Lucene search
+L

11782 matches found

CNVD
CNVD
added 2019/10/28 12:00 a.m.10 views

VMware vCenter Server Appliance Information Disclosure Vulnerability

VMware vCenter Server Appliance is a set of pre-configured Linux virtual machines from VMware. An information disclosure vulnerability exists in VMware vCenter Server Appliance versions 6.7 and 6.5, which arises from errors in configuration and other errors in the operation of a networked system ...

5.9CVSS6.2AI score0.00654EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/24 12:00 a.m.53 views

Elasticsearch Information Disclosure Vulnerability (CNVD-2019-39403)

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON. There is an information disclosure vulnerability in Elasticsearch , the vulnerabili...

5.3CVSS6.3AI score0.02429EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/24 12:00 a.m.5 views

Dnsmasq Information Disclosure Vulnerability (CNVD-2019-39404)

Dnsmasq is a lightweight, easy-to-configure DNS forwarder and DHCP server. An information disclosure vulnerability exists in Dnsmasq, which arises from errors in configuration and other errors in the operation of a network system or product, and can be exploited by an unauthorized attacker to...

4.3CVSS7.3AI score0.02664EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:00 a.m.10 views

The vulnerability of the Windows Code Integrity Module in operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows Code Integrity Module in operating systems relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.03067EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:00 a.m.10 views

The vulnerability of Windows operating systems, related to errors in memory object handling, allows a perpetrator to trigger a system failure.

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.1CVSS5.5AI score0.14942EPSS
SaveExploits2References2
CNVD
CNVD
added 2019/10/21 12:00 a.m.11 views

Ratpack Input Validation Error Vulnerability

Ratpack is a Java library for building scalable HTTP applications. An input validation error vulnerability exists in Ratpack versions prior to 1.7.5, which can be exploited to conduct http response splitting attacks by constructing HTTP headers with untrusted data...

7.5CVSS6.8AI score0.02153EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/16 6:15 p.m.13 views

UBUNTU-CVE-2019-17577

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the admin/mails.php?action=edit URI via the "Email used for error returns emails fields 'Errors-To' in emails sent" field...

5.4CVSS6AI score0.00817EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2019/10/16 12:00 a.m.38 views

Adobe Acrobat Reader 2017 Security Updates (APSB19-49) - Mac OS X

Adobe Acrobat Reader 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.3AI score0.22886EPSS
SaveExploits12References1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.14 views

The vulnerability of the Junos OS router series in connection with authentication process errors allows attackers to gain access to the Junos Device Manager application and exercise full control over the system.

The vulnerability of the Junos OS router of the NFX Series is related to errors in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to the Junos Device Manager JDM and gain full control over the system...

7.8CVSS5.5AI score0.00379EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2019/10/16 12:00 a.m.7 views

PT-2019-15209 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 10.0.2 Description: The issue is related to a security problem where an attacker can inject malicious code. This is possible through the "outgoing email setup" feature, specifically in the "/admin/mails.php?action=edit" API...

5.4CVSS5.1AI score0.00817EPSS
SaveExploits2References11
OpenVAS
OpenVAS
added 2019/10/16 12:00 a.m.37 views

Adobe Acrobat 2017 Security Updates (APSB19-49) - Mac OS X

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

10CVSS8.3AI score0.22886EPSS
SaveExploits12References1
OpenVAS
OpenVAS
added 2019/10/16 12:00 a.m.40 views

Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-49) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.3AI score0.22886EPSS
SaveExploits12References1
OpenVAS
OpenVAS
added 2019/10/16 12:00 a.m.22 views

Adobe Acrobat DC (Classic Track) Security Updates (APSB19-49) - Windows

Adobe Acrobat DC Classic 2015 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.3AI score0.22886EPSS
SaveExploits12References1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.10 views

The vulnerability of the Junos OS router of the SRX 5000 Series allows a hacker to cause a service failure.

The vulnerability of the Junos OS router on the SRX 5000 Series is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted TCP packets remotely...

7.8CVSS5.5AI score0.01282EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.10 views

The vulnerability of the jdhcpd daemon in Junos OS MX Series routers allows a attacker to cause a service failure.

The vulnerability of the jdhcpd daemon in Junos OS MX Series routers is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted DHCP packets...

6.5CVSS5.5AI score0.01282EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.9 views

The vulnerability of the SIP ALG application-level gateway on Junos OS MX Series routers allows a attacker to cause a service failure.

The vulnerability of the SIP ALG application-level gateway on Junos OS MX Series routers stems from resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...

7.8CVSS5.5AI score0.01271EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.9 views

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to access confidential data.

The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to access control policy errors. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

6.5CVSS5.5AI score0.00926EPSS
SaveExploits0References12Affected Software4
Citrix
Citrix
added 2019/10/15 12:00 a.m.10 views

Errors testing new connector to CHv 8 - "Connection Error: A failure occurred connecting to Citrix Hypervisor. Error = write EPROTO 140247625111360:error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol"

When i try to configure a connector for this server on Citrix Hypervisor 8, if we check "Use Secured Communications", we get the error "Failed to connect to the server at ...". If we uncheck "Use Secured Communications" and "Ignore Certificate Errors", we can configure the connector. In the file...

7.1AI score
SaveExploits0
Kaspersky
Kaspersky
added 2019/10/15 12:00 a.m.439 views

KLA11676 Multiple vulnerabilities in Adobe Acrobat

Multiple vulnerabilities were found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Buffer errors vulnerability can be exploited to execute arbitrary code. 2. Use After Free vulnerability can be exploit...

7.8CVSS8.5AI score0.00461EPSS
SaveExploits0References10
Oracle linux
Oracle linux
added 2019/10/15 12:00 a.m.84 views

sudo security update

1.8.23-4.0.1 - Treat an ID of -1 as invalid since that means 'no change' Orabug: 30421281 CVE-2019-14287 - Add sudostrtoid tests for -1 and range errors. Orabug: 30421281...

9CVSS2.2AI score0.63764EPSS
SaveExploits12
Rows per page
Query Builder