Lucene search
+L

38664 matches found

Positive Technologies
Positive Technologies
added 2022/01/11 12:00 a.m.4 views

PT-2022-1495 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the incorrect clearing or release of resources in the Windows IKE extension, which can lead to a denial-of-service condition. This can be exploited by a remote...

7.5CVSS9.2AI score0.0303EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2022/01/11 12:00 a.m.7 views

PT-2022-1692 · Microsoft · Windows Ike Extension +1

Name of the Vulnerable Software and Affected Versions: Windows Internet Key Exchange IKE Extension affected versions not specified Description: The issue is related to incorrect clearing or release of resources in the Windows IKE extension, which can be exploited by a remote attacker to cause a...

7.5CVSS9.2AI score0.04163EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2022/01/11 12:00 a.m.11 views

Microsoft Windows IKE Extension 安全漏洞

Microsoft Windows IKE Extension is a network key exchange extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows IKE Extension. The following products and editions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows 10...

7.5CVSS7.6AI score0.0303EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/11 12:00 a.m.11 views

Microsoft Windows IKE Extension 安全漏洞

Microsoft Windows IKE Extension is a network key exchange extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows IKE Extension. The following products and editions are affected: Windows 10 Version 1809 for 32-bit Systems,Windows Server 2022,Windows Server...

7.5CVSS7.6AI score0.0303EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/01/10 4:52 p.m.19 views

openvswitch: External triggered memory leak in Open vSwitch while processing fragmented packets

A memory leak was found in Open vSwitch OVS during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments...

7.5CVSS7.1AI score0.01979EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2022/01/10 4:51 p.m.9 views

openvswitch: External triggered memory leak in Open vSwitch while processing fragmented packets

A memory leak was found in Open vSwitch OVS during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments...

7.5CVSS7.1AI score0.01979EPSS
SaveExploits1References4
OSV
OSV
added 2022/01/10 2:12 p.m.7 views

CVE-2022-22284

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication...

5.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/10 2:12 p.m.22 views

CVE-2022-22284

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication...

5.7CVSS0.00224EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.9 views

CVE-2022-22284

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication...

5.7CVSS6.1AI score0.00224EPSS
SaveExploits0References2
Prion
Prion
added 2022/01/10 2:12 p.m.24 views

Authentication flaw

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication...

2.1CVSS5.8AI score0.00224EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.9 views

Samsung Internet 授权问题漏洞

Samsung Internet is a cell phone application from Samsung South Korea. It provides a browser function. A security vulnerability previously existed in Samsung Internet 16.0.2.19 that allowed an attacker to bypass secret mode password authentication...

5.7CVSS5.8AI score0.00224EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/01/07 10:39 p.m.27 views

CVE-2022-22284

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication...

5.7CVSS6.1AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/07 10:39 p.m.77 views

CVE-2022-22284

CVE-2022-22284 describes an improper authentication vulnerability in Samsung Internet prior to version 16.0.2.19, enabling an attacker with local access to bypass the secret mode password authentication. Affected product is Samsung Internet (mobile browser); root cause is bypassing the secret mod...

5.7CVSS5.7AI score0.00224EPSS
SaveExploits0References1Affected Software1
ThreatPost
ThreatPost
added 2022/01/07 4:14 p.m.239 views

QNAP: Get NAS Devices Off the Internet Now

Get your internet-exposed, network-attached storage NAS devices off the internet now, Taiwanese manufacturer QNAP warns: Ransomware and brute-force attacks are widely targeting all network devices. “The most vulnerable victims will be those devices exposed to the Internet without any protection,”...

10CVSS9.6AI score0.7825EPSS
SaveExploits0References15
ATTACKERKB
ATTACKERKB
added 2022/01/07 5:54 a.m.9 views

CVE-2021-46148

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Some unprivileged users can view confidential information e.g., IP addresses and User-Agent headers for election traffic on a testwiki SecurePoll instance...

6.5CVSS6.1AI score0.01178EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/01/05 12:00 a.m.273 views

Apache OFBiz Log4Shell Direct Check (CVE-2021-44228)

Binary data apacheofbizlog4shell.nbin...

10CVSS10AI score0.99999EPSS
SaveExploits368References3
CNNVD
CNNVD
added 2022/01/04 12:00 a.m.12 views

Apache James 安全漏洞

Apache James is an open source Smtp and Pop3 mail transfer agent and Nntp news server written entirely in Java from the Apache Foundation in the U.S. A security vulnerability exists in versions of Apache James prior to 3.6.1, which could be exploited by attackers to write IMAP list commands using...

7.5CVSS5.7AI score0.0286EPSS
SaveExploits0References3
Wired Threat Level
Wired Threat Level
added 2022/01/03 12:00 p.m.19 views

6 Ways to Delete Yourself From the Internet

You’ll never be able to get a clean slate—but you can significantly downsize your digital footprint...

2.3AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/01/03 8:15 a.m.5 views

CVE-2021-30276

Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wired Infrastructure and Networking...

9.3CVSS7AI score0.00154EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/03 8:15 a.m.5 views

CVE-2021-30283

Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

7.1CVSS6.2AI score0.00129EPSS
SaveExploits0References2
Rows per page
Query Builder