Lucene search
+L

6575 matches found

Carbon Black Blog
Carbon Black Blog
added 2019/07/08 4:3 p.m.159 views

CB TAU Threat Intelligence Notification: Maze Ransomware

Maze Ransomware, also known as ChaCha Ransomware, has been discovered being distributed by the Fallout exploit kit. After the encryption, it will create a ransom note named ‘DECRYPT-FILES.html’ in each of the encrypted file’s folders. The bottom of the ransom note is a base64 string which contain...

6.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:0 a.m.5 views

The vulnerability in the Intel Data Center Manager SDK toolset, related to key management errors, allows a hacker to disclose sensitive information that is protected by the software.

The vulnerability of the Intel Data Center Manager SDK development tools is related to key management errors. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these tools...

7.1CVSS5.4AI score0.00455EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:0 a.m.6 views

The vulnerability of the Intel Data Center Manager SDK, related to access control deficiencies, allows a perpetrator to disclose protected information.

The vulnerability of the Intel Data Center Manager SDK development tools is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by these tools...

5.5CVSS5.4AI score0.00408EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:0 a.m.7 views

The vulnerability of the Intel Data Center Manager SDK software development tools, related to access control deficiencies, allows attackers to enhance their privileges.

The vulnerability of the Intel Data Center Manager SDK development tools is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

5.3CVSS5.5AI score0.00461EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:0 a.m.7 views

The vulnerability of the Intel Data Center Manager SDK software development tools, related to access control deficiencies, allows a perpetrator to disclose protected information.

The vulnerability of the Intel Data Center Manager SDK development tools is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by these tools...

3.3CVSS5.4AI score0.00408EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:0 a.m.8 views

The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK allows unauthorized access, enabling attackers to enhance their privileges.

The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.2CVSS5.5AI score0.00468EPSS
SaveExploits0References4Affected Software1
Malwarebytes
Malwarebytes
added 2019/07/01 5:2 p.m.47 views

A week in security (June 24 – 30)

Last week on Malwarebytes Labs, we peeled back the mystery on an elusive malware campaign that relied on blank JavaScript injections, detailed for readers our latest telemetry on the tricky GreenFlash Sundown exploit, and looked at one of the top campaigns directing traffic toward scareware pages...

0.7AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2019/06/28 2:24 p.m.71 views

This Week in Security News: Malvertising and Internet of Things Malware

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about a new Internet of Things malware that’s bricked thousands of devices. Also, read about a ransomware family that’s using...

7.5CVSS7.8AI score0.8883EPSS
SaveExploits11
CNVD
CNVD
added 2019/06/28 12:0 a.m.7 views

Foxit PDF SDK ActiveX Buffer Overflow Vulnerability (CNVD-2019-21947)

Foxit PDF SDK ActiveX is China's Foxit Foxit company's a PDF software development kit, but also a visual programming components. The product provides PDF display and annotation features. A security vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions. A remote attacker can...

7.8CVSS7.1AI score0.02241EPSS
SaveExploits1References1
Malwarebytes
Malwarebytes
added 2019/06/26 6:30 p.m.118 views

GreenFlash Sundown exploit kit expands via large malvertising campaign

Exploit kit activity has been relatively quiet for some time, with the occasional malvertising campaign reminding us that drive-by downloads are still a threat. However, during the past few days we noticed a spike in our telemetry for what appeared to be a new exploit kit. Upon closer inspection ...

0.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.4 views

The vulnerability of the built-in software in Intel NUC Kits relates to improper session management. This allows attackers to gain access to protected information, cause system failures, or enhance their privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to improper session management. Exploiting this vulnerability can allow an attacker to access protected information, cause service failures, or increase their privileges...

7.5CVSS5.5AI score0.00392EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.6 views

The vulnerability of the built-in software in Intel NUC Kits relates to the pointer corruption, which allows attackers to gain access to protected information, cause system failures, or enhance their privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to a pointer corruption. Exploiting this vulnerability can allow an attacker to access protected information, cause system failures, or increase their privileges...

7.5CVSS5.5AI score0.00392EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.6 views

The vulnerability of the built-in software in Intel NUC Kits is related to buffer overflows in memory, which allows attackers to access protected information, cause system failures, or gain increased privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to access protected information, cause system failures, or increase their privileges...

8.2CVSS5.9AI score0.00424EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.5 views

The vulnerability of the built-in software in Intel NUC Kits stems from insufficient input data validation. This allows attackers to gain access to protected information, cause system failures, or enhance their privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to access protected information, cause service failures, or increase their privileges...

7.5CVSS5.5AI score0.00392EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.6 views

The vulnerability of the built-in software in Intel NUC Kits stems from insufficient input data validation. This allows attackers to gain access to protected information, cause system failures, or enhance their privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to access protected information, cause service failures, or increase their privileges...

8.2CVSS5.5AI score0.00424EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.5 views

The vulnerability of the built-in software in Intel NUC Kits relates to reading data beyond the buffer in memory. This allows attackers to access protected information, cause system failures, or gain increased privileges.

The vulnerability of the built-in software in the Intel NUC Kit arises from reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to access protected information, cause system failures, or increase their privileges...

7.5CVSS5.7AI score0.00392EPSS
SaveExploits0References3Affected Software40
RedHat Linux
RedHat Linux
added 2019/06/18 5:22 p.m.55 views

Moderate: Red Hat Security Advisory: java-11-openjdk security update

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS6.7AI score0.37618EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/06/14 12:0 a.m.7 views

Intel NUC Kit Buffer Overflow Vulnerability (CNVD-2019-42732)

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. A buffer overflow vulnerability exists in the system firmware in the Intel NUC Kit. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries...

6.7CVSS7.4AI score0.00424EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/06/14 12:0 a.m.7 views

Intel NUC Kit Input Validation Error Vulnerability (CNVD-2019-42733)

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. An input validation error vulnerability exists in the system firmware in the Intel NUC Kit. The vulnerability originates from a network system or product that does not properly validate incoming data. An attacker could...

6.7CVSS7AI score0.00392EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/06/14 12:0 a.m.7 views

Intel NUC Kit Buffer Overflow Vulnerability (CNVD-2019-42731)

The Intel NUC Kit is a small desktop computer from Intel Corporation USA. A buffer error vulnerability exists in the system firmware in the Intel NUC Kit. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries,...

6.7CVSS7.4AI score0.00392EPSS
SaveExploits0References1
Rows per page
Query Builder