Lucene search
+L

1014 matches found

CNNVD
CNNVD
added 2021/03/09 12:0 a.m.7 views

Microsoft HEVC Video 扩展程序安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC video. A security vulnerability exists in HEVC Video Extensions. The following products and versions are affected: HEVC...

7.8CVSS7.3AI score0.04953EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.15 views

Microsoft HEVC Video Extensions 扩展程序安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could exploit this...

7.8CVSS7AI score0.03899EPSS
SaveExploits0References3
Prion
Prion
added 2021/03/01 1:15 a.m.22 views

Improper access control

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...

5.5CVSS5.4AI score0.00515EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/02/23 12:0 a.m.6 views

Directory Traversal Vulnerability in Video Coding Equipment Access Gateway of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a provider of security products and industry solutions. Ltd. video coding equipment access gateway directory traversal vulnerability, an attacker can use the vulnerability to traverse the device all directories and files to obtain sensitive...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/02/20 12:0 a.m.6 views

IBM Security Verify Information Queue Elevation of Privilege Vulnerability

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. An elevation of privilege vulnerability exists in IBM Security Verify Information Queue. The vulnerability stems from...

7.5CVSS6.6AI score0.00752EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/02/10 12:0 a.m.10 views

IBM Security Verify Information Queue 授权问题漏洞

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. An elevation of privilege vulnerability exists in IBM Security Verify Information Queue. The vulnerability stems from...

7.5CVSS6.2AI score0.00752EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.9 views

The vulnerability of the HEVC Video Extension codec, which arises due to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec exists due to insufficient checks on input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.03837EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.11 views

Microsoft HEVC Video Extensions 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could exploit this...

9.3CVSS7.9AI score0.03837EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.10 views

Microsoft HEVC Video Extensions 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could exploit this...

9.3CVSS7.9AI score0.03889EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:0 a.m.11 views

The vulnerability of Microsoft Office, Microsoft Outlook, and Microsoft 365 Apps packages lies in coding errors, which allow attackers to exploit them to disclose protected information.

The vulnerabilities of Microsoft Office, Microsoft Outlook, and Microsoft 365 apps are related to code errors. Exploiting these vulnerabilities can allow attackers to disclose sensitive information remotely...

7.8CVSS5.6AI score0.03722EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:0 a.m.10 views

The vulnerability of the Windows operating system, related to errors in the code, allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.9CVSS8.4AI score0.04657EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:0 a.m.6 views

The vulnerability of the Windows GDI+ component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the Windows GDI+ component of the operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS5.8AI score0.01378EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2020/12/25 8:30 p.m.83 views

Aura - Python Source Code Auditing And Static Analysis On A Large Scale

Aura is a static analysis framework developed as a response to the ever-increasing threat of malicious packages and vulnerable code published on PyPI. Project goals: provide an automated monitoring system over uploaded packages to PyPI, alert on anomalies that can either indicate an ongoing attac...

7AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/12/16 12:0 a.m.36 views

IBM HTTP Server 6.1.0.0 <= 6.1.0.47 / 7.0.0.0 < 7.0.0.39 / 8.0.0.0 < 8.0.0.12 / 8.5.0.0 < 8.5.5.7 HTTP Request Smuggling (533835)

The version of IBM HTTP Server running on the remote host is affected by an HTTP request smuggling vulnerability related to Apache HTTP Server. The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers t...

5CVSS6.4AI score0.73327EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.8 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation control. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.03735EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.7 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation control. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.03735EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.5 views

The vulnerability of HEVC Video Extensions relates to improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.03735EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2020/11/12 10:11 a.m.5 views

MISSIONS — The Next Level of Interactive Developer Security Training

If organizations want to get serious about software security, they need to empower their engineers to play a defensive role against cyberattacks as they craft their code. The problem is, developers haven't had the most inspiring introduction to security training over the years, and anything that...

5.8AI score
SaveExploits0
CNVD
CNVD
added 2020/11/12 12:0 a.m.8 views

Microsoft HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. No detailed vulnerability detail...

9.3CVSS7.9AI score0.03735EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/11/12 12:0 a.m.7 views

Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2020-65155)

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. No detailed vulnerability detail...

9.3CVSS7.9AI score0.03735EPSS
SaveExploits0References1
Rows per page
Query Builder