Lucene search
+L

5452 matches found

Tenable Nessus
Tenable Nessus
•added 2020/11/14 12:00 a.m.•131 views

Microsoft Edge (Chromium) < 86.0.622.69 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 86.0.622.69. It is, therefore, affected by multiple vulnerabilities as referenced in the ADV200002-11-13-2020 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

9.6CVSS8.5AI score0.02751EPSS
SaveExploits0References3
CISA
CISA
•added 2020/11/13 12:00 a.m.•17 views

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. Some of these vulnerabilities have been detected in exploits in the wild. The Cybersecurity and Infrastructure Securi...

7.1AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2020/11/12 12:00 a.m.•35 views

GLSA-202011-13 : Salt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202011-13 Salt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Salt. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

9.8CVSS7.2AI score0.99585EPSS
SaveExploits4References5
CISA
CISA
•added 2020/11/12 12:00 a.m.•42 views

Google Releases Security Updates for Chrome

Google has released Chrome version 86.0.4240.198 for Windows, Mac, and Linux. This version addresses CVE-2020-16013 and CVE-2020-16017. An attacker could exploit one of these vulnerabilities to take control of an affected system. These vulnerabilities have been detected in exploits in the wild. T...

6.8CVSS2.3AI score0.02751EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/11/11 12:00 a.m.•97 views

Google Chrome < 86.0.4240.198 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.198. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop11 advisory. - Use after free in site isolation in Google Chrome prior to 86.0.4240.198...

9.6CVSS8.6AI score0.02751EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2020/11/11 12:00 a.m.•73 views

Microsoft Windows Multiple Vulnerabilities (KB4586834)

This host is missing a critical security update according to Microsoft KB4586834 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.6AI score0.27101EPSS
SaveExploits3References3
Tenable Nessus
Tenable Nessus
•added 2020/11/11 12:00 a.m.•105 views

Google Chrome < 86.0.4240.198 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.198. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop11 advisory. - Use after free in site isolation in Google Chrome prior to 86.0.4240.198...

9.6CVSS8.6AI score0.02751EPSS
SaveExploits0References5
Schneier on Security
Schneier on Security
•added 2020/11/10 12:40 p.m.•23 views

2020 Was a Secure Election

Over at Lawfare: "2020 Is An Election Security Success Story So Far." What’s more, the voting itself was remarkably smooth. It was only a few months ago that professionals and analysts who monitor election administration were alarmed at how badly unprepared the country was for voting during a...

1.2AI score
SaveExploits0
CISA
CISA
•added 2020/11/10 12:00 a.m.•10 views

SAP Releases November 2020 Security Updates

SAP has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. These include missing authentication check vulnerabilities affecting SAP Solution Manager JAVA stack. The...

6.9AI score
SaveExploits0References1
CISA
CISA
•added 2020/11/10 12:00 a.m.•24 views

Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

Mozilla has released security updates to address a vulnerability in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review th...

6.8AI score
SaveExploits0References1
CISA
CISA
•added 2020/11/10 12:00 a.m.•17 views

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the Adobe...

7.1AI score
SaveExploits0References2
ICS
ICS
•added 2020/11/10 12:00 a.m.•80 views

ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft Equipment: PI Interface Vulnerability: Numeric Errors 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker-controlled OPC XML-DA Server to respond with a...

9.3CVSS9AI score0.28084EPSS
SaveExploits1References2
CISA
CISA
•added 2020/11/10 12:00 a.m.•16 views

Cisco Releases Security Update for IOS XR Software

Cisco has released a security update to address a vulnerability in IOS XR Software for ASR 9000 Series Aggregation Services Routers. An unauthenticated, remote attacker could exploit this vulnerability to cause a denial-of-service condition. The Cybersecurity and Infrastructure Security Agency CI...

6.7AI score
SaveExploits0References1
CISA
CISA
•added 2020/11/10 12:00 a.m.•13 views

Microsoft Releases November 2020 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review Microsoft’s...

7AI score
SaveExploits0References2
CISA
CISA
•added 2020/11/05 12:00 a.m.•18 views

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the Cis...

7.1AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/11/05 12:00 a.m.•100 views

RHEL 8 : freetype (RHSA-2020:4949)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4949 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

9.6CVSS8.5AI score0.44303EPSS
SaveExploits2References4
CISA
CISA
•added 2020/11/04 12:00 a.m.•13 views

Adobe Releases Security Updates for Acrobat and Reader

Adobe has released security updates to address vulnerabilities in Adobe Acrobat and Reader. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review Adobe...

6.9AI score
SaveExploits0References1
Malwarebytes
Malwarebytes
•added 2020/11/03 12:50 p.m.•28 views

Hospital ransomware: Gangs are back to target healthcare

Healthcare is not in a good place right now. With some countries and states deciding to go back in to lockdown due to the continued rise of reported COVID-19 infections—and several garnering record-high numbers compared to when almost every country initially went into lockdown—it seems horrible...

6.7AI score
SaveExploits0
ICS
ICS
•added 2020/11/03 12:00 p.m.•30 views

Iranian Advanced Persistent Threat Actor Identified Obtaining Voter Registration Data

Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® version 8 framework. See the ATT&CK for Enterprise version 8 for all referenced threat actor techniques. This joint cybersecurity advisory was coauthored by the Cybersecurity and Infrastructure...

10AI score
SaveExploits0References41
The Hacker News
The Hacker News
•added 2020/11/03 11:49 a.m.•35 views

New Kimsuky Module Makes North Korean Spyware More Powerful

A week after the US government issued an advisory about a "global intelligence gathering mission" operated by North Korean state-sponsored hackers, new findings have emerged about the threat group's spyware capabilities. The APT — dubbed "Kimsuky" aka Black Banshee or Thallium and believed to be...

SaveExploits0
Rows per page
Query Builder