Lucene search
+L

6232 matches found

BDU FSTEC
BDU FSTEC
added 2020/11/02 12:00 a.m.11 views

The vulnerability of the General component of the Oracle REST Data Services service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the General component of the Oracle REST Data Services is related to security mechanism failures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information via the HTTP network protocol...

4.3CVSS6.4AI score0.0096EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
added 2020/10/27 12:00 a.m.28 views

Huawei GaussDB Kernel Detection (Linux/Unix SSH Login)

SSH login-based detection of Huawei GaussDB Kernel. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/10/27 12:00 a.m.15 views

Fedora: Security Advisory for librepo (FEDORA-2020-b40fc174b5)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.5CVSS7.9AI score0.02526EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2020/10/23 5:04 p.m.82 views

COVID-19 Vaccine-Maker Hit with Cyberattack, Data Breach

COVID-19 vaccine manufacturer Dr. Reddy’s Laboratories has shut down its plants in Brazil, India, Russia, the U.K. and the U.S. following a cyberattack, according to reports. The Indian company is the contractor for Russia’s “Sputinik V” COVID-19 vaccine, which is about to enter Phase 2 human...

0.4AI score
SaveExploits0References6
OSV
OSV
added 2020/10/21 3:15 p.m.10 views

CVE-2020-14744

Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services component: General. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: prior to 20.2.1. Easily exploitable vulnerability allows low privileged attacker with networ...

6.5CVSS6.9AI score0.01297EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/10/19 12:00 a.m.13 views

Fedora: Security Advisory for livecd-tools (FEDORA-2020-5d9f0ce2b3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.5CVSS7.9AI score0.02526EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/10/16 12:00 a.m.6 views

Denial of Service Vulnerability in GE PACSystems Rx3i

PACSystems Rx3i is a programmable automation controller from General Electric. A denial of service vulnerability exists in GE PACSystems Rx3i, which can be exploited by an attacker to cause the device to crash...

6.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/10/16 12:00 a.m.30 views

Fedora: Security Advisory for kernel (FEDORA-2020-e288acda9a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.5AI score0.07693EPSS
SaveExploits7References2
Schneier on Security
Schneier on Security
added 2020/10/15 11:01 a.m.38 views

US Cyber Command and Microsoft Are Both Disrupting TrickBot

Earlier this month, we learned that someone is disrupting the TrickBot botnet network. Over the past 10 days, someone has been launching a series of coordinated attacks designed to disrupt Trickbot, an enormous collection of more than two million malware-infected Windows PCs that are constantly...

0.5AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2020/10/13 10:00 a.m.39 views

The Man Who Speaks Softly—and Commands a Big Cyber Army

Meet General Paul Nakasone. He reined in chaos at the NSA and taught the US military how to launch pervasive cyberattacks. And he did it all without you noticing...

1.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/02 9:15 a.m.8 views

familyhearthgeneralstore.com Cross Site Scripting vulnerability OBB-1377257

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
CNVD
CNVD
added 2020/09/26 12:00 a.m.2 views

Industrial Control Device Vulnerability in American General PACsystem RX3i

General Electric GE is the world's largest multinational corporation in the business of providing technology and services, headquartered in Boston, USA. An industrial control device vulnerability exists in the American General PACsystem RX3i, which can be exploited by an attacker to cause a denia...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2020/09/23 12:00 a.m.13 views

GE Reason S20 Ethernet Switch Cross-Site Scripting Vulnerability

The GE Reason S20 Ethernet Switch is a General Electric switch from General Electric GE. A cross-site scripting vulnerability exists in the Reason S20 managed Ethernet switches, which stems from a lack of proper validation of client data by a WEB application. An attacker can exploit this...

6.1CVSS6.2AI score0.00706EPSS
SaveExploits0References1
ICS
ICS
added 2020/09/22 12:00 a.m.112 views

GE Reason S20 Ethernet Switch

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: General Electric Equipment: Reason S20 Ethernet Switch Vulnerabilities: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow unauthorized accounts...

6.1CVSS6.8AI score0.00706EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/09/18 12:00 a.m.9 views

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

3.4CVSS6.4AI score0.0086EPSS
SaveExploits0References3Affected Software1
The Hacker News
The Hacker News
added 2020/09/16 9:44 a.m.59 views

2 Hackers Charged for Defacing Sites after U.S. Airstrike Killed Iranian General

The US Department of Justice DoJ on Tuesday indicted two hackers for their alleged involvement in defacing several websites in the country following the assassination of Iranian major general Qasem Soleimani earlier this January. Behzad Mohammadzadeh aka Mrb3hz4d, 19, and Marwan Abusrour aka...

0.8AI score
SaveExploits0
Gitee
Gitee
added 2020/09/15 3:21 p.m.3 views

PayloadsAllTheThings

It is an offensive tool for general-purpose payloads. The repository contains a collection of payloads for various purposes, but no specific exploit or vulnerability is mentioned. The provided code snippet is a funding model configuration for GitHub Sponsors and Ko-fi, indicating that the...

7.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/09/12 12:00 a.m.8 views

Fedora: Security Advisory for java-1.8.0-openjdk-aarch32 (FEDORA-2020-43901402db)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
NVD
NVD
added 2020/09/09 1:15 p.m.28 views

CVE-2020-6318

A Remote Code Execution vulnerability exists in the SAP NetWeaver ABAP Server, up to release 7.40 and ABAP Platform release 7.40.Because of this, an attacker can exploit these products via Code Injection, and potentially enabling to take complete control of the products, including viewing,...

9.1CVSS0.05641EPSS
SaveExploits2References4
Gitee
Gitee
added 2020/09/06 11:17 a.m.5 views

PayloadsAllTheThings

It is an offensive tool for general-purpose payloads. The repository contains a collection of payloads for various purposes, but no specific exploit or vulnerability is identified. The provided code snippet is a funding model configuration for GitHub Sponsors and Ko-fi, indicating that the...

7.3AI score
SaveExploits0
Rows per page
Query Builder