Lucene search
+L

1032 matches found

CNVD
CNVD
•added 2020/03/23 12:00 a.m.•10 views

U-Mail mail server software suffers from SQL injection vulnerability ( CNVD-2020-26502).

U-Mail mail server software is a domestic first-tier brand that really provides lifetime free upgrades to the mail system, including data upgrades to the mail system, antivirus engine, and anti-spam engine. U-Mail mail server software has SQL injection vulnerability, attackers can use the...

8AI score
SaveExploits0
OSV
OSV
•added 2020/02/11 12:00 p.m.•47 views

RUSTSEC-2020-0023 Lifetime boundary for `raw_slice` and `raw_slice_mut` are incorrect

The affected version of rulinalg has incorrect lifetime boundary definitions for RowMut::rawslice and RowMut::rawslicemut. They do not conform with Rust's borrowing rule and allows the user to create multiple mutable references to the same location. This may result in unexpected calculation resul...

9.8CVSS9.4AI score0.01668EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2020/02/11 12:00 a.m.•5 views

PT-2020-17511

Name of the Vulnerable Software and Affected Versions rulinalg versions through 2020-02-11 Description An issue was discovered in the rulinalg crate, where there are incorrect lifetime-boundary definitions for RowMut::raw slice and RowMut::raw slice mut. These definitions do not conform with Rust...

9.8CVSS0.01668EPSS
SaveExploits1References10
The Hacker News
The Hacker News
•added 2020/02/05 12:55 p.m.•47 views

Prepare for Cisco, CompTIA, and More IT Certifications with this Bundle

Exams are pretty important in professional IT. You can have all the practical knowledge in the world, but technical recruiters want to see certificates. If you want to improve your resume, the Complete 2020 IT Certification Exam Prep Mega Bundle will help you ace nine of the most important exams...

0.9AI score
SaveExploits0
Citrix
Citrix
•added 2020/01/14 12:00 a.m.•14 views

How to change the default lifetime of Compositing Engine packaging machine in ELM

By default, if finalization has not begun in 3 days of time since the Packaging Machine was created, the task will be canceled with a timeout error. On the ELM logs, you may see something like the below: 2020-01-02 13:43:59,486 ERROR 61605 CompositingEngineP: Timeout occured after...

7AI score
SaveExploits0
OSV
OSV
•added 2019/12/18 6:15 p.m.•16 views

CVE-2019-8725

The issue was addressed with improved handling of service worker lifetime. This issue is fixed in Safari 13.0.1. Service workers may leak private browsing history...

5.3CVSS6.1AI score0.00802EPSS
SaveExploits0References1
Citrix
Citrix
•added 2019/12/08 12:00 a.m.•17 views

Compositing Engine machine stuck with error "Lifetime validation failed. The token is expired"

Offload compositing getting stuck with error "Lifetime validation failed. The token is expired" and the compositing engine machine gets deleted after 20 mins. ELM fails with error: The compositing engine failed to initialize after "00:20:00". Screenshot:...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2019/08/12 12:35 p.m.•8 views

Price Dropped: Get Lifetime Access to Cisco Certification Courses 2019

With the migration of governments and enterprises towards controller-based architectures, the role of a core network engineer has become more important than ever. Today, majority of interconnected wide area networks WANs and local area networks LANs in the world run on Cisco routers and other Cis...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2019/08/12 12:35 p.m.•154 views

Price Dropped: Get Lifetime Access to Cisco Certification Courses 2019

With the migration of governments and enterprises towards controller-based architectures, the role of a core network engineer has become more important than ever. Today, majority of interconnected wide area networks WANs and local area networks LANs in the world run on Cisco routers and other Cis...

0.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•40 views

Fedora 30 : subversion (2019-f6bc68e455)

This update includes the latest stable release of Apache Subversion, version 1.12.2. This update addresses two security vulnerabilities in svnserve, CVE-2018-11782 and CVE-2019-0203. For more information, see : http://subversion.apache.org/security/CVE-2018-11782-advisory.txt...

7.5CVSS6.9AI score0.0344EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2019/08/07 3:19 p.m.•178 views

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.8CVSS6.6AI score0.52199EPSS
SaveExploits26References4
NVD
NVD
•added 2019/07/17 1:15 p.m.•50 views

CVE-2019-13272

In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a...

7.8CVSS7.3AI score0.52199EPSS
SaveExploits22References30
Mend
Mend
•added 2019/07/17 12:32 p.m.•5 views

CVE-2019-13272

In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a...

8.5CVSS0.52199EPSS
SaveExploits22References35
zdt
zdt
•added 2019/07/17 12:00 a.m.•292 views

Linux - Broken Permission and Object Lifetime Handling for PTRACE_TRACEME Exploit

Exploit for linux platform in category local exploits Linux - Broken Permission and Object Lifetime Handling for PTRACETRACEME Exploit == Summary == This bug report describes two issues introduced by commit 64b875f7ac8a "ptrace: Capture the ptracer's creds not PTPTRACECAP", introduced in v4.10 bu...

7.2CVSS7AI score0.52199EPSS
SaveExploits22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/17 12:00 a.m.•6 views

CVE-2019-13272: Undefined Security Weakness

In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a...

7.8CVSS6.8AI score0.52199EPSS
SaveExploits22References2
UbuntuCve
UbuntuCve
•added 2019/07/17 12:00 a.m.•89 views

CVE-2019-13272

In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a...

7.8CVSS6.8AI score0.52199EPSS
SaveExploits22References9
exploitpack
exploitpack
•added 2019/07/17 12:00 a.m.•31 views

Linux - Broken Permission and Object Lifetime Handling for PTRACE_TRACEME

Linux - Broken Permission and Object Lifetime Handling for PTRACETRACEME == Summary == This bug report describes two issues introduced by commit 64b875f7ac8a "ptrace: Capture the ptracer's creds not PTPTRACECAP", introduced in v4.10 but also stable-backported to older versions. I will send a...

0.3AI score
SaveExploits0
OSV
OSV
•added 2019/06/27 5:15 p.m.•8 views

CVE-2019-5816

Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page...

8.8CVSS7AI score0.01649EPSS
SaveExploits0References5
NVD
NVD
•added 2019/06/27 5:15 p.m.•20 views

CVE-2019-5816

Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page...

8.8CVSS8AI score0.01649EPSS
SaveExploits0References5
NVD
NVD
•added 2019/06/27 5:15 p.m.•39 views

CVE-2019-5786

Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

6.5CVSS6.4AI score0.61085EPSS
SaveExploits10References3
Rows per page
Query Builder