Lucene search
K

1081 matches found

OpenVAS
OpenVAS
added 2021/03/20 12:0 a.m.18 views

Fedora: Security Advisory for gnome-devel-docs (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.2AI score
Exploits0References2
OpenVAS
OpenVAS
added 2021/03/20 12:0 a.m.18 views

Fedora: Security Advisory for gnome-user-docs (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.2AI score
Exploits0References2
Rapid7 Blog
Rapid7 Blog
added 2021/02/16 9:53 p.m.48 views

Monitor Google Cloud Platform (GCP) Data With InsightIDR

InsightIDR was built in the cloud to support dynamic and rapidly changing environments—including remote workers, hybrid cloud and on-premises architectures, and fully cloud environments. Today, more and more organizations are adopting multi-cloud or hybrid environments, creating increasingly more...

0.2AI score
Exploits0
Fedora
Fedora
added 2021/02/06 1:30 a.m.89 views

[SECURITY] Fedora 32 Update: python3-3.8.7-2.fc32

Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...

9.8CVSS2.1AI score0.23293EPSS
Exploits1
OSV
OSV
added 2021/01/15 7:15 a.m.2 views

CVE-2021-23835

An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the docsfile HTTP request body parameter for the acp interface. This can be exploited with admin access rights. The affected parameter which retrieves the contents of the specified...

4.9CVSS5.7AI score0.0168EPSS
Exploits2References3
CNVD
CNVD
added 2021/01/14 12:0 a.m.2 views

flatCore Information Disclosure Vulnerability

flatCore is a lightweight content management system CMS based on PHP and SQLite. An information disclosure vulnerability exists in flatCore CMS prior to version 2.0.0 build 139, which stems from a local file disclosure vulnerability found in the program's docsfile acp interface's HTTP request bod...

4.9CVSS5.9AI score0.0168EPSS
Exploits2References1
CNNVD
CNNVD
added 2021/01/13 12:0 a.m.3 views

flatCore 输入验证错误漏洞

flatCore is a lightweight content management system CMS based on PHP and SQLite. An information disclosure vulnerability exists in flatCore CMS prior to version 2.0.0 build 139, which stems from a local file disclosure vulnerability found in the program's docsfile acp interface's HTTP request bod...

4.9CVSS5.8AI score0.0168EPSS
Exploits2References5
The Hacker News
The Hacker News
added 2020/12/29 11:21 a.m.2 views

A Google Docs Bug Could Have Allowed Hackers See Your Private Documents

Google has patched a bug in its feedback tool incorporated across its services that could be exploited by an attacker to potentially steal screenshots of sensitive Google Docs documents simply by embedding them in a malicious website. The flaw was discovered on July 9 by security researcher Sreer...

5.8AI score
Exploits0
The Hacker News
The Hacker News
added 2020/12/29 11:21 a.m.131 views

A Google Docs Bug Could Have Allowed Hackers See Your Private Documents

Google has patched a bug in its feedback tool incorporated across its services that could be exploited by an attacker to potentially steal screenshots of sensitive Google Docs documents simply by embedding them in a malicious website. The flaw was discovered on July 9 by security researcher Sreer...

6.6AI score
Exploits0
Kitploit
Kitploit
added 2020/12/23 8:30 p.m.54 views

GRecon - Your Google Recon Is Now Automated

GRecon Greei-Conn is a simple python tool that automates the process of Google Based Recon AKA Google Dorking The current Version 1.0 Run 7 Search Queries 7 Micro-Plugins on the spicified Target Providing Awsome Results Current Version Run Google Search Queries to find : Subdomains Sub-Subdomains...

7.2AI score
Exploits0References1
OSV
OSV
added 2020/12/15 11:15 p.m.2 views

CVE-2020-35467

The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker Docs container may allow a remote attacker to achieve root access with a blank password...

9.8CVSS7.3AI score0.02174EPSS
Exploits0References1
Prion
Prion
added 2020/12/15 11:15 p.m.18 views

Design/Logic Flaw

The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker Docs container may allow a remote attacker to achieve root access with a blank password...

10CVSS9.5AI score0.02174EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/12/15 10:59 p.m.50 views

CVE-2020-35467

The CVE-2020-35467 entry concerns the Docker Docs Docker image (up to 2020-12-14). The root user is configured with a blank password, enabling a remote attacker to achieve root access on systems deployed with affected containers. The provided sources confirm the presence of a blank-root-password ...

10CVSS9.5AI score0.02174EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/15 10:59 p.m.24 views

CVE-2020-35467

The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker Docs container may allow a remote attacker to achieve root access with a blank password...

9.7AI score0.02174EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.6 views

Docker Docs Docker image Access Control Error Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

10CVSS7.3AI score0.02174EPSS
Exploits0References2
HackRead
HackRead
added 2020/12/14 6:59 p.m.32 views

MoleRats using Facebook, Dropbox, Google Docs to spread malware

By Deeba Ahmed Cybereason researchers have identified an ongoing espionage campaign using three yet unidentified malware variants. This is a post from HackRead.com Read the original post: MoleRats using Facebook, Dropbox, Google Docs to spread malware...

3.6AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/09 4:40 a.m.39 views

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Log4j

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Apache Log4j. Vulnerability Details CVEID: CVE-2020-9488 DESCRIPTION: Apache Log4j is vulnerable to a man-in-the-middle attack, caused by improper certificate validation with host mismatch in the SMTP appende...

4.3CVSS1.4AI score0.08075EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/11/30 12:0 a.m.78 views

openSUSE Security Update : the Linux Kernel (openSUSE-2020-2034)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-28915: A buffer over-read at the framebuffer layer in the fbcon code could be used by local attackers to read kernel memory, aka CID-6735b4632def bnc1178886. -...

7.8CVSS7.2AI score0.06692EPSS
Exploits2References28
OPENSUSE Linux
OPENSUSE Linux
added 2020/11/30 12:0 a.m.27 views

Security update for neomutt (moderate)

openSUSE Security Update: Security update for neomutt Announcement ID: openSUSE-SU-2020:2127-1 Rating: moderate References: 1172906 1172935 1173197 1179035 1179113 Cross-References: CVE-2020-14093 CVE-2020-14154 CVE-2020-14954 CVE-2020-28896 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15....

5.9CVSS6.5AI score0.02288EPSS
Exploits0References5
ThreatPost
ThreatPost
added 2020/11/20 8:56 p.m.54 views

Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns

A spike in recent phishing and business email compromise BEC attacks can be traced back to criminals learning how to exploit Google Services, according to research from Armorblox. Social distancing has driven entire businesses into the arms of the Google ecosystem looking for a reliable, simple w...

7.3AI score
Exploits0References6
Rows per page
Query Builder