Lucene search
+L

9218 matches found

Prion
Prion
•added 2020/10/21 7:15 p.m.•29 views

Design/Logic Flaw

A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacke...

5CVSS5.4AI score0.01341EPSS
SaveExploits0References1Affected Software3
Vulnrichment
Vulnrichment
•added 2020/10/21 6:40 p.m.•15 views

CVE-2020-3564 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability

A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacke...

5.8CVSS7AI score0.01341EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/10/21 6:40 p.m.•53 views

CVE-2020-3564 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability

A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacke...

5.8CVSS5.3AI score0.01341EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/10/14 12:00 a.m.•17 views

The vulnerability of Intel Data Center SSD microprogramming software, related to data flow management errors, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel Data Center SSDs’ microprogrammed software is related to errors in data flow management. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

7.9CVSS5.4AI score0.00346EPSS
SaveExploits0References3
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2020/10/13 12:00 a.m.•142 views

Chrome for Android Update

Hi, everyone! We've just released Chrome 86 86.0.4240.99 for Android: it'll become available on Google Play over the next few weeks. This release includes Security, stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let u...

9.8CVSS8.5AI score0.13073EPSS
SaveExploits2Affected Software1
NVD
NVD
•added 2020/10/05 2:15 p.m.•33 views

CVE-2020-8671

Insufficient control flow management in BIOS firmware 8th, 9th Generation IntelR CoreTM Processors and IntelR CeleronR Processor 4000 Series may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS0.00326EPSS
SaveExploits0References1
NVD
NVD
•added 2020/10/05 2:15 p.m.•24 views

CVE-2019-14558

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

5.7CVSS0.0072EPSS
SaveExploits0References2
OSV
OSV
•added 2020/10/05 2:15 p.m.•16 views

CVE-2019-14558

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

5.7CVSS7.8AI score
SaveExploits0References2
OSV
OSV
•added 2020/10/05 2:15 p.m.•12 views

DEBIAN-CVE-2019-14558

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

5.7CVSS6.6AI score0.0072EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/05 2:15 p.m.•33 views

Design/Logic Flaw

Insufficient control flow management in BIOS firmware 8th, 9th Generation IntelR CoreTM Processors and IntelR CeleronR Processor 4000 Series may allow an authenticated user to potentially enable information disclosure via local access...

2.1CVSS5.1AI score0.00326EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/05 2:15 p.m.•28 views

Design/Logic Flaw

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

2.7CVSS5.8AI score0.0072EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/10/05 1:48 p.m.•91 views

CVE-2020-8671

CVE-2020-8671 is documented in multiple connected sources as an Intel BIOS vulnerability: insufficient control flow management in BIOS firmware for 8th/9th Gen Intel Core and Intel Celeron 4000 Series may allow an authenticated user to potentially disclose information via local access. The Intel ...

5.5CVSS5.8AI score0.00326EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/10/05 1:47 p.m.•34 views

CVE-2019-14558

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

6.1AI score0.0072EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2020/10/05 1:47 p.m.•41 views

CVE-2019-14558

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

5.7CVSS6.3AI score0.0072EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/05 12:00 a.m.•4 views

CVE-2019-14558: Undefined Security Weakness

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

5.7CVSS5.8AI score0.0072EPSS
SaveExploits0References1
ThreatPost
ThreatPost
•added 2020/10/02 4:43 p.m.•33 views

LatAm Banking Trojans Collaborate in Never-Before-Seen Effort

Virus Bulletin 2020 — A loose affiliation of cybercriminals are working together to author and distribute multiple families of banking trojans in Latin America – a collaborative effort that researchers say is highly unusual. Multiple, distinct malware families have plagued Latin American banking...

7.1AI score
SaveExploits0References8
Veracode
Veracode
•added 2020/10/02 1:39 a.m.•24 views

Information Disclosure

nifi-framework-core is vulnerable to information disclosure. The vulnerability exists as confidential information from the flow definition configuration JSON could be printed in plaintext...

7.5CVSS1.9AI score0.03558EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/02 12:00 a.m.•6 views

CVE-2020-15233: Improper Input Validation

ORY Fosite is a security first OAuth2 & OpenID Connect framework for Go. In Fosite from version 0.30.2 and before version 0.34.1, there is an issue in which an an attacker can override the registered redirect URL by performing an OAuth flow and requesting a redirect URL that is to the loopback...

6.1CVSS5.8AI score0.008EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2020/10/01 8:15 p.m.•8 views

CVE-2020-9486

In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext...

7.5CVSS7.4AI score0.03558EPSS
SaveExploits0References2
Mend
Mend
•added 2020/10/01 7:50 p.m.•1 views

CVE-2020-9486

In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext...

8.7CVSS0.03558EPSS
SaveExploits0References4
Rows per page
Query Builder