Lucene search
+L

8981 matches found

BDU FSTEC
BDU FSTEC
added 2019/10/29 12:00 a.m.13 views

The vulnerability of the Webvrpcs software for remote monitoring from Advantech WebAccess allows a intruder to delete files.

The vulnerability of the Webvrpcs software for remote monitoring from Advantech WebAccess stems from deficiencies in path checking before the path is used for file operations. Exploiting this vulnerability allows a malicious actor to delete files under the authority of an administrator...

9.1CVSS5.5AI score0.03106EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/29 12:00 a.m.12 views

The multiple vulnerabilities of Check Point Security Gateway firewalls models series 80, 600, and 1000 involve deficiencies in access control. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The multiple vulnerabilities of Check Point Security Gateway Series 80, 600, and 1000 are related to deficiencies in access control for certain functions. Exploitation of these vulnerabilities could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protect...

10CVSS5.5AI score0.01366EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:00 a.m.18 views

The vulnerability of Moxa EDS-810 microcontroller software, related to access control deficiencies, allows a intruder to disclose protected information.

The vulnerability of Moxa EDS-810 microcontroller-based software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information using specially crafted queries...

5.3CVSS5.5AI score0.06499EPSS
SaveExploits5References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:00 a.m.10 views

The vulnerability of the Windows Error Reporting service on Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Windows Error Reporting service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS5.5AI score0.00967EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:00 a.m.11 views

The vulnerability of the Windows AppX Deployment Server component on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows AppX Deployment Server component in operating systems with Windows is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS5.5AI score0.01132EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:00 a.m.15 views

The vulnerability in Microsoft Edge and Internet Explorer web browsers, related to cookie file processing flaws, allows attackers to perform spoofing attacks.

The vulnerability in Microsoft Edge and Internet Explorer browsers is related to deficiencies in cookie file handling. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

4.3CVSS5.5AI score0.02287EPSS
SaveExploits0References2Affected Software1
ThreatPost
ThreatPost
added 2019/10/23 6:03 p.m.410 views

Fujitsu Wireless Keyboard Plagued By Unpatched Flaws

Two high-severity flaws, discovered in a popular Fujitsu wireless keyboard set, could allow attackers from a short distance away to “eavesdrop” on passwords entered into the keyboards, or even fully takeover a victim’s system. Making matters worse, the impacted Fujitsu wireless keyboard LX390...

10CVSS0.2AI score0.99965EPSS
SaveExploits31References14
CNVD
CNVD
added 2019/10/22 12:00 a.m.12 views

Empire CMS core encryption algorithm has logic flaws

Empire CMS it is based on B/S structure, Empire CMS-logo easy-to-use website management system. It is a well-designed and efficient website solution for Linux/windows/Unix and other environments. Empire CMS core encryption algorithm has a logical loophole, attackers can use the vulnerability to...

7AI score
SaveExploits0
OSV
OSV
added 2019/10/16 7:15 p.m.10 views

CVE-2019-15248

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

8CVSS7.5AI score0.00578EPSS
SaveExploits0References1
Chainguard
Chainguard
added 2019/10/16 6:15 p.m.11 views

CVE-2019-2967 vulnerabilities

Vulnerabilities for packages: mysql...

6.5CVSS6.8AI score0.02653EPSS
SaveExploits0
Chainguard
Chainguard
added 2019/10/16 6:15 p.m.14 views

CVE-2019-2968 vulnerabilities

Vulnerabilities for packages: mysql...

4.9CVSS6.8AI score0.02555EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.14 views

The vulnerability of the Veriexec subsystem in Junos OS routers of the SRX Series allows a attacker to enhance their privileges and gain full control over the system.

The vulnerability of the Veriexec subsystem in the Junos OS router series is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain full control over the system...

7.8CVSS5.5AI score0.00343EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2019/10/16 12:00 a.m.39 views

Adobe Acrobat DC (Classic Track) Security Updates (APSB19-49) - Mac OS X

Adobe Acrobat DC Classic 2015 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS8.3AI score0.22886EPSS
SaveExploits12References1
OSV
OSV
added 2019/10/15 2:12 p.m.9 views

USN-4155-1 aspell vulnerability

It was discovered that Aspell incorrectly handled certain inputs. An attacker could potentially access sensitive information...

9.1CVSS6.7AI score0.03259EPSS
SaveExploits0References2
OSV
OSV
added 2019/10/10 6:22 p.m.8 views

OPENSUSE-SU-2019:2308-1 Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcopusbprobe function in the drivers/media/usb/b2c2/flexcop-usb.c driver...

8.8CVSS8.2AI score0.02691EPSS
SaveExploits3References68
ThreatPost
ThreatPost
added 2019/10/09 7:07 p.m.96 views

Gamers Warned of High-Severity Intel, Nvidia Flaws

Chip giants Intel and Nvidia have stomped out high-severity flaws in two popular products, both commonly used by gamers. Impacted are the Nvidia Shield TV and Intel NUC short for Next Unit of Computing mini-PC kit. Nvidia Shield TV is a media streaming box powered by Nvidia’s Tegra X1...

6CVSS8.2AI score0.02606EPSS
SaveExploits0References12
Krebs on Security
Krebs on Security
added 2019/10/09 6:00 a.m.139 views

Patch Tuesday Lowdown, October 2019 Edition

On Tuesday Microsoft issued software updates to fix almost five dozen security problems in Windows and software designed to run on top of it. By most accounts, it's a relatively light patch batch this month. Here's a look at the highlights. Happily, only about 15 percent of the bugs patched this...

7.6CVSS8AI score0.52729EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/10/09 12:00 a.m.7 views

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component of the Oracle MySQL ServerL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures using the MySQL protocol...

6.8CVSS5.4AI score0.03014EPSS
SaveExploits0References9Affected Software13
OpenVAS
OpenVAS
added 2019/10/09 12:00 a.m.75 views

Microsoft Windows Multiple Vulnerabilities (KB4519998)

This host is missing a critical security update according to Microsoft KB4519998 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.9CVSS7AI score0.77733EPSS
SaveExploits12References3
OpenVAS
OpenVAS
added 2019/10/09 12:00 a.m.81 views

Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4519974)

This host is missing a critical security update according to Microsoft KB4519974 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

7.6CVSS6.7AI score0.07396EPSS
SaveExploits0References3
Rows per page
Query Builder