Lucene search
+L

8929 matches found

OSV
OSV
added 2019/07/03 2:15 p.m.1 views

DEBIAN-CVE-2019-13164

qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name obtained from bridge.conf or a --br=bridge option is limited to the IFNAMSIZ size, which can lead to an ACL bypass...

7.8CVSS9.1AI score0.00524EPSS
SaveExploits0References1
Qualys Blog
Qualys Blog
added 2019/06/27 2:24 p.m.404 views

Qualys Cloud Platform (VM, PC) 8.20 New Features

This new release of the Qualys Cloud Platform VM, PC, version 8.20, includes several new features in Qualys Cloud Platform and additional support for multiple technologies in Qualys Policy Compliance. Feature Highlights Qualys Cloud Platform Configure Password Expiration Notification – Now users...

SaveExploits0
Microsoft KB
Microsoft KB
added 2019/06/27 12:0 a.m.9 views

June 27, 2019 — KB4502584 Cumulative Update for .NET Framework 3.5, 4.8 for Windows 10, version 1903 and Windows Server 1903 RTM

None None...

6.1AI score
SaveExploits0
Citrix
Citrix
added 2019/06/25 12:0 a.m.11 views

Limitation of 256 characters only for TUNNEL_EXCLUDE_DOMAINS client property

When we try to add TUNNELEXCLUDEDOMAINS client property, it limits only for 256 characters. Due to which we cannot add extra domains apart from default ones. Default list:...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2019/06/25 12:0 a.m.4 views

Limitation of 256 characters only for TUNNEL_EXCLUDE_DOMAINS client property

When we try to add TUNNELEXCLUDEDOMAINS client property, it limits only for 256 characters. Due to which we cannot add extra domains apart from default ones. Default list:...

7.1AI score
SaveExploits0
Hacker One
Hacker One
added 2019/06/19 5:57 a.m.29 views

Unikrn: Rate Limit workaround in the message of the phone number verification

There was a to more or less trivial workaround to the SMS resend rate limit. Thx @drakm !...

2.5AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2019/06/18 12:0 a.m.9 views

June 18, 2019 — KB4502562 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1709

None None...

6.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2019/06/18 12:0 a.m.5 views

PT-2019-2955 · Netwide +2 · Netwide Assembler +2

Name of the Vulnerable Software and Affected Versions: Netwide Assembler NASM versions 2.14.xx Description: The issue is related to a NULL pointer dereference in the libnasm.a component of the Netwide Assembler NASM. This can be triggered when the "%pragma limit" is mishandled, specifically in th...

7.8CVSS6AI score0.01272EPSS
SaveExploits9References33
Positive Technologies
Positive Technologies
added 2019/06/11 12:0 a.m.19 views

PT-2019-12716 · Otrs +2 · Otrs +3

Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS versions 7.0.x through 7.0.7 Open Ticket Request System OTRS Community Edition versions 6.0.x through 6.0.19 Open Ticket Request System OTRS Community Edition versions 5.0.x through 5.0.36 Description: An issue...

9.8CVSS7AI score0.99019EPSS
SaveExploits29References165
Cent OS
Cent OS
added 2019/06/10 10:35 p.m.280 views

bind security update

CentOS Errata and Security Advisory CESA-2019:1294 An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS7.1AI score0.06457EPSS
SaveExploits0References7
OSV
OSV
added 2019/05/23 12:29 p.m.13 views

CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

7.5CVSS7.3AI score
SaveExploits0References8
OSV
OSV
added 2019/05/23 12:29 p.m.3 views

DEBIAN-CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

7.5CVSS7.3AI score0.03765EPSS
SaveExploits0References1
OSV
OSV
added 2019/05/23 12:0 a.m.8 views

UBUNTU-CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion...

7.5CVSS7.1AI score0.03765EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2019/05/13 5:5 a.m.22 views

bind: Limiting simultaneous TCP clients is ineffective

A flaw was found in the way bind implemented tunable which limited simultaneous TCP client connections. A remote attacker could use this flaw to exhaust the pool of file descriptors available to named, potentially affecting network connections and the management of files such as log files or zone...

7.5CVSS7.2AI score0.06457EPSS
SaveExploits0References5
Mageia
Mageia
added 2019/05/12 8:58 p.m.80 views

Updated kernel packages fixes security vulnerabilities

This kernel update is based on the upstream 4.14.116 and fixes at least the following security issues: A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the...

7CVSS1.2AI score0.00989EPSS
SaveExploits4References11
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.11 views

Rockwell Automation Bulletin 802DN Limit Switch 802DN-

Binary data 752368.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.14 views

Rockwell Automation Bulletin 802DN Limit Switch 802DN-x

Binary data 752369.prm...

7.3AI score
SaveExploits0References1
OSV
OSV
added 2019/05/07 7:29 p.m.10 views

UBUNTU-CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

7.5CVSS7.2AI score0.0598EPSS
SaveExploits1References5
OSV
OSV
added 2019/05/07 6:29 p.m.7 views

CVE-2018-13994

The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 is vulnerable to a denial-of-service attack by making more than 120 connections...

7.5CVSS5.8AI score0.02174EPSS
SaveExploits0References2
Veracode
Veracode
added 2019/05/02 4:55 a.m.29 views

Cross-site Scripting (XSS)

cumin is vulnerable to cross-site scripting XSS. The vulnerability exists through the Max Allowance field in the Set limit form...

4.3CVSS5.6AI score0.01795EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder