Lucene search
+L

15103 matches found

Positive Technologies
Positive Technologies
•added 2019/08/15 12:00 a.m.•7 views

PT-2019-9021

Name of the Vulnerable Software and Affected Versions COSPAS-SARSAT protocol affected versions not specified Description The issue allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages via a crafted 406 MHz digital signa...

9.4CVSS0.02326EPSS
SaveExploits0References3
Fedora
Fedora
•added 2019/08/14 1:42 a.m.•31 views

[SECURITY] Fedora 29 Update: jhead-3.03-4.fc29

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

7.8CVSS1.9AI score0.01766EPSS
SaveExploits3
Fedora
Fedora
•added 2019/08/14 1:06 a.m.•33 views

[SECURITY] Fedora 30 Update: jhead-3.03-4.fc30

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

5.5CVSS1.9AI score0.01211EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2019/08/14 12:00 a.m.•45 views

Johnson Controls MS-NCE2520-0 Metasys NCE Controller

Binary data 764892.prm...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2019/08/14 12:00 a.m.•21 views

Fedora Update for jhead FEDORA-2019-17b95fecd3

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.8AI score0.01211EPSS
SaveExploits2References2
CNVD
CNVD
•added 2019/08/13 12:00 a.m.•14 views

Dell Digital Delivery and Alienware Digital Delivery power lift vulnerability (CNVD-2019-27450)

Dell Digital Delivery and Alienware Digital Delivery are both Dell USA Inc. applications that are used exclusively for Dell computer equipment to purchase pre-installed software for computers online. An elevation of privilege vulnerability exists in Dell Digital Delivery and Alienware Digital...

7.8CVSS7.1AI score0.00386EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/08/13 12:00 a.m.•14 views

Dell Digital Delivery and Alienware Digital Delivery Privilege Mobilization Vulnerability

Dell Digital Delivery and Alienware Digital Delivery are both Dell USA Inc. applications that are used exclusively for Dell computer equipment to purchase pre-installed software for computers online. An elevation of privilege vulnerability exists in Dell Digital Delivery and Alienware Digital...

7.8CVSS7.1AI score0.00354EPSS
SaveExploits0References1
Trend Micro Simply Security
Trend Micro Simply Security
•added 2019/08/12 3:11 p.m.•48 views

Cyberattack Lateral Movement Explained

Lightly edited transcript of the video above Hi there, Mark Nunnikhoven from Trend Micro Research, I want to talk to you about the concept of lateral movement. And the reason why I want to tackle this today is because I've had some conversations in the last few days that have really kind of hit...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•51 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0062)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory...

9.8CVSS8.8AI score0.29729EPSS
SaveExploits26References14
Trend Micro Simply Security
Trend Micro Simply Security
•added 2019/08/09 10:53 p.m.•136 views

This Week in Security News: Ransomware Campaigns and Cryptocurrency Miners

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about continuing cybersecurity attacks targeting small governments. Also, read how XDR, Trend Micro’s newest solution, is more...

7.9AI score
SaveExploits0
NVD
NVD
•added 2019/08/09 7:15 p.m.•34 views

CVE-2019-3744

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal explo...

7.8CVSS7.7AI score0.00354EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/08/09 7:15 p.m.•16 views

CVE-2019-3744

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal explo...

7.8CVSS7.1AI score0.00354EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/08/09 7:15 p.m.•14 views

CVE-2019-3742

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevat...

7.8CVSS7.2AI score0.00386EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/09 7:15 p.m.•28 views

CVE-2019-3742

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevat...

7.8CVSS7.8AI score0.00386EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/09 7:15 p.m.•31 views

Privilege escalation

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevat...

7.2CVSS7.7AI score0.00386EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/08/09 7:15 p.m.•21 views

Race condition

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal explo...

7.2CVSS7.6AI score0.00354EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/08/09 7:13 p.m.•135 views

CVE-2019-3744

Dell/Alienware Digital Delivery (DLL/Alienware Digital Delivery) prior to version 4.0.41 is affected by a local privilege-escalation vulnerability. A non-privileged attacker can exploit a race condition and a path-traversal in the install software package feature of a Universal Windows Platform a...

7.8CVSS7.6AI score0.00354EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/08/09 7:13 p.m.•30 views

CVE-2019-3744

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Universal Windows Platform application by manipulating the install software package feature with a race condition and a path traversal explo...

7.8CVSS7.7AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/09 7:12 p.m.•131 views

CVE-2019-3742

Dell/Alienware Digital Delivery (and Dell Digital Delivery) versions prior to 3.5.2013 are affected by a local privilege-escalation vulnerability. A non-privileged attacker could abuse a named pipe that deserializes binaries via a process hollowing technique to execute code with elevated privileg...

7.8CVSS7.7AI score0.00386EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/08/09 7:12 p.m.•32 views

CVE-2019-3742

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevat...

7.8CVSS7.8AI score0.00386EPSS
SaveExploits0References1
Rows per page
Query Builder