Lucene search
K

11189 matches found

BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.1 views

The vulnerability of the TrustZone component in the Android operating system allows a hacker to simplify the process of decoding messages.

The vulnerability of the TrustZone component in the Android operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can enable a remote attacker to simplify the process of decoding messages...

9.3CVSS7.1AI score0.00027EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.1 views

The vulnerability of the embedded file system (EFS) of the Android operating system allows a hacker to simplify the process of decoding messages.

The vulnerability of the embedded file system EFS of the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can enable a malicious actor to simplify the process of decoding messages remotely...

7.6CVSS7.1AI score0.00027EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.0 views

The vulnerability of the TrustZone component of the Android operating system allows a hacker to gain access to local files.

The vulnerability of the TrustZone component in the Android operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow a remote attacker to gain access to local files...

9.3CVSS7.2AI score0.00035EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.0 views

The vulnerability of component 1x of the Android operating system, allowing a hacker to bypass security restrictions

The vulnerability of component 1 of the Android operating system is related to errors in number processing. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

9.3CVSS7.2AI score0.00035EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2017/06/15 12:0 a.m.126 views

Microsoft Windows Multiple Vulnerabilities (KB4022727)

This host is missing a critical security update according to Microsoft KB4022727 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.93878EPSS
Exploits95References62
Debian
Debian
added 2017/06/14 8:52 p.m.34 views

[SECURITY] [DSA 3881-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3881-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 14, 2017 https://www.debian.org/security/faq -...

9.8CVSS9.4AI score0.01874EPSS
Exploits11
RedHat Linux
RedHat Linux
added 2017/06/14 7:51 a.m.1 views

Mozilla: Use-after-free and use-after-scope logging XHR header errors (MFSA 2017-16)

A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests XHR. This could result in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...

9.8CVSS7.4AI score0.01874EPSS
Exploits0References5
OSV
OSV
added 2017/06/14 12:0 a.m.0 views

UBUNTU-CVE-2017-7756

A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests XHR. This could result in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...

9.8CVSS7.2AI score0.01874EPSS
Exploits0References5
Microsoft KB
Microsoft KB
added 2017/06/13 7:0 a.m.48 views

Description of the security update for Outlook 2007: June 13, 2017

Description of the security update for Outlook 2007: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

9.3CVSS7.6AI score0.3391EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2017/06/13 12:0 a.m.3 views

PT-2017-11665 · Ibm · Ibm Jazz Foundation

Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation affected versions not specified Description: The issue could expose potentially sensitive information to authenticated users through stack trace error conditions. Recommendations: At the moment, there is no information abo...

4.3CVSS4.5AI score0.35506EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/06/08 12:0 a.m.0 views

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to errors during the loading of a library. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

7.2CVSS7.5AI score0.6875EPSS
Exploits3References4
BDU FSTEC
BDU FSTEC
added 2017/06/06 12:0 a.m.1 views

The vulnerability of the Qualcomm operating system Android component, which allows a hacker to exert indefinite influence

The vulnerability of the Qualcomm operating system Android is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to cause unpredictable effects...

10CVSS7.8AI score0.00123EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/06 12:0 a.m.2 views

The vulnerability of the FlashPlayer libraries in Adobe Flash Internet Explorer 10, Adobe Flash Internet Explorer 11, and Adobe Flash Microsoft Edge on the FlashPlayer software platform allows attackers to cause unpredictable effects.

The vulnerability of the Adobe Flash Internet Explorer 10, Adobe Flash Internet Explorer 11, and Adobe Flash Microsoft Edge software platforms’ Flash Player components is related to coding errors. Exploiting this vulnerability can allow an attacker to cause unpredictable effects from a remote...

10CVSS7.8AI score0.02737EPSS
Exploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2017/06/05 12:0 a.m.1 views

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows attackers to enhance their privileges.

The vulnerability of the TrustZone technology a DRM sub-program of Qualcomm’s Secure Execution Environment for Android from the CAF repository is related to numerical processing errors. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...

9.3CVSS7.3AI score0.00058EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/06/05 12:0 a.m.1 views

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology’s authentication mode for Qualcomm Secure Execution Environment for Android, as found in the CAF repository, stems from synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker operating remotely to...

7.6CVSS7.1AI score0.00098EPSS
Exploits0References3
The Hacker News
The Hacker News
added 2017/06/02 5:26 a.m.11 views

WannaCry Coding Mistakes Can Help Files Recovery Even After Infection

Last month WannaCry ransomware hit more than 300,000 PCs across the world within just 72 hours by using its self-spreading capabilities to infect vulnerable Windows PCs, particularly those using vulnerable versions of the OS, within the same network. But that doesn't mean WannaCry was a...

6.9AI score
Exploits0
ThreatPost
ThreatPost
added 2017/06/01 10:9 a.m.13 views

WannaCry Development Errors Enable File Recovery

WannaCry may have caused worldwide havoc on May 12 when it rode the coattails of the NSA’s weaponized EternalBlue exploit to infect computers in 150 countries, but that doesn’t mean it was a quality piece of ransomware. A number of programming errors in the code are floating to the surface and...

6.9AI score
Exploits0References10
Virtuozzo
Virtuozzo
added 2017/05/29 12:0 a.m.11 views

Product update: Virtuozzo 7.0 Update 4 Hotfix 1 (7.0.4-1091)

The new update for Virtuozzo 7.0.4 provides stability and usability bug fixes. Vulnerability id: PSBM-66625, PSBM-66445 guest.fs counters were reported in kilobytes for containers and in bytes for virtual machines. Vulnerability id: PSBM-66556 Backup location changed to default after update to...

2.7AI score
Exploits0
OSV
OSV
added 2017/05/26 6:54 a.m.13 views

MGASA-2017-0149 Updated kernel packages fixes security vulnerabilities

This kernel update is based on upstream 4.4.68 and fixes at least the following security issues: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service system crash via a long RPC reply, related to net/sunrpc/svc.c,...

9.8CVSS7.7AI score0.16011EPSS
Exploits0References5
OSV
OSV
added 2017/05/23 1:37 p.m.5 views

SUSE-SU-2017:1384-1 Security update for java-1_7_0-ibm

This update for java-170-ibm fixes the following issues: Version update to 7.0-10.5 bsc1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number ...

9.8CVSS8.2AI score0.19177EPSS
Exploits2References12
Rows per page
Query Builder