Lucene search
+L

383 matches found

Redos
Redos
added 2021/12/24 12:0 a.m.70 views

ROS-20211223-03

Vulnerability in an open source implementation of the OpenLDAP protocol is related to a reachability assertion. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to send a specially crafted packet with a short timestamp to slapd and perform a denial of service...

7.5CVSS7.7AI score0.84224EPSS
Exploits1
ICS
ICS
added 2021/12/14 12:0 a.m.109 views

Siemens Capital VSTAR

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely / Low attack complexity Vendor: Siemens Equipment: Capital VSTAR Vulnerabilities: Access of Resource Using Incompatible Type, Improper Validation of Specified Quantity in Input, Out-of-Bounds Read, Improper Restriction of Operations...

9.8CVSS8.8AI score0.0215EPSS
Exploits0References10
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:0 a.m.7 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to access to resources through incompatible types. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to access to resources through incompatible types. Exploiting these vulnerabilities can allow a malicious actor to...

9.3CVSS7.7AI score0.1134EPSS
Exploits0References4Affected Software2
Oracle linux
Oracle linux
added 2021/11/16 12:0 a.m.31 views

tpm2-tools security and enhancement update

4.1.1-5 - Bump nvr to trigger osci. resolves: rhbz1965981 4.1.1-4 - Fix CVE-2021-3565 resolves: rhbz1965981 4.1.1-3 - Fix resource leak. - Fix to restrict policy digest size. - Fix incompatible pointer cast. - Fix error message in filesloadname - Fix issue where execution couldnt reach function...

5.9CVSS6AI score0.01327EPSS
Exploits0
Ubuntu
Ubuntu
added 2021/10/25 3:5 p.m.194 views

USN-5123-2: MySQL vulnerabilities

USN-5123-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to...

5.5CVSS6.7AI score0.02497EPSS
Exploits0
Ubuntu
Ubuntu
added 2021/10/25 12:56 p.m.138 views

USN-5123-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.27 in Ubuntu 20.04 LTS, Ubuntu 21.04, and Ubuntu 21.10. Ubuntu 18.04 LTS has been updated to MySQL 5.7.36. In addition to security fixes, the...

7.1CVSS6.4AI score0.03384EPSS
Exploits0
OSV
OSV
added 2021/07/26 2:12 p.m.4 views

USN-5022-1 mysql-5.7, mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.26 in Ubuntu 20.04 LTS and Ubuntu 21.04. Ubuntu 18.04 LTS has been updated to MySQL 5.7.35. In addition to security fixes, the updated packages...

8CVSS6.7AI score0.41478EPSS
Exploits0References32
Ubuntu
Ubuntu
added 2021/07/26 2:12 p.m.212 views

USN-5022-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.26 in Ubuntu 20.04 LTS and Ubuntu 21.04. Ubuntu 18.04 LTS has been updated to MySQL 5.7.35. In addition to security fixes, the updated packages...

8CVSS6.9AI score0.41478EPSS
Exploits0
Fedora
Fedora
added 2021/05/29 1:17 a.m.97 views

[SECURITY] Fedora 33 Update: python2.7-2.7.18-11.fc33

Python 2 is an old version of the language that is incompatible with the 3.x line of releases. The language is mostly the same, but many details, especi ally how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been...

7.5CVSS8.3AI score0.35717EPSS
Exploits1
ICS
ICS
added 2021/05/17 12:0 a.m.304 views

ICSA-21-040-06_Siemens JT2Go and Teamcenter Visualization (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: JT2Go and Teamcenter Visualization Vulnerabilities: Out-of-bounds Read, Improper Restriction of Operations within the Bounds of a Memory Buffer, Stack-based Buffer overflow, Out-of-Bounds Write, Type...

8.8CVSS8.7AI score0.03991EPSS
Exploits0References11
Ubuntu
Ubuntu
added 2021/05/12 4:53 p.m.179 views

USN-4952-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.25 in Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. Ubuntu 18.04 LTS has been updated to MySQL 5.7.34. In addition to security fixes, the...

6.5CVSS7.3AI score0.04643EPSS
Exploits0
OSV
OSV
added 2021/05/12 4:53 p.m.5 views

USN-4952-1 mysql-5.7, mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.25 in Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. Ubuntu 18.04 LTS has been updated to MySQL 5.7.34. In addition to security fixes, the...

6.5CVSS6.7AI score0.04643EPSS
Exploits0References34
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.15 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.3CVSS8.3AI score0.57736EPSS
Exploits1References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.8 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.3CVSS8AI score0.01601EPSS
Exploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.3 views

The vulnerability of the fs/fuse/fuse_i.h file in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the fs/fuse/fusei.h file in the Linux operating system’s kernel is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.0036EPSS
Exploits0References25Affected Software5
Tenable Nessus
Tenable Nessus
added 2021/02/01 12:0 a.m.55 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-4716-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4716-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL...

7.1CVSS6.5AI score0.10093EPSS
Exploits3References26
Tenable Nessus
Tenable Nessus
added 2021/01/25 12:0 a.m.97 views

openSUSE Security Update : clamav (openSUSE-2020-2268)

This update for clamav fixes the following issues : clamav was updated to the new major release 0.103.0. jscECO-3010,bsc1118459 Note that libclamav was changed incompatible, if you have a 3rd party application that uses libclamav, it needs to be rebuilt. Update to 0.103.0 - clamd can now reload t...

9.8CVSS7.2AI score0.0812EPSS
Exploits4References20
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.8 views

Siemens Jt2go和Siemens Teamcenter Visualization 安全漏洞

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, and PLM XML with existing JT, VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments with software that gives business users access to...

8.8CVSS7.3AI score0.03904EPSS
Exploits0References8
OSV
OSV
added 2021/01/05 4:32 p.m.6 views

SUSE-SU-2021:14592-1 Security update for clamav

This update for clamav fixes the following issues: - Update to 0.103.0 to implement jscECO-3010 and bsc1118459 - This update incorporates incompatible changes that were introduced in version 0.101.0. - Accumulated security fixes: CVE-2020-3350: Fix a vulnerability wherein a malicious user could...

7.5CVSS7.2AI score0.05063EPSS
Exploits0References10
OSV
OSV
added 2020/12/14 2:1 p.m.9 views

SUSE-SU-2020:3790-1 Security update for clamav

This update for clamav fixes the following issues: clamav was updated to the new major release 0.103.0. jscECO-3010,bsc1118459 Note that libclamav was changed incompatible, if you have a 3rd party application that uses libclamav, it needs to be rebuilt. Update to 0.103.0 clamd can now reload the...

9.8CVSS7.8AI score0.0812EPSS
Exploits4References21
Rows per page
Query Builder