Lucene search
+L

9367 matches found

Kaspersky
Kaspersky
added 2019/10/07 12:00 a.m.131 views

KLA11592 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, cause denial of service. Below is a complete list of vulnerabilities: 1. Vulnerabilitiy in WebKit can be exploited remotely via...

9.8CVSS9AI score0.06927EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
added 2019/10/04 12:00 a.m.43 views

Apple iOS < 13.0 Multiple Vulnerabilities

Binary data appleios130check.nbin...

9.8CVSS7.4AI score0.16997EPSS
SaveExploits4References10
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:00 a.m.10 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

7.6CVSS5.9AI score0.08328EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

7.6CVSS5.9AI score0.08328EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:00 a.m.16 views

The vulnerability of the Team Foundation Server and Azure DevOps Server software development tools lies in the lack of protective measures for the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Team Foundation Server and Azure DevOps Server software development tools is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

5.5CVSS5.1AI score0.01535EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:00 a.m.17 views

The vulnerability of the software development tools Team Foundation Server and Azure DevOps Server lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of software development tools such as Team Foundation Server and Azure DevOps Server is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

10CVSS6AI score0.16988EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2019/09/30 12:00 a.m.34 views

LibreOffice Security Restriction Bypass Vulnerability

LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security vulnerability exists in LibreOffice. An attacker could exploit the vulnerability to bypass...

7.8CVSS8.8AI score0.03318EPSS
SaveExploits1References1
Apple
Apple
added 2019/09/26 12:00 a.m.124 views

About the security content of macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, and Security Update 2019-005 Sierra

About the security content of macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, and Security Update 2019-005 Sierra This document describes the security content of macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, and Security Update...

9.8CVSS8.8AI score0.16997EPSS
SaveExploits4References1Affected Software3
OpenVAS
OpenVAS
added 2019/09/26 12:00 a.m.25 views

Fedora Update for java-1.8.0-openjdk-aarch32 FEDORA-2019-a5ec38072a

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Apple
Apple
added 2019/09/26 12:00 a.m.106 views

About the security content of iOS 12.4.2

About the security content of iOS 12.4.2 This document describes the security content of iOS 12.4.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS8.6AI score0.16997EPSS
SaveExploits4References1Affected Software1
CISA
CISA
added 2019/09/25 12:00 a.m.26 views

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in Cloud Foundation and Harbor Container Registry for Pivotal Cloud Foundry. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA...

7AI score
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2019/09/24 12:00 a.m.12 views

September 24, 2019 — KB4515839 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607

None None...

6.1AI score
SaveExploits0
VMware
VMware
added 2019/09/22 12:00 a.m.29 views

VMSA-2019-0015:VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability

VMware Security Advisories Advisory ID| VMSA-2019-0015 ---|--- Advisory Severity| Critical CVSSv3 Range| 9.8 Synopsis| VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability CVE-2019-16097 Issue Date| 2019-09-24 Updated On|...

6.5CVSS7.1AI score0.22443EPSS
SaveExploits5References23Affected Software2
Apple
Apple
added 2019/09/19 12:00 a.m.220 views

About the security content of watchOS 6

About the security content of watchOS 6 This document describes the security content of watchOS 6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

10CVSS0.3AI score0.02999EPSS
SaveExploits6References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/09/18 7:33 p.m.42 views

Security Bulletin: Security vulnerability has been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2019-2816)

Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about a security vulnerability affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-2816 DESCRIPTION: An unspecified...

5.8CVSS0.3AI score0.02286EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2019/09/16 12:00 a.m.49 views

WordPress Import users from CSV with meta Plugin < 1.14.2.1 Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113523";...

7.5CVSS7.6AI score0.0232EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/09/13 12:00 a.m.17 views

The vulnerability of Microsoft SharePoint Foundation software, related to the lack of measures for cleaning input data, allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Foundation software-related electronic document management systems is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.2AI score0.02993EPSS
SaveExploits5References2
BDU FSTEC
BDU FSTEC
added 2019/09/13 12:00 a.m.10 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

7.6CVSS5.9AI score0.11659EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/09/13 12:00 a.m.9 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management relates to session management errors, allowing an attacker to escalate their privileges.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software relates to session management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

4.2CVSS5.5AI score0.02617EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/09/13 12:00 a.m.10 views

The vulnerability in Microsoft SharePoint Foundation software, related to errors in processing authentication requests for applications, allows a hacker to perform cross-site forgery of these requests.

The vulnerability of Microsoft SharePoint Foundation’s electronic document management software is related to errors in processing authorization requests for applications. Exploiting this vulnerability can allow a malicious actor to perform cross-site forgery of authorization requests remotely...

6.4CVSS5.3AI score0.01465EPSS
SaveExploits0References2
Rows per page
Query Builder