Lucene search
+L

1464 matches found

CNNVD
CNNVD
added 2020/12/15 12:0 a.m.9 views

IBM Financial Transaction Manager for SWIFT Services 信息泄露漏洞

IBM Financial Transaction Manager for SWIFT Services is a financial transaction manager product from IBM, USA. The product is primarily used for monitoring, tracking and reporting financial payments and transactions. An information disclosure vulnerability exists in IBM Financial Transaction...

5.3CVSS6AI score0.01284EPSS
Exploits0References4
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.8 views

IBM Financial Transaction Manager for SWIFT Services 信息泄露漏洞

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is a financial transaction manager product from IBM, USA. The product is primarily used for monitoring, tracking and reporting financial payments and transactions. An information disclosure vulnerability exists in IBM Financi...

5.9CVSS6.2AI score0.01257EPSS
Exploits0References4
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.9 views

IBM Financial Transaction Manager for SWIFT Services 安全漏洞

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is a financial transaction manager product from IBM, USA. The product is primarily used for monitoring, tracking and reporting financial payments and transactions. An information disclosure vulnerability exists in IBM Financi...

4CVSS5.9AI score0.0032EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2020/12/15 12:0 a.m.4 views

CVE-2020-4908

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release information on the login dialog. This information could be used in further attacks against the system...

5.3CVSS5.3AI score0.01054EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/12/15 12:0 a.m.3 views

CVE-2020-4904

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

6.5CVSS5.3AI score0.00476EPSS
Exploits0References3Affected Software1
Friends Of PHP
Friends Of PHP
added 2020/12/08 7:18 p.m.58 views

Deserialization Gadget chain in Swift Mailer

Summary Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer unserialize user input in his project. Details This vulnerability present no direct threat but is a vector that will enable remote code executio...

9CVSS5.7AI score0.01485EPSS
Exploits1Affected Software1
RedhatCVE
RedhatCVE
added 2020/12/02 6:4 p.m.46 views

CVE-2020-9861

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...

7.5CVSS3.2AI score0.01432EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2020/11/27 4:51 a.m.29 views

CVE-2019-8790

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...

6.2CVSS2.3AI score0.00352EPSS
Exploits0References1
Kitploit
Kitploit
added 2020/11/21 8:30 p.m.538 views

Fuzzilli - A JavaScript Engine Fuzzer

A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the Targets/...

9.8CVSS9.3AI score0.37951EPSS
Exploits38References46
Kitploit
Kitploit
added 2020/11/05 11:30 a.m.50 views

SwiftyInsta - Instagram Unofficial Private API Swift

Instagram offers two kinds of APIs to developers. The Instagram API Platform extremely limited in functionality and close to being discontinued, and the Instagram Graph API for Business and Creator accounts only. However, Instagram apps rely on a third type of API , the so-called Private API or...

7.6AI score
Exploits0References3
NVD
NVD
added 2020/11/02 11:15 p.m.26 views

CVE-2020-9861

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...

7.5CVSS7.3AI score0.01432EPSS
Exploits0References1
OSV
OSV
added 2020/11/02 11:15 p.m.16 views

CVE-2020-9861

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...

7.5CVSS6.9AI score
Exploits0References1
Prion
Prion
added 2020/11/02 11:15 p.m.22 views

Stack overflow

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...

5CVSS7.2AI score0.01432EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/11/02 10:14 p.m.66 views

CVE-2020-9861

CVE-2020-9861 affects Swift for Linux and describes a stack overflow triggered by deeply nested malicious JSON during parsing. The root cause is improper handling of deeply nested input in the JSON deserialization process, leading to stack exhaustion. According to the sources, the issue was addre...

7.5CVSS7.2AI score0.01432EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/02 10:14 p.m.36 views

CVE-2020-9861

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...

7.3AI score0.01432EPSS
Exploits0References1
CNVD
CNVD
added 2020/10/28 12:0 a.m.3 views

Command Execution Vulnerability in Quick Thinking Maps for Windows

Xunjie Mind Mapping is a computer mind mapping software, which can draw business flow charts, organization charts, data flow charts, program flow charts, etc. It supports custom drawing operations and so on. A command execution vulnerability exists in Swift Mind Mapping for Windows, which can be...

7.4AI score
Exploits0
CNVD
CNVD
added 2020/10/28 12:0 a.m.2 views

Command Execution Vulnerability in Swift Text-to-Speech Software

Swift Text to Speech Software is a speech synthesis software that converts text to speech. It is suitable for a variety of scenarios such as shopping mall store advertisements, audio production, audible reading and so on. A command execution vulnerability exists in Swift Text to Speech Software,...

7.4AI score
Exploits0
CNVD
CNVD
added 2020/10/28 12:0 a.m.6 views

Command Execution Vulnerability in Swift Flowchart

Xunjie Flowchart Maker is a flowchart drawing tool. The software can be used to draw business flowcharts, program flowcharts, organization charts, workflow charts and so on for various professions. Swift Flowchart has a command execution vulnerability that can be exploited by an attacker to gain...

7.4AI score
Exploits0
OSV
OSV
added 2020/10/27 8:15 p.m.20 views

CVE-2019-8790

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...

5.5CVSS6.4AI score
Exploits0References1
NVD
NVD
added 2020/10/27 8:15 p.m.30 views

CVE-2019-8790

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure...

5.5CVSS5.2AI score0.00352EPSS
Exploits0References1
Rows per page
Query Builder