Lucene search
+L

11737 matches found

BDU FSTEC
BDU FSTEC
added 2021/11/11 12:0 a.m.10 views

The vulnerability of the `check_attachment_for_errors` function in the `data/general-hooks/ubuntu.py` file of the Apport operating system’s error registration service allows a hacker to disclose protected information.

The vulnerability of the checkattachmentforerrors function in the data/general-hooks/ubuntu.py file of the Apport Ubuntu system registry service is related to a data leak regarding files and directories. Exploiting this vulnerability could allow an attacker to disclose sensitive information that ...

6.5CVSS6.1AI score0.00462EPSS
SaveExploits1References5Affected Software2
OpenVAS
OpenVAS
added 2021/11/11 12:0 a.m.17 views

Mozilla Firefox Security Advisory (MFSA2015-67) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

4.3CVSS4.5AI score0.01309EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2021/11/10 5:20 p.m.7 views

openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

5.9CVSS7.2AI score0.07471EPSS
SaveExploits0References5
CNVD
CNVD
added 2021/11/10 12:0 a.m.49 views

Microsoft Azure Information Disclosure Vulnerability (CNVD-2021-93637)

Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. An information disclosure vulnerability exists in Microsoft Azure RTOS. The vulnerability stems from errors such as configuration during operation of a networked system or product. An...

5.5CVSS3.6AI score0.01211EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.13 views

The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the Cisco AsyncOS operating system’s proxy server, which is part of the Cisco Web Security Appliance internet gateway, relates to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...

8.6CVSS7.5AI score0.01432EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/11/10 12:0 a.m.49 views

Microsoft Azure Information Disclosure Vulnerability (CNVD-2021-93636)

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA. The vulnerability stems from a configuration and other errors in the network system or product during operation. An unauthorized attacker could exploit the vulnerability to obtain sensitive...

3.3CVSS3.3AI score0.01186EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.12 views

The vulnerability of the txtID parameter in the xp_cmdshell procedure of the BillQuick Web Suite’s time and attendance system allows a perpetrator to execute arbitrary code.

The vulnerability of the txtID parameter in the xpcmdshell procedure of the BillQuick Web Suite payroll and accounting system is related to errors during the elimination of special elements in SQL queries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.74426EPSS
SaveExploits3References4Affected Software1
Microsoft KB
Microsoft KB
added 2021/11/09 8:0 a.m.423 views

November 9, 2021—KB5007192 (OS Build 14393.4770) - EXPIRED

None None...

8.8CVSS6.8AI score0.74265EPSS
SaveExploits10
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.9 views

PT-2021-5002 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chrome based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Edge's IE Mode. It may allow a remote attacker to conduct spoofing...

4.3CVSS4.1AI score0.03587EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.9 views

PT-2021-5003 · Microsoft · Malware Protection Engine

Name of the Vulnerable Software and Affected Versions: Microsoft Malware Protection Engine MPE affected versions not specified Description: The issue is related to errors in code generation management within the Microsoft Malware Protection Engine MPE. Exploitation of this issue may allow an...

9.3CVSS8.1AI score0.05293EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.10 views

Microsoft Azure Real Time Operating System 信息泄露漏洞

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA. The vulnerability stems from a configuration and other errors in the network system or product during operation. An unauthorized attacker could exploit the vulnerability to obtain sensitive...

4.6CVSS5.6AI score0.00896EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.13 views

Microsoft Azure Real Time Operating System 信息泄露漏洞

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA. The vulnerability stems from a configuration and other errors in the network system or product during operation. An unauthorized attacker could exploit the vulnerability to obtain sensitive...

3.3CVSS5.6AI score0.01186EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.6 views

PT-2021-5087 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, allowing for spoofing attacks. It enables a remote attacker to affect the system...

7.1CVSS6.1AI score0.08109EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.9 views

IBM InfoSphere Information Server 信息泄露漏洞

IBM InfoSphere Information Server is a data integration platform that includes a range of products that enable you to understand, cleanse, monitor, transform, and transfer data, as well as collaborate to bridge the gap between business and IT. A security vulnerability exists in IBM InfoSphere...

6.5CVSS5.6AI score0.00775EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.6 views

PT-2021-4642 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Excel, which can be exploited to allow an attacker to execute arbitrary code. This can be achieved due to errors in...

7.8CVSS9.3AI score0.31949EPSS
SaveExploits1References18
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.8 views

WordPress 插件跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin. The WordPress plugin 404 to 301 â€" Redirect, Log and Noti...

6.5CVSS6.3AI score0.00531EPSS
SaveExploits2References2
PyPA
PyPA
added 2021/11/05 10:15 p.m.9 views

PYSEC-2021-815

TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...

8.8CVSS7.1AI score0.00168EPSS
SaveExploits0References2Affected Software1
AlmaLinux
AlmaLinux
added 2021/11/02 7:46 a.m.18 views

rasdaemon bug fix and enhancement update

The rasdaemon packages provide a RAS Reliability, Availability and Serviceability logging tool, which records memory errors, using the EDAC tracing events. Bug Fixes and Enhancements: RFE latest rasdaemon hardware check for ROME and MILAN BZ1975506...

7AI score
SaveExploits0
Rockylinux
Rockylinux
added 2021/11/02 7:46 a.m.18 views

rasdaemon bug fix and enhancement update

An update is available for rasdaemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rasdaemon packages provide a RAS Reliability, Availability and...

1.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.10 views

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to gain unauthorized access to confidential configuration information.

The vulnerability of the Cisco Firepower Management Center’s software network management interface is related to errors in the encryption of confidential information stored in the graphical interface configuration console. Exploiting this vulnerability can allow an attacker to gain unauthorized...

4.3CVSS5.5AI score0.00271EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder