Lucene search
+L

1212 matches found

The Hacker News
The Hacker News
•added 2021/03/18 1:03 p.m.•74 views

How to Successfully Pursue a Career in Malware Analysis

Are you looking to becoming a malware analyst? Then continue reading to discover how to gain the training you need and start a career in malware analysis career. Did you know that new malware is released every seven seconds? As more and more systems become reliant on the internet, the proliferati...

0.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/03/11 4:15 p.m.•12 views

CVE-2021-27051

HEVC Video Extensions Remote Code Execution Vulnerability...

7.8CVSS7.5AI score0.02676EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/03/11 4:15 p.m.•14 views

CVE-2021-24089

HEVC Video Extensions Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.04624EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•18 views

Microsoft HEVC Video 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC video. A security vulnerability exists in HEVC Video Extensions. The following products and versions are affected: HEVC...

7.8CVSS7.3AI score0.04624EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•18 views

Microsoft HEVC Video 扩展程序安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC video. A security vulnerability exists in HEVC Video Extensions. The following products and versions are affected: HEVC...

7.8CVSS7.3AI score0.05871EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•25 views

Microsoft HEVC Video Extensions 扩展程序安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could exploit this...

7.8CVSS7AI score0.04624EPSS
SaveExploits0References3
Prion
Prion
•added 2021/03/01 1:15 a.m.•31 views

Improper access control

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...

5.5CVSS5.4AI score0.00533EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2021/02/23 12:00 a.m.•9 views

Directory Traversal Vulnerability in Video Coding Equipment Access Gateway of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a provider of security products and industry solutions. Ltd. video coding equipment access gateway directory traversal vulnerability, an attacker can use the vulnerability to traverse the device all directories and files to obtain sensitive...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2021/02/20 12:00 a.m.•11 views

IBM Security Verify Information Queue Elevation of Privilege Vulnerability

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. An elevation of privilege vulnerability exists in IBM Security Verify Information Queue. The vulnerability stems from...

7.5CVSS6.6AI score0.00779EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/10 12:00 a.m.•20 views

IBM Security Verify Information Queue 授权问题漏洞

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. An elevation of privilege vulnerability exists in IBM Security Verify Information Queue. The vulnerability stems from...

7.5CVSS6.2AI score0.00779EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/01/26 12:00 a.m.•13 views

The vulnerability of the HEVC Video Extension codec, which arises due to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec exists due to insufficient checks on input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.04143EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/01/12 12:00 a.m.•21 views

Microsoft HEVC Video Extensions 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could exploit this...

9.3CVSS7.9AI score0.04143EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/01/12 12:00 a.m.•23 views

Microsoft HEVC Video Extensions 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could exploit this...

9.3CVSS7.9AI score0.04198EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/12/30 12:00 a.m.•16 views

The vulnerability of Microsoft Office, Microsoft Outlook, and Microsoft 365 Apps packages lies in coding errors, which allow attackers to exploit them to disclose protected information.

The vulnerabilities of Microsoft Office, Microsoft Outlook, and Microsoft 365 apps are related to code errors. Exploiting these vulnerabilities can allow attackers to disclose sensitive information remotely...

7.8CVSS5.6AI score0.04019EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/12/30 12:00 a.m.•13 views

The vulnerability of the Windows operating system, related to errors in the code, allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.9CVSS8.4AI score0.05027EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/12/30 12:00 a.m.•13 views

The vulnerability of the Windows GDI+ component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the Windows GDI+ component of the operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS5.8AI score0.01402EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2020/12/25 8:30 p.m.•88 views

Aura - Python Source Code Auditing And Static Analysis On A Large Scale

Aura is a static analysis framework developed as a response to the ever-increasing threat of malicious packages and vulnerable code published on PyPI. Project goals: provide an automated monitoring system over uploaded packages to PyPI, alert on anomalies that can either indicate an ongoing attac...

7AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/12/16 12:00 a.m.•44 views

IBM HTTP Server 6.1.0.0 <= 6.1.0.47 / 7.0.0.0 < 7.0.0.39 / 8.0.0.0 < 8.0.0.12 / 8.5.0.0 < 8.5.5.7 HTTP Request Smuggling (533835)

The version of IBM HTTP Server running on the remote host is affected by an HTTP request smuggling vulnerability related to Apache HTTP Server. The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers t...

5CVSS6.4AI score0.73327EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/11/24 12:00 a.m.•12 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation control. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.04033EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/11/24 12:00 a.m.•13 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation control. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.04033EPSS
SaveExploits0References3
Rows per page
Query Builder