Lucene search
+L

2095 matches found

Oracle linux
Oracle linux
•added 2021/04/27 12:00 a.m.•115 views

firefox security update

78.10.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.10.0-1 - Update to 78.10.0...

8.8CVSS1.3AI score0.01756EPSS
SaveExploits1
Oracle linux
Oracle linux
•added 2021/04/27 12:00 a.m.•106 views

thunderbird security update

78.10.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.10.0-1 - Update to 78.10.0...

8.8CVSS2AI score0.01756EPSS
SaveExploits2
VulnCheck KEV
VulnCheck KEV
•added 2021/04/26 12:00 a.m.•6 views

VulnCheck KEV: CVE-2021-30657

Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks...

5.5CVSS6.9AI score0.68531EPSS
SaveIn wildExploits5References4
Positive Technologies
Positive Technologies
•added 2021/04/26 12:00 a.m.•3 views

PT-2021-18918

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.3 Description A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences. This issue was addressed by adding a new Remote Login option for opting into Full Disk Access fo...

9.1CVSS0.00936EPSS
SaveExploits0References5
Apple
Apple
•added 2021/04/26 12:00 a.m.•137 views

About the security content of tvOS 14.5

About the security content of tvOS 14.5 This document describes the security content of tvOS 14.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS10AI score0.04491EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2021/04/23 10:20 p.m.•14 views

Insecure Configuration

Overview Affected versions of this package are vulnerable to Insecure Configuration. JavaScript inserted as part of a test has the ability to execute arbitrary code due to contextIsolation setting not being set within webpreferences. PoC js Hallo Details Cross-site scripting or XSS is a code...

5.9CVSS5.7AI score
SaveExploits0References2
Packet Storm
Packet Storm
•added 2021/04/22 12:00 a.m.•216 views

CMS Made Simple 2.2.15 Cross Site Scripting

Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting XSS Date: 2021/03/19 Exploit Author: bt0 Vendor Homepage: http://www.cmsmadesimple.org/ Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip Version: 2.2.15 CVE: CVE-2021-28935...

3.5CVSS5.6AI score0.01574EPSS
SaveExploits4
zdt
zdt
•added 2021/04/22 12:00 a.m.•71 views

CMS Made Simple 2.2.15 - (title) Cross-Site Scripting (XSS) Vulnerability

Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting XSS Exploit Author: bt0 Vendor Homepage: http://www.cmsmadesimple.org/ Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip Version: 2.2.15 CVE: CVE-2021-28935...

5.4CVSS0.01574EPSS
SaveExploits4
RedHat Linux
RedHat Linux
•added 2021/04/14 4:34 p.m.•89 views

Moderate: Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4.z [ovirt-4.4.5] 0-day security, bug fix, enhance

An update for org.ovirt.engine-root, ovirt-engine-ui-extensions, and ovirt-web-ui is now available for Red Hat Virtualization Engine 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

7.5CVSS6.5AI score0.03715EPSS
SaveExploits2References8
OpenVAS
OpenVAS
•added 2021/04/06 12:00 a.m.•38 views

CMS Made Simple <= 2.2.16 XSS Vulnerability

CMS Made Simple is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.4CVSS5.3AI score0.01574EPSS
SaveExploits4References1
NVD
NVD
•added 2021/04/02 6:15 p.m.•24 views

CVE-2020-29621

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to bypass Privacy preferences...

5.5CVSS0.00382EPSS
SaveExploits0References1
OSV
OSV
•added 2021/04/02 6:15 p.m.•11 views

CVE-2020-29621

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to bypass Privacy preferences...

5.5CVSS6.7AI score0.00382EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/04/02 5:43 p.m.•30 views

CVE-2020-29621

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to bypass Privacy preferences...

5.2AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/02 5:43 p.m.•81 views

CVE-2020-29621

CVE-2020-29621 is an Apple macOS vulnerability reported across multiple sources. It affects the AppleMobileFileIntegrity component and allowed a malicious application to bypass Privacy preferences. Apple’s security updates fixed the issue in macOS Big Sur 11.1 and in Security Update 2020-001 Cata...

5.5CVSS5.2AI score0.00382EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/02 12:00 a.m.•3 views

CVE-2020-29621: Missing Authorization

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to bypass Privacy preferences...

5.5CVSS5.7AI score0.00382EPSS
SaveExploits0References2
Citrix
Citrix
•added 2021/04/01 12:00 a.m.•15 views

".NET Framework Initialization Error" on Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. If a computer has .NET Framework version 4 installed and there are no older versions of the .NET...

7AI score
SaveExploits0
NVD
NVD
•added 2021/03/30 12:16 p.m.•40 views

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

5.4CVSS0.01574EPSS
SaveExploits4References2
OSV
OSV
•added 2021/03/30 12:16 p.m.•16 views

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

5.4CVSS6.1AI score0.01574EPSS
SaveExploits4References2
attackerkb
attackerkb
•added 2021/03/30 12:16 p.m.•9 views

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

5.4CVSS5.1AI score0.01574EPSS
SaveExploits4References3
Prion
Prion
•added 2021/03/30 12:16 p.m.•28 views

Design/Logic Flaw

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

3.5CVSS5.1AI score0.01574EPSS
SaveExploits4References2Affected Software1
Rows per page
Query Builder