Lucene search
+L

11763 matches found

OpenVAS
OpenVAS
added 2021/02/26 12:00 a.m.27 views

Adobe Bridge Multiple Code Execution Vulnerabilities (APSB21-07) - Windows

Adobe Bridge is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc"; if description...

7.8CVSS8.3AI score0.03361EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/02/26 12:00 a.m.19 views

Adobe Bridge Multiple Code Execution Vulnerabilities (APSB21-07) - Mac OS X

Adobe Bridge is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc"; if description...

7.8CVSS8.3AI score0.03361EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/25 12:00 a.m.32 views

Atlassian Jira Information Disclosure Vulnerability (CNVD-2021-13207)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

4.3CVSS6AI score0.00846EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/02/25 12:00 a.m.13 views

The vulnerability of Junos router operating systems of the NFX and SRX series, related to pointer swapping errors, allows attackers to trigger a service failure.

The vulnerability of Junos router series NFX and SRX lies in pointer swapping errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.3AI score0.0131EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/25 12:00 a.m.11 views

The vulnerability of the software installer for Intel RealSense™ DCM 3D cameras allows a perpetrator to gain enhanced privileges.

The vulnerability of the software installer for Intel RealSense™ DCM 3D cameras is related to errors in the use of standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...

6.3CVSS6.6AI score0.00249EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/02/25 12:00 a.m.11 views

Vulnerability of the web-API service provided by Junos routers of the NFX Series and SRX Series; allowing attackers to obtain the secret key for the web-API service

The vulnerability of the web-API service of Junos router series NFX and SRX is related to errors in managing cryptographic keys. Exploiting this vulnerability can allow an attacker to obtain the secret key for the web-API service...

6.5CVSS6.6AI score0.00318EPSS
SaveExploits0References7Affected Software1
RedHat Linux
RedHat Linux
added 2021/02/24 3:51 p.m.6 views

Mozilla: MediaError message property could have leaked information about cross-origin resources

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox 86, Thunderbird 78.8, and Firefox ESR 78.8...

6.5CVSS7.3AI score0.01368EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/02/24 3:43 p.m.10 views

Mozilla: MediaError message property could have leaked information about cross-origin resources

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox 86, Thunderbird 78.8, and Firefox ESR 78.8...

6.5CVSS7.3AI score0.01368EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/02/24 2:51 p.m.8 views

Mozilla: MediaError message property could have leaked information about cross-origin resources

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox 86, Thunderbird 78.8, and Firefox ESR 78.8...

6.5CVSS7.3AI score0.01368EPSS
SaveExploits0References5
Amazon
Amazon
added 2021/02/24 12:00 a.m.68 views

Medium: openssl

Issue Overview: Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissible length for an integer on the platform. In such cases the return value from the function call will be 1...

7.5CVSS7.2AI score0.50732EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:00 a.m.10 views

The vulnerability of the Apache Struts software platform arises from incorrect processing of Object Graph Navigation Language expressions, allowing attackers to execute arbitrary code.

The vulnerability of the Apache Struts software framework exists due to incorrect processing of expressions written in the Object Graph Navigation Language OGNL. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.6AI score0.95931EPSS
SaveExploits12References11Affected Software8
Mozilla
Mozilla
added 2021/02/23 12:00 a.m.242 views

Security Vulnerabilities fixed in Thunderbird 78.8 — Mozilla

As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage."...

8.8CVSS1AI score0.0153EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:00 a.m.11 views

The vulnerability of Microsoft Azure Kubernetes operating system, which allows attackers to escalate their privileges

The vulnerability of Microsoft Azure Kubernetes operating system is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to escalate their privileges remotely...

9CVSS6.6AI score0.0196EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:00 a.m.9 views

The vulnerability of the Windows Event Tracing service allows attackers to escalate their privileges.

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.1AI score0.00511EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:00 a.m.11 views

Vulnerability of application control tools: Application control in Windows Defender Application Control (WDAC), a PowerShell Core automation tool, allows attackers to bypass existing security mechanisms.

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core automation tool, is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security measures remotely...

4.3CVSS5.4AI score0.02464EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:00 a.m.10 views

The vulnerability of the PsExec remote execution tool, related to privilege management errors, allows a hacker to escalate their privileges.

The vulnerability of the remote execution command PsExec is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.6AI score0.00516EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:00 a.m.13 views

The vulnerability of the BLIP protocol analyzer in Wireshark software allows a hacker to trigger a service failure.

The vulnerability of the BLIP protocol analyzer in Wireshark is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.03938EPSS
SaveExploits1References7Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:00 a.m.11 views

Vulnerabilities of Windows operating systems are related to security configuration errors, which allow attackers to bypass existing security mechanisms.

Vulnerabilities of Windows operating systems are related to security configuration errors. Exploiting these vulnerabilities can allow a malicious actor to bypass existing security measures remotely...

7.5CVSS7.6AI score0.02193EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:00 a.m.14 views

The vulnerability of Microsoft Exchange Server is related to the lack of protection for service data, which allows attackers to carry out spoofing attacks.

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

6.4CVSS6.8AI score0.01817EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:00 a.m.12 views

The vulnerability of the Windows Event Tracing service allows a perpetrator to cause a service failure.

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.7AI score0.58961EPSS
SaveExploits7References2
Rows per page
Query Builder