Lucene search
+L

4221 matches found

Citrix
Citrix
added 2017/12/06 12:0 a.m.10 views

EDT Session Connection/Reconnection Attempts using UDP and TCP in Parallel

Enhancement to existing EDT feature Starting with 2017 Q4 EDT-compatible versions of Receiver check “Requirements for this feature” section, session connections will be attempted using EDT and TCP in parallel. This will occur during: Initial connection Session roaming from one Receiver device to...

6.6AI score
SaveExploits0
Citrix
Citrix
added 2017/12/05 12:0 a.m.9 views

Mouse Offset Behavior During Multiple ICA Session in Receiver for Windows and Windows (Store)

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Attempting to run multiple ICA sessions simultaneously, may cause high memory and Disk I/O activity,...

7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2017/11/15 12:0 a.m.72 views

Microsoft SharePoint Enterprise Server 2016 Multiple Vulnerabilities (KB4011244)

This host is missing an important security update according to Microsoft KB4011244 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS8.6AI score0.02474EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2017/11/14 12:0 a.m.363 views

KLA11139 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions and privilege escalations. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities related to an incorre...

9.3CVSS9AI score0.99945EPSS
SaveExploits33References40
Cvelist
Cvelist
added 2017/11/03 6:0 p.m.29 views

CVE-2017-1000136

Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable to old sessions not being invalidated after a password change...

6.6AI score0.00889EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2017/10/31 1:12 p.m.408 views

Hashcat v4.0 - World's Fastest and Most Advanced Password Recovery Utility

hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 200 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and OSX, and has facilities to help enable...

9.1AI score
SaveExploits0
NVD
NVD
added 2017/10/30 2:29 p.m.29 views

CVE-2014-3526

Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions...

7.5CVSS7.3AI score0.02278EPSS
SaveExploits0References1
Prion
Prion
added 2017/10/30 2:29 p.m.21 views

Information disclosure

Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions...

5CVSS6.7AI score0.02278EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2017/10/24 6:33 p.m.34 views

GHSA-JWHV-RGQC-FQJ5 Session fixation vulnerability in Rails

Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."...

6.8CVSS9.1AI score0.03576EPSS
SaveExploits0References17
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.34 views

Session fixation vulnerability in Rails

Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."...

6.8CVSS6.4AI score0.03576EPSS
SaveExploits0References16Affected Software1
NVD
NVD
added 2017/10/24 5:29 p.m.18 views

CVE-2015-5171

The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry PCF Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire existing sessions...

9.8CVSS9.8AI score0.01167EPSS
SaveExploits0References1
RubySec
RubySec
added 2017/10/24 12:0 a.m.21 views

Moderate severity vulnerability that affects rails

Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."...

6.8CVSS7AI score0.03576EPSS
SaveExploits0References1Affected Software1
Veeam
Veeam
added 2017/10/19 12:0 a.m.19 views

Veeam ONE Business Shows Irrelevant Data

Challenge Veeam ONE Business View shows outdated data or no data at all Cause Veeam ONE Reporter collection task has stuck or failed Solution Running data collection manually You can run data collection for Veeam ONE Reporter and Veeam ONE Business View manually. This can be necessary when...

6.9AI score
SaveExploits0
OSV
OSV
added 2017/10/13 5:29 p.m.6 views

CVE-2017-10613

A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Networks Junos OS, allows an attacker with CLI access and the ability to initiate remote sessions to the loopback interface with the defined...

5.5CVSS5.8AI score0.00307EPSS
SaveExploits0References1
Prion
Prion
added 2017/10/13 5:29 p.m.17 views

Design/Logic Flaw

A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Networks Junos OS, allows an attacker with CLI access and the ability to initiate remote sessions to the loopback interface with the defined...

2.1CVSS5.5AI score0.00307EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2017/10/13 5:0 p.m.62 views

CVE-2017-10613

CVE-2017-10613 affects Juniper Junos OS kernels where a loopback filter action command in a running configuration can be triggered by an attacker with CLI access and the ability to initiate remote sessions to the loopback interface, causing the kernel to hang. Affected Junos releases include 12.1...

5.5CVSS5.5AI score0.00307EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2017/10/13 1:29 p.m.5 views

CVE-2017-8715

The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Windows Security Feature Bypass"...

5.3CVSS5.8AI score0.01658EPSS
SaveExploits0References3
NVD
NVD
added 2017/10/13 1:29 p.m.21 views

CVE-2017-11823

The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Microsoft Windows Security Feature Bypass"...

7.2CVSS6.4AI score0.02556EPSS
SaveExploits4References4
OSV
OSV
added 2017/10/13 1:29 p.m.4 views

CVE-2017-11823

The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Microsoft Windows Security Feature Bypass"...

6.7CVSS5.8AI score0.02556EPSS
SaveExploits4References4
Prion
Prion
added 2017/10/13 1:29 p.m.13 views

Security feature bypass

The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Microsoft Windows Security Feature Bypass"...

7.2CVSS6.6AI score0.02556EPSS
SaveExploits4References4Affected Software1
Rows per page
Query Builder