Lucene search
+L

3168 matches found

OSV
OSV
•added 2021/04/06 7:15 p.m.•12 views

UBUNTU-CVE-2021-28688

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...

6.5CVSS6.2AI score0.00332EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2021/04/06 6:07 p.m.•71 views

CVE-2021-28688

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...

6.5CVSS6.2AI score0.00332EPSS
SaveExploits0
Mend
Mend
•added 2021/04/06 6:07 p.m.•1 views

CVE-2021-28688

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...

8.2CVSS0.00332EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/06 12:00 a.m.•5 views

CVE-2021-28688: Improper Initialization

The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in...

6.5CVSS6.4AI score0.00332EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2021/03/30 8:30 p.m.•57 views

ClearURLs - An Add-On Based On The New WebExtensions Technology And Will Automatically Remove Tracking Elements From URLs To Help Protect Your Privacy

ClearURLs is an add-on based on the new WebExtensions technology and is optimized for Firefox and Chrome based browsers. This extension will automatically remove tracking elements from URLs to help protect your privacy when browse through the Internet, which is regularly updated by us and can be...

7.3AI score
SaveExploits0References22
ThreatPost
ThreatPost
•added 2021/03/19 6:18 p.m.•31 views

Office 365 Phishing Attack Targets Financial Execs

A new phishing scam is on the rise, targeting executives in the insurance and financial services industries to harvest their Microsoft 365 credentials and launch business email compromise BEC attacks, according to a new report from Area 1 Security. These new, sophisticated attacks are aimed at...

0.2AI score
SaveExploits0References8
OSV
OSV
•added 2021/03/18 2:15 p.m.•24 views

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

8.8CVSS6.7AI score
SaveExploits0References2
Prion
Prion
•added 2021/03/18 2:15 p.m.•26 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

6.8CVSS8.7AI score0.00818EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/03/18 2:15 p.m.•21 views

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

8.8CVSS7.2AI score0.00818EPSS
SaveExploits0References3
Mend
Mend
•added 2021/03/18 1:35 p.m.•1 views

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

8.8CVSS0.00818EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/03/18 1:35 p.m.•33 views

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

8.9AI score0.00818EPSS
SaveExploits0References2
CVE
CVE
•added 2021/03/18 1:35 p.m.•97 views

CVE-2021-21627

CVE-2021-21627 is a CSRF vulnerability in Jenkins Libvirt Agents Plugin (versions

8.8CVSS8.6AI score0.00818EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/03/18 12:00 a.m.•10 views

PT-2021-14670 · Jenkins · Jenkins Libvirt Agents Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Libvirt Agents Plugin versions 1.9.0 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to stop hypervisor domains. This issue arises because the plugin does not require POST requests for a form...

8.8CVSS8.7AI score0.00818EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/18 12:00 a.m.•3 views

CVE-2021-21627: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

8.8CVSS5.7AI score0.00818EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2021/03/18 12:00 a.m.•17 views

CSRF vulnerability in libvirt-slave

libvirt-slave 1.9.0 and earlier does not require POST requests for a form submission endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to stop hypervisor domains. libvirt-slave 1.9.1 requires POST requests for the affected HTTP endpoint...

8.8CVSS7.8AI score0.00818EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2021/03/16 8:30 p.m.•136 views

SnitchDNS - Database Driven DNS Server With A Web UI

SnitchDNS is a database driven DNS Server with a Web UI, written in Python and Twisted, that makes DNS administration easier with all configuration changed applied instantly without restarting any system services. One of its main features is the logging of all DNS queries allowing the discovery o...

7.6AI score
SaveExploits0References8
attackerkb
attackerkb
•added 2021/03/09 6:15 p.m.•12 views

CVE-2021-21187

Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

4.3CVSS6.8AI score0.01451EPSS
SaveExploits0References11
Kitploit
Kitploit
•added 2021/03/05 11:30 a.m.•28 views

CertEagle - Asset monitoring utility using real time CT log feeds

In Bugbounties “If you are not first , then you are last ” there is no such thing as silver or a bronze medal , Recon plays a very crucial part and if you can detect/Identify a newly added asset earlier than others then the chances of you Finding/Reporting a security flaw on that asset and gettin...

7AI score
SaveExploits0References5
ThreatPost
ThreatPost
•added 2021/03/04 4:01 p.m.•203 views

COVID-19 Vaccine Spear-Phishing Attacks Jump 26 Percent

As Moderna, Pfizer and Johnson & Johnson roll out COVID-19 vaccines cybercriminals are preying on the those hungry to get in line for immunization. Between October and January the average number of COVID-19 vaccine-related spear-phishing attacks grew 26 percent, said Barracuda Networks researcher...

0.3AI score
SaveExploits0References12
CISA
CISA
•added 2021/03/04 12:00 a.m.•32 views

Joint NSA and CISA Guidance on Strengthening Cyber Defense Through Protective DNS

The National Security Agency NSA and CISA have released a Joint Cybersecurity Information CSI sheet with guidance on selecting a protective Domain Name System PDNS service as a key defense against malicious cyber activity. Protective DNS can greatly reduce the effectiveness of ransomware, phishin...

6.8AI score
SaveExploits0References1
Rows per page
Query Builder