Lucene search
+L

11038 matches found

OSV
OSV
added 2018/06/27 12:00 a.m.8 views

UBUNTU-CVE-2018-12367

In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals. In that work PerformanceNavigationTiming was not adjusted but it was found that it could be used as a precision timer. This vulnerabilit...

4.3CVSS7.2AI score0.01985EPSS
SaveExploits0References4
OSV
OSV
added 2018/06/26 7:37 a.m.16 views

SUSE-SU-2018:1815-1 Security update for zlib

This update brings zlib to 1.2.7, bringing bugfixes and speedups. It also reduces a buildtime issue with clamav 0.100 which caused hangs on 32bit platforms. bsc1095016...

9.8CVSS8AI score0.0755EPSS
SaveExploits0References12
OpenVAS
OpenVAS
added 2018/06/26 12:00 a.m.20 views

Microsoft Windows: Use of hardware-based encryption (removable data drives)

This policy setting allows you to manage BitLocker Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.2AI score
SaveExploits0References1
zdt
zdt
added 2018/06/25 12:00 a.m.97 views

Ecessa WANWorx WVR-30 < 10.7.4 - Cross-Site Request Forgery (Add Superuser) Vulnerability

Exploit for hardware platform in category web applications Exploit title: Ecessa WANWorx WVR-30 input type="hidden" name="userusername1" value=...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/06/25 12:00 a.m.62 views

Ecessa WANWorx WVR-30 < 10.7.4 - Cross-Site Request Forgery (Add Superuser)

Exploit title: Ecessa WANWorx WVR-30 input type="hidden" name="userenabled1" value="o...

5.3AI score
SaveExploits0
Oracle linux
Oracle linux
added 2018/06/25 12:00 a.m.310 views

samba security and bug fix update

3.6.23-51.0.1 - Remove use-after-free talloctos inlined function problem John Haxby orabug 18253258 3.6.24-51 - resolves: 1513877 - Fix memory leak in winbind 3.6.24-50 - resolves: 1553018 - Fix CVE-2018-1050 3.6.24-49 - resolves: 1536053 - Fix regression with non-wide symlinks to directories...

10CVSS0.99448EPSS
SaveExploits40
ATTACKERKB
ATTACKERKB
added 2018/06/24 11:29 p.m.4 views

CVE-2018-12714

An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/traceeventsfilter.c could be called with no filter, which is an N=0 case when it expected at least one line to have been read, thus making the N-1 index invalid. This allows attackers to cause a denial ...

10CVSS7.3AI score0.05213EPSS
SaveExploits1References7
Fedora
Fedora
added 2018/06/23 8:48 p.m.15 views

[SECURITY] Fedora 28 Update: redis-4.0.10-1.fc28

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

0.7AI score
SaveExploits0
Fedora
Fedora
added 2018/06/23 7:57 p.m.27 views

[SECURITY] Fedora 27 Update: redis-4.0.10-1.fc27

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

0.7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/23 5:57 a.m.56 views

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products

Summary Multiple vulnerabilities in the Oracle Java SE and the Java SE Embedded impact the IBM SDK, Java Technology Edition. Vulnerability Details CVEID: CVE-2016-5542 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Libraries component has no...

9.6CVSS0.8AI score0.04885EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/22 4:05 a.m.28 views

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Tivoli Netcool Performance Manager (CVE-2018-2783, CVE-2018-2800)

Summary IBM WebSphere Application Server is shipped as a component of Tivoli Netcool Performance Manager -Wireline. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Consult the security bulletin...

0.6AI score0.05302EPSS
SaveExploits0Affected Software1
Cent OS
Cent OS
added 2018/06/21 11:55 a.m.134 views

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2018:1854 An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.8CVSS7.3AI score0.60631EPSS
SaveExploits30References7
Microsoft KB
Microsoft KB
added 2018/06/21 12:00 a.m.15 views

June 21, 2018—KB4284822 (OS Build 16299.522)

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2018/06/21 12:00 a.m.14 views

June 21, 2018—KB4284833 (OS Build 14393.2339)

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2018/06/21 12:00 a.m.10 views

June 21, 2018—KB4284830 (OS Build 15063.1182)

None None...

6.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/06/20 9:44 a.m.96 views

OpenBSD Disables Intel Hyper-Threading to Prevent Spectre-Class Attacks

Security-oriented BSD operating system OpenBSD has decided to disable support for Intel's hyper-threading performance-boosting feature, citing security concerns over Spectre-style timing attacks. Introduced in 2002, Hyper-threading is Intel's implementation of Simultaneous Multi-Threading SMT tha...

0.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2018/06/19 4:58 a.m.9 views

kernel: Race condition between multiple sys_perf_event_open() calls

It was found that the original fix for CVE-2016-6786 was incomplete. There exist a race between two concurrent sysperfeventopen calls when both try and move the same pre-existing software group into a hardware context...

7.6CVSS7.1AI score0.01674EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/17 3:51 p.m.25 views

Security Bulletin: A vulnerability in Apache Commons FileUpload affects the IBM Performance Management product (CVE-2016-1000031)

Summary Apache Commons FileUpload could allow a remote attacker to execute arbitrary code on the system, caused by deserialization of untrusted data in DiskFileItem class of the FileUpload library. A remote attacker could exploit this vulnerability to execute arbitrary code under the context of t...

9.8CVSS1.4AI score0.33686EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/17 3:51 p.m.42 views

Security Bulletin: Vulnerabilities in IBM GSKit and IBM GSKit-Crypto affect IBM Performance Management products

Summary Vulnerabilities in IBM GSKit and IBM GSKit-Crypto affect IBM Performance Management products. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error when parsing DSA private keys. An attacker could exploit this...

10CVSS1AI score0.26335EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/17 3:50 p.m.39 views

Security Bulletin: Multiple vulnerabilities in the IBM Java SDK affect IBM Performance management products

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Cloud APM Private 8.1.4, IBM Cloud Application Performance Management, and IBM Application Performance Management 8.1.3. These issues were disclosed as part of the IBM Java SDK updates in Januar...

8.3CVSS8.8AI score0.07525EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder