Lucene search
+L

11796 matches found

Vulnrichment
Vulnrichment
added 2024/07/15 1:36 a.m.19 views

CVE-2024-39731 IBM Datacap Navigator information disclosure

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 295970...

5.9CVSS6.3AI score0.0028EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/15 12:0 a.m.7 views

IBM Datacap Navigator 安全漏洞

IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. IBM Datacap Navigator suffers from a cryptographic issue vulnerability that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt highly...

7.5CVSS6.5AI score0.0028EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/07/15 12:0 a.m.17 views

EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2024-1884)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leadi...

5.3CVSS6.3AI score0.00718EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/15 12:0 a.m.35 views

EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2024-1908)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leadi...

5.3CVSS6.3AI score0.00718EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/15 12:0 a.m.15 views

The vulnerability of the SCADA system “ENTEK,” related to the use of cryptographic algorithms containing defects, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system “ENTEK” is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.5CVSS5.5AI score
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/07/15 12:0 a.m.176 views

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6898-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6898-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointe...

9.8CVSS6.7AI score0.01401EPSS
SaveExploits1References151
Ubuntu
Ubuntu
added 2024/07/12 2:12 p.m.316 views

USN-6896-1: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

9.8CVSS7.5AI score0.01635EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2024/07/12 10:2 a.m.71 views

USN-6895-1: Linux kernel vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the HugeTLB file syst...

9.8CVSS7.4AI score0.00748EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2024/07/12 12:0 a.m.42 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6896-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6896-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free...

9.8CVSS7.6AI score0.01635EPSS
SaveExploits1References150
Tenable Nessus
Tenable Nessus
added 2024/07/12 12:0 a.m.33 views

RHEL 8 : golang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - golang: crypto/elliptic implementations of P-521 and P-384 elliptic curves allow for denial of service...

9.8CVSS7.6AI score0.04326EPSS
SaveExploits0References5
Ubuntu
Ubuntu
added 2024/07/11 7:1 p.m.153 views

USN-6893-1: Linux kernel vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. CVE-2024-24857, CVE-2024-24858, CVE-2024-24859 Several security issues we...

9.8CVSS7AI score0.01401EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2024/07/11 12:0 a.m.48 views

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6893-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6893-1 advisory. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A...

9.8CVSS6.6AI score0.01401EPSS
SaveExploits1References178
Tenable Nessus
Tenable Nessus
added 2024/07/11 12:0 a.m.53 views

Ubuntu 20.04 LTS : Linux kernel (IBM) vulnerabilities (USN-6892-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6892-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

9.8CVSS7.5AI score0.01635EPSS
SaveExploits0References154
Ubuntu
Ubuntu
added 2024/07/10 9:6 p.m.79 views

USN-6892-1: Linux kernel (IBM) vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

9.8CVSS7.4AI score0.01635EPSS
SaveExploits0
Veracode
Veracode
added 2024/07/10 9:10 a.m.19 views

Improper Verification Of Cryptographic Signature

electron-updater is vulnerable to Improper Verification of Cryptographic Signature. The vulnerability is caused due to improper handling and comparison of file paths, allowing an attacker to bypass signature verification by exploiting environment variable expansion and tricking the application in...

7.5CVSS6.7AI score0.00336EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2024/07/10 8:15 a.m.2 views

DEBIAN-CVE-2024-39493

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADFDEVRESETSYNC memory leak Using completiondone to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called...

5.5CVSS5.5AI score0.00239EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/10 8:15 a.m.12 views

UBUNTU-CVE-2024-39493

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADFDEVRESETSYNC memory leak Using completiondone to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called...

5.5CVSS6.1AI score0.00239EPSS
SaveExploits0References29
NVD
NVD
added 2024/07/09 5:15 p.m.18 views

CVE-2024-36526

ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key...

9.8CVSS0.00877EPSS
SaveExploits2References2
OSV
OSV
added 2024/07/09 5:15 p.m.4 views

CVE-2024-30098

Windows Cryptographic Services Security Feature Bypass Vulnerability...

7.5CVSS5.8AI score0.0126EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/09 5:15 p.m.40 views

CVE-2024-30098

Windows Cryptographic Services Security Feature Bypass Vulnerability...

7.5CVSS0.0126EPSS
SaveExploits0References1
Rows per page
Query Builder