Lucene search
+L

9954 matches found

OpenVAS
OpenVAS
•added 2019/07/13 12:00 a.m.•68 views

Ubuntu: Security Advisory (USN-4054-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.7AI score0.20271EPSS
SaveExploits4References2
OSV
OSV
•added 2019/07/11 12:00 a.m.•14 views

UBUNTU-CVE-2019-11723

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This...

7.5CVSS7.3AI score0.00807EPSS
SaveExploits0References4
Mend
Mend
•added 2019/06/28 5:37 p.m.•4 views

CVE-2018-14867

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters...

6.9CVSS0.01399EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2019/06/28 5:37 p.m.•48 views

CVE-2018-14867

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters...

5.3CVSS5.4AI score0.01399EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/28 12:00 a.m.•7 views

CVE-2018-14867: Improper Access Control

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters...

5.3CVSS5.9AI score0.01399EPSS
SaveExploits0References2
OSV
OSV
•added 2019/06/27 5:15 p.m.•16 views

CVE-2018-20073

Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem...

5.5CVSS8.5AI score
SaveExploits0References3
NVD
NVD
•added 2019/06/27 5:15 p.m.•34 views

CVE-2018-20073

Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem...

5.5CVSS5AI score0.00245EPSS
SaveExploits0References3
OSV
OSV
•added 2019/06/27 5:15 p.m.•11 views

DEBIAN-CVE-2018-20073

Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem...

5.5CVSS8.6AI score0.00245EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2019/06/27 5:15 p.m.•22 views

CVE-2018-20073

Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem...

5.5CVSS6.4AI score0.00245EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/06/27 4:13 p.m.•35 views

CVE-2018-20073

Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem...

5.6AI score0.00245EPSS
SaveExploits0References3
CVE
CVE
•added 2019/06/27 4:13 p.m.•289 views

CVE-2018-20073

CVE-2018-20073 concerns Google Chrome prior to 72.0.3626.81, where use of extended attributes in downloads could allow a local attacker to read download URLs via the filesystem (information leakage). The CVE is evidenced in multiple sources, including the NVD entry and Debian/openSUSE/OSS advisor...

5.5CVSS5.5AI score0.00245EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2019/06/27 4:13 p.m.•48 views

CVE-2018-20073

Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem...

5.5CVSS6.7AI score0.00245EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/06/27 12:00 a.m.•47 views

EulerOS 2.0 SP8 : wget (EulerOS-SA-2019-1663)

According to the version of the wget package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - setfilemetadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attribut...

7.8CVSS6.8AI score0.00659EPSS
SaveExploits1References2
OSV
OSV
•added 2019/06/26 6:15 p.m.•6 views

DEBIAN-CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

5.5CVSS6.3AI score0.02356EPSS
SaveExploits0References1
OSV
OSV
•added 2019/06/26 6:15 p.m.•16 views

CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

5.5CVSS7.5AI score
SaveExploits0References11
NVD
NVD
•added 2019/06/26 6:15 p.m.•30 views

CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

5.5CVSS5.7AI score0.02356EPSS
SaveExploits0References11
Prion
Prion
•added 2019/06/26 6:15 p.m.•37 views

Null pointer dereference

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

4.3CVSS6.3AI score0.02356EPSS
SaveExploits0References11Affected Software1
UbuntuCve
UbuntuCve
•added 2019/06/26 12:00 a.m.•38 views

CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

5.5CVSS6.4AI score0.02356EPSS
SaveExploits0References5
OSV
OSV
•added 2019/06/26 12:00 a.m.•17 views

UBUNTU-CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

6.8CVSS6.7AI score0.02356EPSS
SaveExploits0References6
Microsoft KB
Microsoft KB
•added 2019/06/20 12:00 a.m.•24 views

End of support for Office 2010

End of support for Office 2010 Support for Office 2010 ended on October 13, 2020 and there will be no extension and no extended security updates.Buy or try Microsoft 365 Tip: Not sure what version of Office you have? See Find details for other versions of Office to help you determine what version...

5.6AI score
SaveExploits0
Rows per page
Query Builder