Lucene search
+L

4826 matches found

Tenable Nessus
Tenable Nessus
added 2022/12/06 12:00 a.m.28 views

Integration Discovered Host

This host was discovered by an integration and added to the scan. This plugin reports which integration discovered this host and added it to the scan. Please see specific integration configuration for more details. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

5.4AI score
SaveExploits0
OSV
OSV
added 2022/12/02 10:25 p.m.132 views

GHSA-RP2V-V467-Q9VQ GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package

Impact Running GuardDog against a specially-crafted package can allow an attacker to write an arbitrary file on the machine where GuardDog is executed. This is due to a path traversal vulnerability when extracting the .tar.gz file of the package being scanned, which exists by design in the...

5.8CVSS6.6AI score0.0067EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/12/02 12:00 a.m.9 views

PT-2022-36797 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state includes functions such as gdev mem open scan lines interleaved, mem open, and gs...

6.9AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/11/24 12:00 a.m.41 views

SUSE SLED15: WebKit2GTK-4.0-lang / WebKit2GTK-4.1-lang / WebKit2GTK-5.0-lang / etc (SUSE-SU-2022:4207-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4207-1 advisory. Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafte...

8.8CVSS7.4AI score0.01545EPSS
SaveExploits0References16
Packet Storm
Packet Storm
added 2022/11/23 12:00 a.m.415 views

Backdoor.Win32.Serman.a MVID-2022-0659 Unauthenticated Open Proxy

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/f312e3a436995b86b205a1a37b1bf10f.txt Contact: [email protected] Media: twitter.com/malvuln Backup media: infosec.exchange/@malvuln Threat: Backdoor.Win32.Serman.a Vulnerability:...

0.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/11/22 12:00 a.m.12 views

PT-2022-5987 · Aveva · Aveva Edge

Name of the Vulnerable Software and Affected Versions: AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior Description: The issue allows a client to provide a malicious connection string, potentially enabling an adversary to port scan the LAN based on the hosts' responses. This is...

5.3CVSS5.3AI score0.01199EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
added 2022/11/21 12:00 a.m.44 views

SSH Per-Host Command Logging

If the 'Always report SSH commands' advanced preference is selected in the scan policy, this plugin will report all commands run over SSH on the host in a machine readable format. TRUSTED...

5.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/11/15 12:00 a.m.18 views

LDAP Active Directory - Person Enumeration

Binary data ldapenumperson.nbin...

7.3AI score
SaveExploits0
OSV
OSV
added 2022/11/14 7:42 p.m.16 views

GSD-2022-1007501 wifi: brcmfmac: fix invalid address access when enabling SCAN log level

wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.262 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/11/14 6:59 p.m.17 views

GSD-2022-1007040 wifi: brcmfmac: fix invalid address access when enabling SCAN log level

wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/11/14 12:00 a.m.8 views

PT-2022-35501 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to an invalid address access when enabling SCAN log level in the brcmfmac wifi driver. The actual impact and attack plausibility have not yet been proven...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/14 12:00 a.m.9 views

PT-2022-35295 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to an invalid address access when enabling SCAN log level in the brcmfmac wifi driver. The actual impact and attack plausibility have not yet been proven...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/14 12:00 a.m.10 views

PT-2022-35647 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to an invalid address access when enabling SCAN log level in the brcmfmac wifi driver. The actual impact and attack plausibility have not yet been proven...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/14 12:00 a.m.14 views

PT-2022-35818 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.298 Description: The issue concerns the KVM arm64 vgic, specifically with the exit condition in the scan its table function. The actual impact and attack plausibility have not yet been proven...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/14 12:00 a.m.15 views

PT-2022-35246 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue concerns the KVM arm64 vgic, specifically with the exit condition in the scan its table function. The actual impact and attack plausibility have not yet been proven...

7.2AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/11/10 12:00 a.m.129 views

Microsoft Edge (Chromium) < 107.0.1418.42 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.42. It is, therefore, affected by multiple vulnerabilities as referenced in the November 10, 2022 advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...

9.6CVSS8.4AI score0.00886EPSS
SaveExploits0References13
OSV
OSV
added 2022/11/08 6:15 a.m.12 views

CVE-2020-35473

An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in Bluetooth Core Specifications 5.0 through 5.2, may be used to identify devices using Resolvable Private Addressing RPA by...

4.3CVSS5.8AI score0.00353EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/11/08 12:00 a.m.11 views

PT-2022-8926 · Bluetooth Special Interest · Bluetooth Core Specification

Name of the Vulnerable Software and Affected Versions: Bluetooth Core Specifications versions 4.0 through 5.2 Description: An information leakage issue in the Bluetooth Low Energy advertisement scan response and extended scan response may be used to identify devices using Resolvable Private...

4.3CVSS4.7AI score0.00353EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/11/08 12:00 a.m.42 views

CVE-2020-35473

An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in Bluetooth Core Specifications 5.0 through 5.2, may be used to identify devices using Resolvable Private Addressing RPA by...

4.7AI score0.00353EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/11/08 12:00 a.m.12 views

CVE-2020-35473

An information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in Bluetooth Core Specifications 4.0 through 5.2, and extended scan response in Bluetooth Core Specifications 5.0 through 5.2, may be used to identify devices using Resolvable Private Addressing RPA by...

6.9AI score0.00353EPSS
SaveExploits0References2
Rows per page
Query Builder