Lucene search
+L

9312 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2020/07/24 8:18 a.m.22 views

Security Bulletin: Security vulnerability has been identified in BigFix Platform shipped with IBM License Metric Tool.

Summary BigFix Platform is shipped with IBM License Metric Tool. Information about a security vulnerability affecting BigFix Platform has been published in a security bulletin. Vulnerability Details CVEID: CVE-2020-4095 DESCRIPTION: HCL BigFix Platform could allow a local authenticated attacker t...

6CVSS0.3AI score0.00196EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2020/07/22 12:00 a.m.13 views

5vshop e-commerce system has a logic flaw vulnerability

5vshop e-commerce system is shijiazhuang zhenghong network technology limited company a station building system. 5vshop e-commerce system has a logic flaw vulnerability, attackers can use this vulnerability to arbitrarily modify the payment amount, resulting in economic losses...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2020/07/21 12:00 a.m.3 views

EmpireCMS is vulnerable to information leakage

EmpireCMS is a content management system CMS. EmpireCMS suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

6.2AI score
SaveExploits0
ossfuzz
ossfuzz
added 2020/07/20 11:14 p.m.30 views

immer:flex-vector-gc: Crash in immer::detail::rbts::node<int, immer::memory_policy<immer::heap_policy<immer::gc

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=5660697665732608 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: flex-vector-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7083eb04e907 Crash...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2020/07/20 9:33 p.m.21 views

immer:flex-vector-gc: Crash in decltype

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=6017886557306880 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: flex-vector-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00018055f9f9 Crash...

6.8AI score
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/07/20 9:15 p.m.4 views

CVE-2020-6103

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered...

9.9CVSS9.2AI score0.02781EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2020/07/20 12:00 a.m.139 views

Amazon Linux 2 : java-11-amazon-corretto, --advisory ALAS2-2020-1464 (ALAS-2020-1464)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.8+10-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1464 advisory. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Support...

8.3CVSS6.4AI score0.05166EPSS
SaveExploits0References18
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/16 5:05 p.m.34 views

Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes kubelet and kube-proxy security vulnerability (CVE-2020-8558)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in the Kubernetes kubelet and kube-proxy that could allow neighboring nodes to bypass localhost boundary CVE-2020-8558 Vulnerability Details CVEID: CVE-2020-8558 Description: Kubernetes kube-proxy could allow a remote...

8.8CVSS0.03597EPSS
SaveExploits5Affected Software1
ThreatPost
ThreatPost
added 2020/07/16 4:14 p.m.380 views

Zoom Addresses Vanity URL Zero-Day

A previously undisclosed bug in Zoom’s customizable URL feature has been addressed that could have offered a hacker a perfect social-engineering avenue for stealing credentials or sensitive information. Disclosed by Zoom and Check Point on Thursday, the security flaw existed in the “Vanity URL”...

8.1AI score0.05272EPSS
SaveExploits1References8
ossfuzz
ossfuzz
added 2020/07/15 11:53 p.m.31 views

immer:flex-vector-gc: Segv on unknown address in immer::detail::rbts::relaxed_pos<immer::detail::rbts::node<int, immer::memory_po

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=4872518268354560 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: flex-vector-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

6.8AI score
SaveExploits0Affected Software1
OSV
OSV
added 2020/07/15 6:15 p.m.22 views

CVE-2020-14702

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.9CVSS5.8AI score
SaveExploits0References4
NVD
NVD
added 2020/07/15 6:15 p.m.16 views

CVE-2020-14695

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Orac...

5.3CVSS0.00538EPSS
SaveExploits0References5
Prion
Prion
added 2020/07/15 6:15 p.m.22 views

Buffer overflow

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

4.3CVSS5.9AI score0.00962EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/07/15 6:15 p.m.27 views

Design/Logic Flaw

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0.0-17.12.17.1, 18.1.0.0-18.8.19 and 19.12.0-19.12.5. Difficult to exploit vulnerability allows...

4CVSS6AI score0.01134EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2020/07/15 6:15 p.m.24 views

CVE-2020-14713

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Orac...

7.5CVSS7.1AI score0.00372EPSS
SaveExploits0References2
Prion
Prion
added 2020/07/15 6:15 p.m.20 views

Design/Logic Flaw

Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications component: WebGUI. Supported versions that are affected are 3.0.0-3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

4.3CVSS5.9AI score0.00962EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/07/15 6:15 p.m.18 views

Design/Logic Flaw

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Orac...

4.7CVSS5.5AI score0.00549EPSS
SaveExploits0References5Affected Software2
Cvelist
Cvelist
added 2020/07/15 5:34 p.m.37 views

CVE-2020-14717

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

4.7CVSS5.1AI score0.01024EPSS
SaveExploits0References1
CVE
CVE
added 2020/07/15 5:34 p.m.59 views

CVE-2020-14690

CVE-2020-14690 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (Analytics Actions). Affects supported versions: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. The vulnerability permits unauthenticated, network-based access via HTTP with user interaction required...

8.2CVSS8.3AI score0.01432EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/07/15 5:34 p.m.12 views

CVE-2020-14612

Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft component: Time and Labor. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HRMS. Successful...

5.4CVSS5.8AI score0.00769EPSS
SaveExploits0References1
Rows per page
Query Builder