/17 2:15 a.m.18 views

Improper access control

Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors...

6.4CVSS8.8AI score0.00842EPSS
SaveExploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/09/10 6:44 a.m.6 views

Multiple vulnerabilities in RevoWorks Browser

Overview RevoWorks Browser provided by J's Communication Co., Ltd. is a virtual browser which enables internet isolation. It provides the function that enables access to drives, folders, files, and registries under the isolated environment from the local environment when running the web browser...

9.6CVSS7.2AI score0.01263EPSS
SaveExploits0References8
OSV
OSV
added 2021/07/14 2:15 p.m.19 views

CVE-2021-24117

In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

4.9CVSS6.3AI score
SaveExploits0References3
NVD
NVD
added 2021/07/14 2:15 p.m.21 views

CVE-2021-24117

In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

4.9CVSS0.02221EPSS
SaveExploits0References3
NVD
NVD
added 2021/07/14 1:15 p.m.30 views

CVE-2021-24116

In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped,...

4.9CVSS0.01036EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/14 1:15 p.m.35 views

CVE-2021-24119

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

4.9CVSS6.1AI score
SaveExploits0References7
NVD
NVD
added 2021/07/14 1:15 p.m.34 views

CVE-2021-24119

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

4.9CVSS0.01484EPSS
SaveExploits0References7
OSV
OSV
added 2021/07/14 1:15 p.m.3 views

DEBIAN-CVE-2021-24119

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

4.9CVSS5.6AI score0.01484EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/14 1:15 p.m.8 views

DEBIAN-CVE-2021-24116

In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped,...

4.9CVSS5.2AI score0.01036EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/14 1:15 p.m.34 views

Code injection

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

4CVSS4.9AI score0.01484EPSS
SaveExploits0References6Affected Software3
OSV
OSV
added 2021/07/14 1:15 p.m.14 views

UBUNTU-CVE-2021-24116

In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped,...

4.9CVSS5.8AI score0.01036EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2021/07/14 1:15 p.m.32 views

CVE-2021-24119

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...

4.9CVSS6.3AI score0.01484EPSS
SaveExploits0References3
Rows per page
Query Builder