Lucene search
+L

11759 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.8 views

The vulnerability of the kvm_ioctl_create_device function in Linux operating system kernels allows a hacker to trigger a service failure.

The vulnerability of the kvmioctlcreatedevice function in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

9.3CVSS7.2AI score0.16523EPSS
SaveExploits3References53Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.14 views

The vulnerability of microprogramming software to the Trusted Platform Module (TPM) cryptographic processor, related to security configuration errors, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

7.8CVSS7.1AI score0.00519EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.7 views

The vulnerability of the vRealize Log Insight log management tool, related to authentication errors, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the vRealize Log Insight log management tool is related to authentication errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.2CVSS7.1AI score0.01438EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.11 views

The vulnerability of the cdrom_ioctl_drive_status() function in Linux operating systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the cdromioctldrivestatus function in Linux operating systems is related to data processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.1CVSS6.4AI score0.00552EPSS
SaveExploits0References14Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.10 views

The vulnerability of the ISDN function implementations in Cisco IOS and Cisco IOS XE operating systems allows a intruder to trigger a service failure.

The vulnerability of ISDN operating system functions in Cisco IOS and Cisco IOS XE exists due to errors in processing certain values in the Q.931 elements. Exploiting this vulnerability can allow an attacker to trigger a device reboot, resulting in service failure...

7.8CVSS7.3AI score0.02516EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.10 views

The vulnerability of the Network-Based Application Recognition technology implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to trigger a service failure.

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

7.8CVSS7.3AI score0.02516EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.12 views

The vulnerability of the McAfee Application and Change Control control mechanism, related to errors in the implementation of the “blacklist” mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the McAfee Application and Change Control control tool is related to errors in the implementation of the “blacklist” mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions on file execution and execute arbitrary code...

6.8CVSS7.4AI score0.00544EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2019/04/11 12:00 a.m.39 views

Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-17) - Mac OS X

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.8AI score0.54122EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2019/04/11 12:00 a.m.32 views

Adobe Acrobat Reader 2017 Security Updates (APSB19-17) - Windows

Adobe Acrobat Reader 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.7AI score0.54122EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2019/04/11 12:00 a.m.35 views

Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-17) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.8AI score0.54122EPSS
SaveExploits4References1
CNVD
CNVD
added 2019/04/11 12:00 a.m.20 views

SAP Crystal Reports for Visual Studio Information Disclosure Vulnerability

SAP Crystal Reports for Visual Studio is the German SAP SAP company's set of Crystal report design software for Visual Studio development platform. An information disclosure vulnerability exists in SAP Crystal Reports for Visual Studio, which arises from errors such as configuration during...

9.8CVSS6.1AI score0.06609EPSS
SaveExploits4References1
CNVD
CNVD
added 2019/04/10 12:00 a.m.11 views

Microsoft Edge Information Disclosure Vulnerability (CNVD-2019-10456)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An information disclosure vulnerability exists in Microsoft Edge that originates from errors such as configuration during operation of a networked system or product. An unauthorized...

6.5CVSS5.8AI score0.07115EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/09 7:47 p.m.23 views

GHSA-926Q-WXR6-3CRQ Moderate severity vulnerability that affects roundup

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6.1CVSS5.8AI score0.01581EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
added 2019/04/09 7:47 p.m.39 views

Moderate severity vulnerability that affects roundup

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6.1CVSS4.9AI score0.01581EPSS
SaveExploits1References9Affected Software1
Positive Technologies
Positive Technologies
added 2019/04/09 12:00 a.m.4 views

PT-2019-1776 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue exists due to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining th...

7.6CVSS7.8AI score0.1866EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2019/04/08 12:00 a.m.42 views

Apple Safari < 12.0.3 Multiple Vulnerabilities

Binary data 700508.prm...

8.8CVSS7.8AI score0.09755EPSS
SaveExploits4References12
UbuntuCve
UbuntuCve
added 2019/04/06 8:29 p.m.28 views

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6.1CVSS6.3AI score0.01581EPSS
SaveExploits1References6
NVD
NVD
added 2019/04/06 8:29 p.m.48 views

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6.1CVSS6AI score0.01581EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2019/04/06 7:40 p.m.42 views

CVE-2019-10904

Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgihandler.py mishandle 404 errors...

6AI score0.01581EPSS
SaveExploits1References5
CVE
CVE
added 2019/04/06 7:40 p.m.92 views

CVE-2019-10904

CVE-2019-10904 affects Roundup 1.6: XSS via the URI caused by improper 404 handling in the web front-end, specifically in frontend/roundup.cgi and roundup/cgi/wsgi_handler.py. Practical impact is client-side code execution due to crafted URIs. Exploitation details are not provided in the supplied...

6.1CVSS5.8AI score0.01581EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder