Lucene search
+L

3712 matches found

BDU FSTEC
BDU FSTEC
added 2020/06/22 12:0 a.m.10 views

The vulnerability of the fs/xfs/xfs_super.c component in the Linux operating system allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the fs/xfs/xfssuper.c component in the Linux operating system is related to its use after release. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

7.8CVSS6.4AI score0.00607EPSS
SaveExploits0References33Affected Software17
Microsoft KB
Microsoft KB
added 2020/06/09 7:0 a.m.55 views

Description of the security update for SharePoint Server 2019: June 9, 2020

None None...

8.8CVSS6.5AI score0.69303EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.5 views

The vulnerability of the Squid proxy server, caused by buffer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Squid proxy server arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.5CVSS7.2AI score0.7179EPSS
SaveExploits0References17Affected Software9
CNVD
CNVD
added 2020/06/04 12:0 a.m.5 views

Unspecified vulnerability in Google Chrome accessibility

Google Chrome is a web browser of Google Google, Inc. accessibility is one of the auxiliary functions of the plug-in. A security vulnerability exists in accessibility in Google Chrome versions prior to 74.0.3729.108, which can be exploited by remote attackers to obtain sensitive information from...

6.5CVSS6.2AI score0.00746EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/03 11:15 p.m.28 views

DEBIAN-CVE-2020-6503

Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS6.9AI score0.00746EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/03 11:15 p.m.12 views

CVE-2020-6503

Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS8AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/06/03 11:15 p.m.3 views

CVE-2020-6503

Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS6.8AI score0.00746EPSS
SaveExploits1References3
OSV
OSV
added 2020/06/03 11:15 p.m.6 views

UBUNTU-CVE-2020-6503

Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS6.8AI score0.00746EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2020/06/03 10:50 p.m.50 views

CVE-2020-6503

Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS5.6AI score0.00746EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.6 views

The vulnerability of the Linux operating system’s kernel, related to writing beyond buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS6.8AI score0.00707EPSS
SaveExploits1References25Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.10 views

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance (ASA) microprogramming software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance ASA microprogramming software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

9.3CVSS7.7AI score0.02358EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.10 views

The vulnerability of the SQLite database management system’s ALTER TABLE instruction allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SQLite database management system’s ALTER TABLE command lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS6.9AI score0.0761EPSS
SaveExploits0References14Affected Software11
Microsoft KB
Microsoft KB
added 2020/05/12 2:0 p.m.154 views

Description of the security update for SharePoint Server 2019: May 12, 2020

None None...

8.8CVSS6.6AI score0.15134EPSS
SaveExploits1
OSV
OSV
added 2020/05/08 10:57 a.m.10 views

MGASA-2020-0202 Updated matio packages fix security vulnerability

Updated matio packages fix a security vulnerability: Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvarstruct.c CVE-2019-13107. The matio package has been updated to version 1.5.16 to fix this issue. Also: - The scilab package has been...

9.8CVSS9.5AI score0.01766EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/05/08 12:0 a.m.8 views

The vulnerability of the printcontrol-web component lies in the lack of mechanisms for providing permissions, privileges, and access control. This allows attackers to manipulate the accessibility of information.

The vulnerability of the printcontrol-web component is related to the lack of mechanisms for granting permissions, privileges, and managing access control. Exploiting this vulnerability could allow an attacker to compromise the accessibility of information...

5.3CVSS5.5AI score
SaveExploits0References1
ThreatPost
ThreatPost
added 2020/05/01 8:53 p.m.101 views

Upgraded Cerberus Spyware Spreads Rapidly via MDM

A newly discovered variant of the Cerberus Android trojan has been spotted, with vastly expanded and more sophisticated info-harvesting capabilities, and the ability to run TeamViewer. It was spotted by researchers being used in a targeted campaign on a multinational conglomerate. Unusually, the...

0.2AI score
SaveExploits0References8
ThreatPost
ThreatPost
added 2020/04/30 2:40 p.m.45 views

New Android Malware Targets PayPal, CapitalOne App Users

An Android mobile malware has been uncovered that steals payment data from users of popular financial apps like PayPal, Barclays, CapitalOne and more. The infostealer, called EventBot, has targeted users of more than 200 different banking, money-transfer services and general cryptocurrency wallet...

7.3AI score
SaveExploits0References11
The Hacker News
The Hacker News
added 2020/04/30 12:14 p.m.62 views

New Android Malware Steals Banking Passwords, Private Data and Keystrokes

A new type of mobile banking malware has been discovered abusing Android's accessibility features to exfiltrate sensitive data from financial applications, read user SMS messages, and hijack SMS-based two-factor authentication codes. Called "EventBot" by Cybereason researchers, the malware is...

1.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2020/04/30 12:14 p.m.12 views

New Android Malware Steals Banking Passwords, Private Data and Keystrokes

A new type of mobile banking malware has been discovered abusing Android's accessibility features to exfiltrate sensitive data from financial applications, read user SMS messages, and hijack SMS-based two-factor authentication codes. Called "EventBot" by Cybereason researchers, the malware is...

5.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.12 views

The vulnerability of the Slurm resource manager lies in the lack of protection for SQL query structures, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Slurm resource manager is related to the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS7.2AI score0.0268EPSS
SaveExploits0References10Affected Software7
Rows per page
Query Builder