Lucene search
+L

8374 matches found

CNVD
CNVD
•added 2015/01/22 12:00 a.m.•14 views

Unspecified Local Vulnerability in Oracle Java SE/Java SE Embedded/JRockit Hotspot Subcomponents (CNVD-2015-00563)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications.Oracle JRockit is a comprehensive portfolio of Java runtime solutions that includes the industry's fastest standard Java solutions. An unspecified security vulnerability in the Oracle...

5CVSS9AI score0.05032EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/01/22 12:00 a.m.•8 views

Unspecified Vulnerability in Oracle Java SE 2D Subpart (CNVD-2015-00576)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE 2D subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustworthy Java...

2.6CVSS6.6AI score0.0405EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/01/22 12:00 a.m.•12 views

Unspecified Vulnerability in Oracle Java SE Libraries Subpart (CNVD-2015-00574)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE Libraries subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustworth...

4.3CVSS6.6AI score0.00405EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/01/22 12:00 a.m.•9 views

Unspecified Vulnerability in Oracle Java SE Swing Subcomponent (CNVD-2015-00561)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE Swing subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustworthy Ja...

5CVSS6.9AI score0.04351EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/01/22 12:00 a.m.•8 views

Unspecified Vulnerability in Oracle Java SE Libraries Subpart (CNVD-2015-00573)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE Libraries subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustworth...

5CVSS6.9AI score0.0415EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2015/01/21 9:38 p.m.•13 views

ICU: font parsing OOB read (OpenJDK 2D, 8056276)

A boundary check flaw was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could allow an untrusted Java application or applet to disclose portions of the Java Virtual Machine memory...

2.6CVSS6.7AI score0.0405EPSS
SaveExploits0References5
The Hacker News
The Hacker News
•added 2015/01/21 9:39 a.m.•20 views

WhatsApp Web — New WhatsApp Feature Allows You to Chat From Your Browser

The most popular smartphone messaging service WhatsApp is now able to communicate with friends from their PC. No Rumours at all !! Enjoy WhatsApp from your desktop from now on. Last month, it was leaked that Whatsapp was working on a web client and finally from today they are introducing it to th...

6.7AI score
SaveExploits0
CVE
CVE
•added 2015/01/18 6:00 p.m.•76 views

CVE-2013-7252

KWallet's kwalletd (KWallet before KDE Applications 14.12.0) uses Blowfish with ECB mode to encrypt the password store instead of CBC, enabling codebook-style attacks to guess passwords when the password store is accessible. This vulnerability is documented across multiple advisories (GLSA-201606...

5CVSS6.4AI score0.02147EPSS
SaveExploits1References7Affected Software1
The Hacker News
The Hacker News
•added 2015/01/03 12:17 a.m.•71 views

Hacker Leaks Xbox One SDK that could let Developers make Homebrew Apps

Just a week ago on Christmas, the massive Distributed Denial of Service DDoS attack from the notorious hacking group Lizard Squad knocked Sony’s PlayStation Network and Microsoft’s Xbox Live offline, but as if it wasn't the end of disaster for Microsoft. This time it isn't a case of services bein...

6.5AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2014/12/30 3:06 p.m.•21 views

Facebook Careers Page XXE Vulnerability Patched

A vulnerability was discovered and patched in a third-party service that handles resumes on Facebook’s careers page. The discovery was worth more than $6,000 in a bounty paid out by Facebook to researcher Mohamed Ramadan of Egypt, who published some details of the vulnerability and exploit on his...

0.4AI score
SaveExploits0References3
Prion
Prion
•added 2014/12/11 12:59 a.m.•33 views

Remote code execution

Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 Gold and SP1, and Office Web Apps 2010 SP2 and 2013 Go...

9.3CVSS8.5AI score0.19378EPSS
SaveExploits0References1Affected Software3
CVE
CVE
•added 2014/12/11 12:00 a.m.•101 views

CVE-2014-6357

CVE-2014-6357 is a use-after-free remote code execution vulnerability reported in Microsoft Office products (Office 2010 SP2, Office 2013 SP1/Gold, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2/2013) and related Office Web ...

9.3CVSS8.8AI score0.19378EPSS
SaveExploits0References1Affected Software5
OpenVAS
OpenVAS
•added 2014/12/10 12:00 a.m.•36 views

Microsoft Office Web Apps Remote Code Execution Vulnerabilities (3017301)

This host is missing a critical security update according to Microsoft Bulletin MS14-081. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS5AI score0.19378EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2014/12/09 12:00 a.m.•42 views

MS14-081: Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3017301)

The remote Windows host has a version of Microsoft Office, Microsoft Word, Office Compatibility Pack, Microsoft Word Viewer, SharePoint Server, or Microsoft Office Web Apps that is affected by one or more remote code execution vulnerabilities due to Microsoft Word improperly handling objects in...

9.3CVSS6.4AI score0.19378EPSS
SaveExploits0References3
Symantec
Symantec
•added 2014/12/09 12:00 a.m.•46 views

Microsoft Office CVE-2014-6357 Use After Free Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

9.3CVSS0.4AI score0.19378EPSS
SaveExploits0Affected Software4
Veeam
Veeam
•added 2014/12/08 12:00 a.m.•62 views

How to configure Email Notifications when using Gmail or Google Apps Mail

Solution Select the product below to be taken to the product-specific information for using Google Gmail to send email notifications. Veeam Backup & Replication v12 Veeam Backup & Replication v13 Veeam ONE v12 Veeam ONE v13 Veeam Backup for Microsoft 365 v7+ Veeam Agent for Microsoft Windows v6+...

6.5AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2014/11/28 11:59 p.m.•26 views

Uber’s Android app is Literally Malware?

The popular ride-sharing service Uber has been hit by various controversies lately, but now the things gone even worse for the company when a security researcher made a worrying discovery this week and claims, "Uber’s app is literally malware." The ride-hailing company is in disputes of handling...

6.5AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2014/11/10 10:28 p.m.•9 views

Masque Attack — New iOS Vulnerability Allows Hackers to Replace Apps with Malware

Android have been a long time target for cyber criminals, but now it seems that they have turned their way towards iOS devices. Apple always says that hacking their devices is too difficult for cyber crooks, but a single app has made it possible for anyone to hack an iPhone. A security flaw in...

6.3AI score
SaveExploits0
zdt
zdt
•added 2014/11/04 12:00 a.m.•30 views

Facebook official android apps crash exploit

facebook messanger android app version 15.0.0.15.13 and facebook official android app version 20.0.0.25.15 will got crash permanently. all lower versions are also affected. just perform the steps mentioned ; Usage Info send the provided code to victim any person via facebook chat and that persons...

7.2AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2014/10/20 10:24 a.m.•12 views

Privacy Criticism Hits OSX Yosemite over Location Data

Apple has fixed a huge number of security vulnerabilities in OS X and iTunes and, at the same time, is being hit with criticisms about privacy issues in the new version of OS X. The latest version of the operating system, known as Yosemite, sends location information to Apple by default via the...

0.2AI score
SaveExploits0References4
Rows per page
Query Builder