Lucene search
K

31245 matches found

Tenable Nessus
Tenable Nessus
added 2021/12/20 12:0 a.m.89 views

Apache Log4Shell RCE detection via callback correlation (Direct Check NetBIOS)

Binary data apachelog4shellnetbios.nbin...

10CVSS9.9AI score0.99999EPSS
Exploits347References3
Tenable Nessus
Tenable Nessus
added 2021/12/19 12:0 a.m.46 views

Apple iOS < 15.2 Multiple Vulnerabilities (HT212976)

Binary data appleios152check.nbin...

9.8CVSS7.6AI score0.18024EPSS
Exploits7References51
OSV
OSV
added 2021/12/17 9:15 a.m.17 views

CVE-2021-36779

A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3...

9.6CVSS9.4AI score
Exploits0References2
Prion
Prion
added 2021/12/17 9:15 a.m.20 views

Authentication flaw

A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3...

8.3CVSS9.2AI score0.00664EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/12/17 8:55 a.m.25 views

CVE-2021-36779 Host operations allowed in privileged Longhorn managed pods

A Missing Authentication for Critical Function vulnerability in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3...

9.6CVSS9.6AI score0.00664EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/12/17 12:0 a.m.257 views

Apache Log4Shell RCE detection via callback correlation (Direct Check SSH)

Binary data apachelog4shellssh.nbin...

10CVSS7.3AI score0.99999EPSS
Exploits347References3
Tenable Nessus
Tenable Nessus
added 2021/12/17 12:0 a.m.49 views

Apache Log4Shell RCE detection via callback correlation (Direct Check Telnet)

Binary data apachelog4jjdnildapgenerictelnet.nbin...

10CVSS7.3AI score0.99999EPSS
Exploits347References3
Tenable Nessus
Tenable Nessus
added 2021/12/17 12:0 a.m.131 views

Apache Log4Shell RCE detection via callback correlation (Direct Check POP3)

Binary data apachelog4shellpop3.nbin...

10CVSS9.9AI score0.99999EPSS
Exploits347References3
Tenable Nessus
Tenable Nessus
added 2021/12/17 12:0 a.m.402 views

Apache Log4Shell RCE detection via callback correlation (Direct Check SMTP)

Binary data apachelog4shellsmtp.nbin...

10CVSS9.9AI score0.99999EPSS
Exploits347References3
CNNVD
CNNVD
added 2021/12/17 12:0 a.m.3 views

Longhorn 访问控制错误漏洞

Longhorn is a cloud-native distributed storage system built on Kubernetes. Longhorn suffers from an Access Control Error vulnerability that stems from SUSE Longhorn allowing any workload in a cluster to execute any binary file in an image on the host without authentication...

9.6CVSS8.4AI score0.00664EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/12/17 12:0 a.m.10 views

PT-2021-21350 · Suse · Suse Longhorn

Name of the Vulnerable Software and Affected Versions: SUSE Longhorn versions prior to 1.1.3 SUSE Longhorn versions prior to 1.2.3 Description: A Missing Authentication for Critical Function issue in SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on th...

9.6CVSS9.5AI score0.00664EPSS
Exploits0References6
OSV
OSV
added 2021/12/16 7:16 p.m.33 views

GHSA-Q6GQ-997W-F55G Withdrawn Advisory: Infinite loop in xz

Withdrawn Advisory This advisory has been withdrawn because alerts cannot be issued for the Go standard library at this time. Original Description Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS6.9AI score0.04692EPSS
Exploits0References18
Github Security Blog
Github Security Blog
added 2021/12/16 7:16 p.m.40 views

Withdrawn Advisory: Infinite loop in xz

Withdrawn Advisory This advisory has been withdrawn because alerts cannot be issued for the Go standard library at this time. Original Description Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs...

7.5CVSS6.9AI score0.04692EPSS
Exploits0References19Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/12/16 12:0 a.m.103 views

Apache Log4Shell RCE detection via callback correlation (Direct Check FTP)

Binary data log4jlog4shellftp.nbin...

10CVSS7.3AI score0.99999EPSS
Exploits347References3
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.3 views

The vulnerability of the Google Chrome browser installer, which allows a hacker to increase their privileges

The vulnerability of the Google Chrome browser installer is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges using a created binary file...

7.8CVSS7.3AI score0.00358EPSS
Exploits0References12Affected Software6
Tenable Nessus
Tenable Nessus
added 2021/12/15 12:0 a.m.16 views

Cloudera Manager Installed (Linux)

Binary data clouderamanagerservernixinstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/12/15 12:0 a.m.16 views

Safari < 15.2 Multiple Vulnerabilities

Binary data 701382.pasl...

9.3CVSS9AI score0.02641EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2021/12/14 11:9 a.m.1674 views

Hackers Exploit Log4j Vulnerability to Infect Computers with Khonsari Ransomware

Romanian cybersecurity technology company Bitdefender on Monday revealed that attempts are being made to target Windows machines with a novel ransomware family called Khonsari as well as a remote access Trojan named Orcus by exploiting the recently disclosed critical Log4j vulnerability. The atta...

10CVSS0.4AI score0.99999EPSS
Exploits347
Tenable Nessus
Tenable Nessus
added 2021/12/14 12:0 a.m.72 views

Apache Log4Shell RCE detection via Raw Socket Logging (Direct Check)

Binary data apachelog4jjndildapgenericraw.nbin...

10CVSS7.3AI score0.99999EPSS
Exploits347References3
OSV
OSV
added 2021/12/13 8:15 p.m.21 views

CVE-2021-43814

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parsedie when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a victim user, Rizin ma...

7.8CVSS7.3AI score
Exploits0References3
Rows per page
Query Builder