13603 matches found
2020 CWE Top 25 Most Dangerous Software Weaknesses
The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2020 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesses list. The Top 25 uses data from the National Vulnerability...
Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to CVE-2020-4449
Summary Information disclosure in WebSphere Application Server. This has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM Tivoli Common Reporting| All...
HPESBUX04029 rev.1 - HP-UX Common Internet File System (CIFS), Multiple Vulnerabilities
Potential Security Impact: Local: Unauthorized Access, Unauthorized Access to Files; Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Common Internet File System CIFS, Client/Server Software B.04.09.00.00 and earlier CVSS Scores: | CVE | CV...
The vulnerability of the PAN-OS operating system’s management server allows a hacker to execute arbitrary operating system commands with root privileges.
The vulnerability of the PAN-OS operating system management server exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary operating system commands...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4570507)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4570507 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
ca-certificates bug fix and enhancement update
An update is available for ca-certificates. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ca-certificates package contains a set of Certificate Authority C...
CVE-2020-13819
creationtimestamp| type| source ---|---|--- 2020-08-05 18:55:24+00:00| seen| https://t.me/cibsecurity/13892...
CVE-2019-18394
creationtimestamp| type| source ---|---|--- 2020-08-05 14:30:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1539 2022-03-18 11:22:27+00:00| seen| https://t.me/cibsecurity/39191 2024-01-27 10:16:26+00:00| seen| https://t.me/ctinow/174727 2024-07-12 17:35:05+00:00|...
An ’80s File Format Enabled Stealthy Mac Hacking
The now-patched vulnerability would have let hackers target Microsoft Office using Symbolic Link—a file type that hasn't been in common use in over 30 years...
The vulnerability of the CRM User Management Framework component of Oracle Common Applications allows a hacker to gain access to read, modify, add, or delete data.
The vulnerability of the CRM User Management Framework component of Oracle Common Applications is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to read, modify, add, or delete data using the HTTP protocol...
openSUSE Security Update : targetcli-fb (openSUSE-2020-1141)
This update for targetcli-fb fixes the following issues : - CVE-2020-13867: Fixed the permissions in /etc/target bsc1172743 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...
CWFF - Create Your Custom Wordlist For Fuzzing
CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it's heavily inspired by @tomnomnom's Who, What, Where, When, Wordlist NahamCon2020. Usage CWFF -h --threads --github --subdomains --recursive...
CVE-2019-20029
creationtimestamp| type| source ---|---|--- 2020-07-29 22:55:24+00:00| seen| https://t.me/cibsecurity/13749...
Rocky Enterprise Software Foundation OpenStack Platform 16.1 bug fix and enhancement advisory
An update is available for python-gflags, python-oauth2client, google-api-python-client, python-httplib2, python-uritemplate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
The vulnerability of the CRM User Management Framework component of Oracle Common Applications allows a hacker to gain access to modify, add, or delete data.
The vulnerability of the CRM User Management Framework component of Oracle Common Applications is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to modify, add, or delete data...
Unspecified Vulnerability in Oracle E-Business Suite Common Applications
Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Corporation. The software provides customer relationship management, service management, financial management, etc. Common Applications also known as Oracle Common Application...