Lucene search
+L

2559 matches found

Prion
Prion
added 2020/12/01 7:15 p.m.16 views

Information disclosure

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information...

5CVSS5.1AI score0.03206EPSS
SaveExploits0References3Affected Software2
Prion
Prion
added 2020/12/01 7:15 p.m.17 views

Information disclosure

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information...

5CVSS5.1AI score0.03206EPSS
SaveExploits0References3Affected Software2
Prion
Prion
added 2020/12/01 7:15 p.m.21 views

Information disclosure

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server...

5CVSS5.1AI score0.03206EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2020/12/01 6:40 p.m.27 views

CVE-2020-28583

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information...

5.2AI score0.03206EPSS
SaveExploits0References3
CVE
CVE
added 2020/12/01 6:40 p.m.61 views

CVE-2020-28583

The CVE-2020-28583 entry concerns Trend Micro Apex One and OfficeScan XG SP1 with an improper access control information disclosure. The connected documents explicitly describe that an unauthenticated attacker can connect to the product server and disclose version, build, and patch information vi...

5.3CVSS5.1AI score0.03206EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2020/12/01 6:40 p.m.57 views

CVE-2020-28582

This CVE-2020-28582 affects Trend Micro Apex One and OfficeScan XG SP1. The issue is an improper access control information disclosure in the web console (default port 4343) that allows unauthenticated remote attackers to connect to the product server and disclose the number of managed agents. Af...

5.3CVSS5.1AI score0.03206EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2020/12/01 6:40 p.m.35 views

CVE-2020-28582

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents...

5.2AI score0.03206EPSS
SaveExploits0References3
CVE
CVE
added 2020/12/01 6:40 p.m.66 views

CVE-2020-28576

CVE-2020-28576 affects Trend Micro Apex One and OfficeScan XG SP1, with an improper access control information disclosure . The issue allows an unauthenticated attacker to connect to the product server and disclose version/build information. Public details from ZDI describe exploitation via the w...

5.3CVSS5.1AI score0.03206EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2020/12/01 6:40 p.m.25 views

CVE-2020-28576

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information...

5.2AI score0.03206EPSS
SaveExploits0References3
CVE
CVE
added 2020/12/01 6:40 p.m.54 views

CVE-2020-28577

This CVE (CVE-2020-28577) affects Trend Micro Apex One and OfficeScan XG SP1. The connected advisory (ZDI-20-1376) describes an improper access control information disclosure allowing unauthenticated remote attackers to connect to the product server and disclose server hostname and database names...

5.3CVSS5.1AI score0.03206EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2020/12/01 6:40 p.m.61 views

CVE-2020-28573

Trend Micro Apex One and OfficeScan XG SP1 are affected by an improper access control information disclosure vulnerability. An unauthenticated attacker can connect to the web console (listening on TCP port 4343 by default) and disclose the total number of agents managed by the server. The root ca...

5.3CVSS5.1AI score0.03206EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/11/30 12:0 a.m.27 views

openSUSE Security Update : krb5 (openSUSE-2020-2062)

This update for krb5 fixes the following security issue : - CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message bsc1178512. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package...

7.5CVSS7.5AI score0.04365EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/11/30 12:0 a.m.36 views

openSUSE Security Update : slurm (openSUSE-2020-2033)

This update for slurm fixes the following issues : - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. This update was imported...

9.8CVSS7.1AI score0.02214EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2020/11/30 12:0 a.m.58 views

openSUSE Security Update : postgresql12 (openSUSE-2020-2029)

This update for postgresql12 fixes the following issues : - Upgrade to version 12.5 : - CVE-2020-25695, bsc1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. - CVE-2020-25694, bsc1178667: a Fix usage of complex...

8.8CVSS6.3AI score0.4644EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2020/11/30 12:0 a.m.34 views

openSUSE Security Update : postgresql10 (openSUSE-2020-2019)

This update for postgresql10 fixes the following issues : - Upgrade to version 10.15 : - CVE-2020-25695, bsc1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. - CVE-2020-25694, bsc1178667: a Fix usage of complex...

8.8CVSS6.3AI score0.4644EPSS
SaveExploits0References8
OPENSUSE Linux
OPENSUSE Linux
added 2020/11/27 12:0 a.m.35 views

Security update for krb5 (moderate)

openSUSE Security Update: Security update for krb5 Announcement ID: openSUSE-SU-2020:2062-1 Rating: moderate References: 1178512 Cross-References: CVE-2020-28196 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for krb5 fixes...

7.5CVSS7.3AI score0.04365EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2020/11/26 12:0 a.m.36 views

Security update for krb5 (moderate)

openSUSE Security Update: Security update for krb5 Announcement ID: openSUSE-SU-2020:2037-1 Rating: moderate References: 1178512 Cross-References: CVE-2020-28196 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for krb5 fixes...

7.5CVSS7.3AI score0.04365EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2020/11/25 12:0 a.m.37 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:2010-1 Rating: important References: 1178923 Cross-References: CVE-2019-8075 CVE-2020-16012 CVE-2020-16014 CVE-2020-16015 CVE-2020-16018 CVE-2020-16019 CVE-2020-16020 CVE-2020-16021 CVE-2020-16022...

9.6CVSS6.9AI score0.03011EPSS
SaveExploits3References1
OPENSUSE Linux
OPENSUSE Linux
added 2020/11/19 12:0 a.m.29 views

Security update for kernel-firmware (important)

openSUSE Security Update: Security update for kernel-firmware Announcement ID: openSUSE-SU-2020:1960-1 Rating: important References: 1178671 Cross-References: CVE-2020-12321 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

8.8CVSS8.8AI score0.0097EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/18 7:15 p.m.21 views

CVE-2020-28574

A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete arbitrary files on the product's management console...

7.5CVSS7.6AI score0.02773EPSS
SaveExploits1References2
Rows per page
Query Builder