Lucene search
K

9293 matches found

MSRC
MSRC
added 2019/07/09 7:0 a.m.7 views

July 2019 Security Update Release

We have released the July security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found in the Security Update Guide...

3AI score
Exploits0
ossfuzz
ossfuzz
added 2019/07/05 4:27 a.m.16 views

icu/collator_rulebased_fuzzer: Crash in icu_64::UCharsTrie::branchNext

Detailed report: https://oss-fuzz.com/testcase?key=5693360544677888 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f8c94ee4a30 Crash State:...

6.6AI score
Exploits0Affected Software1
ossfuzz
ossfuzz
added 2019/07/01 4:38 p.m.14 views

icu/collator_rulebased_fuzzer: Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32

Detailed report: https://oss-fuzz.com/testcase?key=5695958395912192 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x614000010698 Crash State:...

6.6AI score
Exploits0Affected Software1
Hewlett-Packard
Hewlett-Packard
added 2019/06/23 12:0 a.m.23 views

HPSBGN03620 rev. 4 - HP Support Assistant Escalation of Privilege Vulnerability

Potential Security Impact Elevation of privilege and unauthorized modification of directories or files. Source: HP, HP Product Security Response Team PSRT Reported by: Philippe Laulheret McAfee Advanced Threat Research, ManhNDd Bkav Corporation VULNERABILITY SUMMARY The vulnerability allows a use...

7.3CVSS0.7AI score0.0163EPSS
Exploits1
Prion
Prion
added 2019/06/17 5:15 p.m.23 views

Code injection

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system board, an attacker can use a special key sequence Ctrl-\ to obtain a shell with root privileges. After gaining root access, the attacker can...

7.2CVSS6.7AI score0.00574EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2019/06/17 4:19 p.m.16 views

CVE-2019-12789

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system board, an attacker can use a special key sequence Ctrl-\ to obtain a shell with root privileges. After gaining root access, the attacker can...

6.7AI score0.00574EPSS
Exploits2References2
MSRC
MSRC
added 2019/06/11 5:0 p.m.11 views

June 2019 security update release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide...

2.9AI score
Exploits0
MSRC
MSRC
added 2019/06/11 7:0 a.m.13 views

June 2019 security update release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide...

2.9AI score
Exploits0
MSRC
MSRC
added 2019/06/11 7:0 a.m.5 views

June 2019 security update release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide...

6.7AI score
Exploits0
Microsoft CVE
Microsoft CVE
added 2019/06/11 7:0 a.m.29 views

Local Security Authority Subsystem Service Denial of Service Vulnerability

This security update corrects a denial of service in the Local Security Authority Subsystem Service LSASS caused when an authenticated attacker sends a specially crafted authentication request. A remote attacker who successfully exploited this vulnerability could cause a denial of service on the...

6.8CVSS2.6AI score0.05786EPSS
Exploits0
Fedora
Fedora
added 2019/06/02 5:42 a.m.13 views

[SECURITY] Fedora 29 Update: drupal7-xmlsitemap-2.6-1.fc29

The XML sitemap module creates a sitemap that conforms to the sitemaps.org specification 1. This helps search engines to more intelligently crawl a website and keep their results up to date. The sitemap created by the module can be automatically submitted to Ask, Google, Bing formerly Windows Liv...

6.9AI score
Exploits0
Fedora
Fedora
added 2019/06/02 12:55 a.m.18 views

[SECURITY] Fedora 30 Update: drupal7-xmlsitemap-2.6-1.fc30

The XML sitemap module creates a sitemap that conforms to the sitemaps.org specification 1. This helps search engines to more intelligently crawl a website and keep their results up to date. The sitemap created by the module can be automatically submitted to Ask, Google, Bing formerly Windows Liv...

6.9AI score
Exploits0
Microsoft KB
Microsoft KB
added 2019/05/21 12:0 a.m.6 views

Windows 10 update history

Windows 10 update history Updates for Windows 10 version 1511 Windows 10 is a service, which means it gets better through periodic software updates.The great news is you usually don’t have to do anything! If you have enabled automatic updates, new updates will automatically download and install...

6.8AI score
Exploits0
Kitploit
Kitploit
added 2019/05/17 8:37 p.m.285 views

Acunetix Vulnerability Scanner Now With Network Security Scans

User-friendly and competitively priced, Acunetix leads the market in automatic web security testing technology. Its industry-leading crawler fully supports HTML5, JavaScript, and AJAX-heavy websites, enabling the auditing of complex, authenticated applications. Acunetix provides the only technolo...

7.1AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.31 views

Microsoft Windows Mail HTML Line Breaking Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. Authentication is not required to exploit this vulnerability. The specific flaw exists within the logic that implements automatic line breaks when displaying HTML content in the...

7.7CVSS2.6AI score0.12934EPSS
Exploits0References1
MSRC
MSRC
added 2019/05/14 5:0 p.m.40 views

May 2019 Security Update Release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide...

3AI score
Exploits0
MSRC
MSRC
added 2019/05/14 7:0 a.m.11 views

May 2019 Security Update Release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide...

3AI score
Exploits0
MSRC
MSRC
added 2019/05/14 7:0 a.m.9 views

May 2019 Security Update Release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide...

6.7AI score
Exploits0
Veracode
Veracode
added 2019/05/02 5:19 a.m.24 views

Buffer Overflow

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

6.8CVSS7.9AI score0.13826EPSS
Exploits0References13Affected Software1
Veracode
Veracode
added 2019/05/02 4:52 a.m.36 views

Denial Of Service (DoS)

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...

5.4CVSS5.8AI score0.03177EPSS
Exploits2References11Affected Software1
Rows per page
Query Builder