Lucene search
+L

666 matches found

CNVD
CNVD
added 2020/05/12 12:0 a.m.10 views

Unspecified vulnerability in slpjs

slpjs is a JavaScript library for validating and building the Simple Ledger Protocol SLP. A security vulnerability exists in versions of slpjs prior to 0.27.2 that can be exploited by an attacker to prevent users from generating tokens tokens...

8.6CVSS6.5AI score0.00932EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/09 12:0 a.m.2 views

slp-validate Input Validation Error Vulnerability

slp-validate is a lightweight SLP Simple Ledger Protocol validator with features such as pre-broadcast validation and burn protection. an input validation error vulnerability exists in slp-validate. The vulnerability stems from a network system or product that does not properly validate incoming...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/05/09 12:0 a.m.2 views

slpjs Input Validation Error Vulnerability

slpjs is a JavaScript library for validating and building the Simple Ledger Protocol SLP. slpjs A vulnerability exists in input validation errors in versions prior to 0.21.4. The vulnerability stems from a network system or product that does not properly validate input data. An attacker could...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/05/08 12:0 a.m.9 views

The vulnerability of the Account Hierarchy Manager component of the Oracle General Ledger software, a business automation system within the Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to protected data.

The vulnerability of the Account Hierarchy Manager component of the Oracle General Ledger software, a part of the Oracle E-Business Suite, relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

7.8CVSS7.2AI score0.01668EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2020/05/07 12:0 a.m.6 views

Ledger SAS Ledger Monero app information disclosure vulnerability

Ledger SAS Ledger Monero app is an application for Ledger eWallet device management from Ledger SAS, France. A security vulnerability exists in the Ledger SAS Ledger Monero app versions prior to 1.5.1 for Ledger Nano and Ledger S devices. An attacker could exploit the vulnerability by sending a...

5.5CVSS6.5AI score0.00441EPSS
SaveExploits1References1
NVD
NVD
added 2020/05/06 2:15 p.m.24 views

CVE-2020-6861

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...

5.5CVSS5.4AI score0.00441EPSS
SaveExploits1References2
OSV
OSV
added 2020/05/06 2:15 p.m.15 views

CVE-2020-6861

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...

5.5CVSS6.6AI score
SaveExploits0References2
Prion
Prion
added 2020/05/06 2:15 p.m.15 views

Design/Logic Flaw

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...

2.1CVSS5.4AI score0.00441EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2020/05/06 1:15 p.m.49 views

CVE-2020-6861

Ledger Monero app (before version 1.5.1) on Ledger Nano/S is affected by a flaw in the protocol design that lets a local attacker obtain the master spending key by sending specially crafted messages to the app on a PIN-entered Ledger connected to a host PC. Affected component: Ledger Monero app; ...

5.5CVSS5.3AI score0.00441EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/05/06 1:15 p.m.20 views

CVE-2020-6861

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...

5.4AI score0.00441EPSS
SaveExploits1References2
CNVD
CNVD
added 2020/05/06 12:0 a.m.2 views

slp-validate Input Validation Error Vulnerability

slp-validate is a lightweight SLP Simple Ledger Protocol validator with features such as pre-broadcast validation and burn protection. An input validation error vulnerability exists in slp-validate. The vulnerability stems from a network system or product that does not properly validate incoming...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/04/29 12:0 a.m.9 views

Unspecified Vulnerability in Simple Ledger Electron-Cash-SLP

Simple Ledger Electron-Cash-SLP is a suite of SLP e-wallet implementations from Simple Ledger that supports creating, burning, and sending SLP tokens, among other things. A security vulnerability exists in Simple Ledger Electron-Cash-SLP versions prior to 3.6.2, which can be exploited by attacker...

8.6CVSS6.8AI score0.01569EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:0 a.m.5 views

Oracle E-Business Suite General Ledger Unauthorized Access Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. general Ledger is one of the...

7.5CVSS8.7AI score0.01668EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/15 2:15 p.m.26 views

CVE-2020-2750

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

7.5CVSS7AI score0.01668EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/15 2:15 p.m.4 views

CVE-2020-2750

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

7.5CVSS7.2AI score0.01668EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/15 2:15 p.m.22 views

Design/Logic Flaw

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

5CVSS7.1AI score0.01668EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/04/15 1:29 p.m.10 views

CVE-2020-2750

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

7.5CVSS6.5AI score0.01668EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/04/15 1:29 p.m.23 views

CVE-2020-2750

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

7.5CVSS7.3AI score0.01668EPSS
SaveExploits0References1
CVE
CVE
added 2020/04/15 1:29 p.m.55 views

CVE-2020-2750

The CVE-2020-2750 entry concerns Oracle E-Business Suite General Ledger, specifically the Account Hierarchy Manager component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability is described as easily exploitable with unauthenticated network access via HTTP, allowing access ...

7.5CVSS7.2AI score0.01668EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
added 2020/04/15 10:40 a.m.68 views

49 New Google Chrome Extensions Caught Hijacking Cryptocurrency Wallets

Google has ousted 49 Chrome browser extensions from its Web Store that masqueraded as cryptocurrency wallets but contained malicious code to siphon off sensitive information and empty the digital currencies. The 49 browser add-ons, potentially the work of Russian threat actors, were identified fi...

0.1AI score
SaveExploits0
Rows per page
Query Builder