Lucene search
K

1306 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2019-8607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari...

6.5CVSS6.9AI score0.00683EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2015-7981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pngconverttorfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitiv...

5CVSS7AI score0.01694EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2025/02/27 3:11 a.m.1 views

SUSE CVE-2022-49171

In the Linux kernel, the following vulnerability has been resolved: ext4: don't BUG if someone dirty pages without asking ext4 first unpinuserpagesremote is dirtying pages without properly warning the file system in advance. A related race was noted by Jan Kara in 20181; however, more recently...

5.5CVSS7.4AI score0.00007EPSS
Exploits0References4
CVE
CVE
added 2025/01/27 9:46 p.m.222 views

CVE-2025-24126

CVE-2025-24126 describes an input validation issue in AirPlay across Apple platforms. The vulnerability allows a local-network actor to cause an unexpected termination or memory corruption. Patches are provided in visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18....

9.8CVSS7.1AI score0.00125EPSS
Exploits0References10Affected Software6
NVD
NVD
added 2024/12/12 2:15 a.m.14 views

CVE-2024-54500

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing a maliciously crafted image may result in disclosure of process memory...

5.5CVSS0.00043EPSS
Exploits0References13
Cvelist
Cvelist
added 2024/12/11 10:56 p.m.14 views

CVE-2024-54486

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing a maliciously crafted font may result in the disclosure of process memory...

0.00285EPSS
Exploits0References8
Apple
Apple
added 2024/12/11 12:0 a.m.27 views

About the security content of tvOS18.2

About the security content of tvOS18.2 This document describes the security content of tvOS 18.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Rece...

9.8CVSS7AI score0.07766EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/11/15 4:30 p.m.20 views

CVE-2024-52525 Nextcloud Server User password is available in memory of the PHP process

Nextcloud Server is a self hosted personal cloud system. Under certain conditions the password of a user was stored unencrypted in the session data. The session data is encrypted before being saved in the session storage Redis or disk, but it would allow a malicious process that gains access to t...

1.8CVSS0.0074EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2024/11/11 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for syslinux (EulerOS-SA-2024-2915)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.16887EPSS
Exploits4References2
Vulnrichment
Vulnrichment
added 2024/10/28 9:7 p.m.17 views

CVE-2024-44215

This issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. Processing an image may result in disclosure of process memory...

5.7AI score0.0002EPSS
Exploits0References7
Cvelist
Cvelist
added 2024/10/28 9:7 p.m.15 views

CVE-2024-44215

This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing an image may result in disclosure of process memory...

0.0002EPSS
Exploits0References8
CVE
CVE
added 2024/10/28 9:7 p.m.51 views

CVE-2024-44215

CVE-2024-44215 affects Apple OS families. The issue arises when processing an image, which may disclose process memory. Affected products/versions include tvOS 18.1; iOS 18.1 and iOS 17.7.1 (iPadOS same); macOS Ventura 13.7.1 and macOS Sonoma 14.7.1; watchOS 11.1; and visionOS 2.1. The descriptio...

5.5CVSS5.8AI score0.0002EPSS
Exploits0References14Affected Software6
Apple
Apple
added 2024/10/28 12:0 a.m.26 views

About the security content of macOS Ventura 13.7.1

About the security content of macOS Ventura 13.7.1 This document describes the security content of macOS Ventura 13.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

9.3CVSS6.9AI score0.00482EPSS
Exploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/10/09 12:0 a.m.21 views

CentOS 6 : chromium-browser (RHSA-2020:1487)

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1487 advisory. - Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

8.8CVSS7.7AI score0.01907EPSS
Exploits9References25
Vulnrichment
Vulnrichment
added 2024/08/28 6:29 a.m.10 views

CVE-2021-22509 Handling of sensitive data in process memory in NetIQ Advance Authentication

A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user. The issue affects NetIQ Advance Authentication before 6.3.5.1...

8.1CVSS6.8AI score0.00096EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/28 6:29 a.m.16 views

CVE-2021-22509 Handling of sensitive data in process memory in NetIQ Advance Authentication

A vulnerability identified in storing and reusing information in Advance Authentication. This issue can lead to leakage of sensitive data to unauthorized user. The issue affects NetIQ Advance Authentication before 6.3.5.1...

8.1CVSS0.00096EPSS
Exploits0References1
NVD
NVD
added 2024/06/29 9:15 p.m.17 views

CVE-2024-39846

NewPass before 1.2.0 stores passwords rather than password hashes directly, which makes it easier to obtain unauthorized access to sensitive information. NOTE: in each case, data at rest is encrypted, but is decrypted within process memory during use...

3.5CVSS0.00032EPSS
Exploits0References2
CVE
CVE
added 2024/06/29 12:0 a.m.49 views

CVE-2024-39846

NewPass before 1.2.0 stores passwords directly (not as hashes), enabling easier unauthorized access to sensitive information. Data at rest is encrypted, but passwords are decrypted in-process during use, creating exposure risk. Affected versions: prior to 1.2.0. Remediation: upgrade to 1.2.0 or l...

3.5CVSS6.8AI score0.00032EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/29 12:0 a.m.15 views

CVE-2024-39846

NewPass before 1.2.0 stores passwords rather than password hashes directly, which makes it easier to obtain unauthorized access to sensitive information. NOTE: in each case, data at rest is encrypted, but is decrypted within process memory during use...

0.00032EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/11 12:0 a.m.1 views

CyberGhostVPN Security Breach

CyberGhostVPN is a highly optimized VPN server from CyberGhostVPN Romania. A security vulnerability exists in CyberGhostVPN version 8.4.3.12823, which stems from a process that remains open after logging out, allowing an attacker to obtain user credentials by dumping the process memory and parsin...

6.5CVSS6.8AI score0.00281EPSS
Exploits0References3
Rows per page
Query Builder