Lucene search
+L

2946 matches found

OSV
OSV
added 2023/10/24 9:59 p.m.39 views

CVE-2023-46126 Fides JavaScript Injection Vulnerability in Privacy Center URL

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code. The Fides web application allows users to edit consent and privacy notices such as cookie banners. The vulnerability mak...

3.9CVSS5.3AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2023/10/24 2:45 a.m.33 views

Fides JavaScript Injection Vulnerability in Privacy Center URL

Impact The Fides web application allows users to edit consent and privacy notices such as cookie banners. These privacy notices can then be served by other integrated websites, for example in cookie consent banners. One of the editable fields is a privacy policy URL and this input was found to no...

5.4CVSS6.8AI score0.00607EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2023/10/18 6:15 p.m.41 views

CVE-2023-30911

HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service...

7.5CVSS6.8AI score0.00498EPSS
SaveExploits1References1
Prion
Prion
added 2023/10/18 6:15 p.m.27 views

Denial of service

HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service...

5CVSS7.5AI score0.00498EPSS
SaveExploits1References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/10/18 5:04 p.m.18 views

CVE-2023-30911

HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service...

6.8CVSS7AI score0.00498EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/10/18 5:04 p.m.38 views

CVE-2023-30911

HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service...

6.8CVSS7.7AI score0.00498EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/10/18 12:00 a.m.19 views

PT-2023-23042 · Hewlett Packard · Hpe Integrated Lights-Out 6 +2

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 affected versions not specified HPE Integrated Lights-Out 6 affected versions not specified Description: A potential security issue has been identified that could be remotely exploited, allowing denial of service...

7.5CVSS7.4AI score0.00498EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/10/18 12:00 a.m.17 views

Hewlett Packard Enterprise Integrated Lights-Out Security Vulnerability

Hewlett Packard Enterprise Integrated Lights-Out is a remote control solution from Hewlett Packard Enterprise. The solution enables remote monitoring and operation of IT assets such as servers. A security vulnerability exists in Hewlett Packard Enterprise Integrated Lights-Out 5 and Integrated...

7.5CVSS6.8AI score0.00498EPSS
SaveExploits1References2
HPE Security Bulletins
HPE Security Bulletins
added 2023/10/18 12:00 a.m.12 views

HPESBHF04544 rev.1 - HPE Integrated Lights-Out 5 (iLO 5), and HPE Integrated Lights-Out 6 (iLO 6), Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 6 iLO 6 - Prior to iLO 6 v1.53 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to iLO 5 v2.98 HPE ProLiant BL460c Gen10 Server Blade -...

7.5CVSS6.1AI score0.00498EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2023/10/17 11:23 a.m.48 views

Security Bulletin: Vulnerability in pycrypto-2.6.1.tar.gz affects IBM Integrated Analytics System [CVE-2013-7459, CVE-2018-6594]

Summary The pycrypto-2.6.1.tar.gz package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable vulnerability CVE-2013-7459, CVE-2018-6594. Vulnerability Details CVEID:CVE-2013-7459 DESCRIPTION: PyCrypto is vulnerable to a heap-based buffer...

9.8CVSS9.6AI score0.09578EPSS
SaveExploits2Affected Software1
NCSC
NCSC
added 2023/09/29 12:00 a.m.12 views

Vulnerabilities fixed in Cisco IOS

Cisco has fixed vulnerabilities in the IOS firmware of several systems, such as Catalyst, Aironet, Integrated Routers, Analog Voice Gateways. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service...

9.8CVSS8AI score0.21583EPSS
SaveExploits0
OSV
OSV
added 2023/09/28 6:15 p.m.7 views

CVE-2023-40375

Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...

7.8CVSS5.8AI score0.00147EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/28 6:15 p.m.28 views

Privilege escalation

Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...

4.3CVSS7.8AI score0.00147EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/09/28 5:38 p.m.34 views

CVE-2023-40375 IBM i privilege escalation

Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...

7.4CVSS8AI score0.00147EPSS
SaveExploits0References2
CVE
CVE
added 2023/09/28 5:38 p.m.104 views

CVE-2023-40375

CVE-2023-40375 concerns the Integrated application server for IBM i, affecting IBM i versions 7.2–7.5. The Red Hat/IBM bulletin and IBM i security pages describe a local privilege escalation vulnerability: a user with command-line access to the host OS can elevate privileges to root. Root cause i...

7.8CVSS7.8AI score0.00147EPSS
SaveExploits0References2Affected Software1
Citrix
Citrix
added 2023/09/21 12:00 a.m.12 views

PVS server cannot logon database with Error "The Login is from an Untrusted Domain and Cannot ..."

PVS server console cannot be launched with error: "The database login failed." SQL server log error: "Login failed. The login is from an untrusted domain and cannot be used with Integrated authentication." "SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection...

8AI score
SaveExploits0
Citrix
Citrix
added 2023/09/19 12:00 a.m.17 views

Mouse cursor invisible when hovering over text based apps in Citrix session

ADM based Endpoints/Laptops Mouse invisible when hovering over text based apps Mouse cursor not appearing with AMD integrated graphics inside the Citrix Sessions...

7.1AI score
SaveExploits0
CNNVD
CNNVD
added 2023/09/13 12:00 a.m.11 views

Number withdrawn

CodeMeter is a security tool from Wibu-Systems that provides integrated technology for software developers and smart device companies. This CVE number has been withdrawn...

6.8AI score
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2023/09/11 11:31 a.m.332 views

Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System (Sailfish)[CVE-2023-38408]

Summary The OpenSSH package is used by IBM Integrated Analytics System. The IBM Integrated Analytics System has addressed the applicable CVE CVE-2023-38408. Vulnerability Details CVEID:CVE-2023-38408 DESCRIPTION: OpenSSH could allow a remote attacker to execute arbitrary code on the system, cause...

9.8CVSS9.7AI score0.797EPSS
SaveExploits10Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/09/11 11:29 a.m.47 views

Security Bulletin: Vulnerability in BIND affects IBM Integrated Analytics System (Sailfish)[CVE-2023-2828]

Summary The BIND package is used by IBM Integrated Analytics System. The IBM Integrated Analytics System had addressed the applicable CVE CVE-2023-2828. Vulnerability Details CVEID:CVE-2023-2828 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a flaw that allows the named's...

7.5CVSS7.7AI score0.03776EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder