Lucene search
+L

19008 matches found

CNVD
CNVD
added 2021/01/07 12:0 a.m.5 views

Unspecified vulnerability in FasterXML jackson-databind (CNVD-2021-03346)

FasterXML jackson-databind is a generic data binding package for Jackson 2.x. A security vulnerability exists in FasterXML jackson-databind. No details of the vulnerability are provided at this time...

8.1CVSS9.1AI score0.05218EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/01/06 12:0 a.m.10 views

Unspecified vulnerability in Mozilla Rust crayon crate

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in crayon crate in Mozilla Rust version 2020-08-31, which stems from a memory security violation via a handle-like handle. No details of the vulnerability are provided at this tim...

8.1CVSS6.6AI score0.0087EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/01/05 12:0 a.m.12 views

PT-2021-7293 · Xen +4 · Xen +4

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to a component of the Xen hypervisor, specifically the blkfront component, which has a resource release error. This can be exploited by a remote attacker to cause a denial ...

9.1CVSS7.6AI score0.67994EPSS
SaveExploits94References718
VulnCheck KEV
VulnCheck KEV
added 2021/01/01 12:0 a.m.9 views

VulnCheck KEV: CVE-2012-3152

Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems...

9.1CVSS7.5AI score0.98695EPSS
SaveExploits12References1
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/22 5:41 p.m.57 views

Security Bulletin: Unspecified Vulnerabilities in Rational Synergy (CVE-2012-0502,CVE-2012-0503,CVE-2012-0506,CVE-2012-0507,CVE-2011-3563,CVE-2012-0500,CVE-2012-0497,CVE-2012-0498,CVE-2012-0499,CVE-2012-0500,CVE-2012-0501,CVE-2012-0505,CVE-2011-5035)

Summary Vulnerabilities in the Java Runtime Environment JRE 6 update 32 and earlier component shipped with IBM Rational Synergy may affect the security of the product. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this...

10CVSS2.5AI score0.98113EPSS
SaveExploits36Affected Software1
RedHat Linux
RedHat Linux
added 2020/12/22 10:49 a.m.85 views

Moderate: Red Hat Security Advisory: mariadb-connector-c security, bug fix, and enhancement update

An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.8CVSS6.6AI score0.03485EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2020/12/22 12:0 a.m.265 views

RHEL 8 : mariadb-connector-c (RHSA-2020:5655)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5655 advisory. The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. The following...

8.8CVSS6.6AI score0.03485EPSS
SaveExploits0References15
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/18 1:31 p.m.52 views

Security Bulletin: Multiple vulnerabilities in the IBM Java Runtime affect IBM Rational ClearCase (CVE-2020-14577, CVE-2020-14578, CVE-2020-14579)

Summary There are vulnerabilities in the IBM® Runtime Environment Java™ Versions 7 and 8, which is used by IBM Rational ClearCase. These issues were disclosed as part of the IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU plus one additional vulnerability...

6.8CVSS1.4AI score0.04196EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/12/18 12:0 a.m.49 views

RHEL 8 : mariadb-connector-c (RHSA-2020:5503)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5503 advisory. The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. The following...

8.8CVSS6.6AI score0.03485EPSS
SaveExploits0References15
Rockylinux
Rockylinux
added 2020/12/15 4:4 p.m.48 views

mariadb-connector-c security, bug fix, and enhancement update

An update is available for mariadb-connector-c. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The MariaDB Native Client library C driver is used to connect...

8.8CVSS6.9AI score0.03485EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/12/09 8:0 a.m.34 views

CVE-2020-29656

An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dmapply.cgi?actionmode=initial&downloadtype=General&specialcgi=getlanguage makes it possible to reach "unknown functionality" in a "known to be easy" manner via an...

7.1AI score0.01058EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.5 views

PT-2020-5297 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the code of the Windows operating system, allowing an attacker to bypass the security features of the Windows lock screen. This could enable an attacker to...

7.2CVSS6.4AI score0.00987EPSS
SaveExploits0References21
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.3 views

PT-2020-5214 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Excel, which is associated with access control weaknesses. This can allow an attacker to bypass existing protection...

6.8CVSS6.1AI score0.02121EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.6 views

PT-2020-5296 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The vulnerability exists due to insufficient input validation in the Windows operating system, allowing a remote attacker to execute arbitrary code. This issue can be exploited by a...

9CVSS8.1AI score0.18177EPSS
SaveExploits0References24
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.3 views

PT-2020-5231 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in handling objects in memory, which can allow a remote attacker to gain access to protected information. This can lead to the disclosure of...

9CVSS9AI score0.70632EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.5 views

PT-2020-5255 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to insecure privilege management in the Windows Backup Engine component of the Windows operating system. Exploitation of this issue may allow an attacker ...

7.8CVSS7.2AI score0.0112EPSS
SaveExploits0References33
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.3 views

PT-2020-5212 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to insecure privilege management in the Windows Cloud Files Mini Filter Driver, which can be exploited to elevate privileges. This could...

7.8CVSS7.2AI score0.01196EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.2 views

PT-2020-5300 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange affected versions not specified Description: The issue is related to errors in the code of the Microsoft Exchange Server, which can be exploited by a remote attacker to execute arbitrary code. This allows the attacker to...

9CVSS8AI score0.48871EPSS
SaveExploits1References20
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.5 views

PT-2020-5232 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server, allowing a remote attacker to execute arbitrary code. This can be exploited by a...

8.8CVSS9.7AI score0.36514EPSS
SaveExploits4References24
Positive Technologies
Positive Technologies
added 2020/12/08 12:0 a.m.4 views

PT-2020-5230 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited by a remote attacker to perform a cross-site scripti...

8.7CVSS7.9AI score0.01298EPSS
SaveExploits0References6
Rows per page
Query Builder