Lucene search
+L

964 matches found

Positive Technologies
Positive Technologies
added 2022/02/05 12:0 a.m.3 views

PT-2022-2757 · Microsoft · Sharepoint Server +2

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundatio...

9CVSS7.4AI score0.01726EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/02/03 12:0 a.m.4 views

PT-2022-1698 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to conduct spoofing...

5.3CVSS5.2AI score0.01573EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.23 views

Mageia: Security Advisory (MGASA-2021-0506)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.6AI score0.0383EPSS
SaveExploits0References5
Redos
Redos
added 2022/01/14 12:0 a.m.54 views

ROS-20220114-01

Vulnerability in Firefox browser, related to incorrect processing of user data. of user data. Exploitation of the vulnerability could allow an attacker acting remotely to mislead, by showing an incorrect origin when requesting to run a program and processing an external URL protocol Firefox brows...

10CVSS8.9AI score0.01344EPSS
SaveExploits6
Positive Technologies
Positive Technologies
added 2022/01/11 12:0 a.m.4 views

PT-2022-1525 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the Windows Certificate authentication procedure, allowing an attacker to conduct spoofing attacks. It is associated with data substitution, enabling...

7.8CVSS9.4AI score0.00704EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2022/01/04 12:0 a.m.47 views

Debian DLA-2874-1 : thunderbird - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2874 advisory. - During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash...

10CVSS8.5AI score0.0383EPSS
SaveExploits0References51
Tenable Nessus
Tenable Nessus
added 2021/12/30 12:0 a.m.45 views

openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2021:1635-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1635-1 advisory. - An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code...

10CVSS8.2AI score0.0383EPSS
SaveExploits3References74
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.7 views

The vulnerability of Google Chrome’s Payments component, which allows a hacker to perform spoofing attacks

The vulnerability of Google Chrome’s Payments component exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to carry out spearishing attacks...

6.5CVSS7.1AI score0.01438EPSS
SaveExploits1References9Affected Software6
Tenable Nessus
Tenable Nessus
added 2021/12/17 12:0 a.m.58 views

openSUSE 15 Security Update : MozillaFirefox (openSUSE-SU-2021:1575-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1575-1 advisory. - Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability...

8.8CVSS7.4AI score0.0202EPSS
SaveExploits0References21
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.7 views

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to carry out spoofing attacks.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

6.5CVSS6.9AI score0.01624EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.6 views

The vulnerability of the Autofill component in the Microsoft Edge browser, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of the Autofill component in the Microsoft Edge browser involves bypassing authentication through spearphishing. Exploiting this vulnerability allows attackers to carry out spearphishing attacks remotely...

6.5CVSS6.8AI score0.03468EPSS
SaveExploits0References7Affected Software7
Veracode
Veracode
added 2021/12/14 7:28 p.m.21 views

Spoofing Attack

firefox:sid is vulnerable to spoofing attack. The vulnerability exists due to the high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or spoofing attack...

4.3CVSS2.7AI score0.00544EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/12/14 12:15 p.m.3 views

CVE-2021-42027

A vulnerability has been identified in SINUMERIK Edge All versions V3.2. The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and...

7.4CVSS7AI score0.00479EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/12/14 12:0 a.m.5 views

PT-2021-6346

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description A spoofing issue exists in Visual Studio Code due to improper handling of user data. Remote attackers may be able to perform a spoofing attack. Recommendations At the moment, there...

4.3CVSS6.2AI score0.02691EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2021/12/14 12:0 a.m.2 views

PT-2021-6349 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It may allow a remote attacker to perform a spoofing attack. Recommendations: At th...

7.6CVSS6AI score0.01227EPSS
SaveExploits0References9
NCSC
NCSC
added 2021/12/14 12:0 a.m.40 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to execute attacks that could result in the following categories of damage: Remote code execution User rights Spoofing Access to sensitive data Increased user privileges The tables...

9.6CVSS7.2AI score0.05098EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/12/14 12:0 a.m.6 views

Siemens SINUMERIK 信任管理问题漏洞

Siemens SINUMERIK Edge is a combination of hardware and software that provides a machine-oriented system platform for applications that facilitate digital production support and optimization.SINUMERIK Edge Certificate Improper Validation VulnerabilityAffected software does not properly validate...

7.4CVSS5.7AI score0.00479EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/12/14 12:0 a.m.8 views

PT-2021-5671

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to errors in the representation of information by the user interface, allowing an attacker to conduct a spoofing attack. This can affect the system, potentially...

5.5CVSS6.8AI score0.0198EPSS
SaveExploits0References7
NVD
NVD
added 2021/12/10 2:15 p.m.22 views

CVE-2021-40834

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS0.00727EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/10 2:15 p.m.5 views

CVE-2021-40834

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

4.3CVSS5.8AI score0.00727EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder