Lucene search
+L

8447 matches found

Github Security Blog
Github Security Blog
added 2020/03/24 3:7 p.m.83 views

Malicious package may avoid detection in python auditing

Python Auditing Vulnerability Demonstrates how a malicious package can insert a load-time poison pill to avoid detection by tools like Safety. Tools that are designed to find vulnerable packages can not ever run in the same python environment that they are trying to protect. Usage Install safety,...

5CVSS1.5AI score0.00366EPSS
SaveExploits0References7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/03/23 8:41 p.m.27 views

Security Bulletin: IBM Integration Bus affected by a JDBC XA switch load files Vulnerability(CVE-2017-1418)

Summary IBM Integration Bus ships with JDBC XA switch load files for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. Vulnerability Details CVEID: CVE-2017-1418 DESCRIPTION: IBM Integration Bus has insecure permissions on certain files. A local...

5.5CVSS0.5AI score0.00327EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2020/03/23 8:54 a.m.8 views

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

6.5CVSS7.3AI score0.03155EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/03/23 8:41 a.m.9 views

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

6.5CVSS7.3AI score0.03155EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/03/23 8:32 a.m.8 views

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

6.5CVSS7.3AI score0.03155EPSS
SaveExploits1References5
Hacker One
Hacker One
added 2020/03/22 5:23 a.m.156 views

BlockDev Sp. Z o.o: load scripts DOS vulnerability

load scripts DOS vulnerability...

5CVSS1.1AI score0.72671EPSS
SaveExploits12
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.11 views

The vulnerability of the LOAD DATA LOCAL INFILE component in the mysql (mysqljs) Node.js software module allows a hacker to gain unauthorized access to protected information.

The vulnerability of the LOAD DATA LOCAL INFILE component in the mysql mysqljs Node.js software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00383EPSS
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2020/03/16 1:41 p.m.15 views

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

6.5CVSS7.3AI score0.03155EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/03/16 10:0 a.m.9 views

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

6.5CVSS7.3AI score0.03155EPSS
SaveExploits1References5
NVD
NVD
added 2020/03/12 1:15 p.m.23 views

CVE-2019-5648

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...

8.7CVSS7AI score0.01125EPSS
SaveExploits1References1
OSV
OSV
added 2020/03/12 1:15 p.m.12 views

CVE-2019-5648

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...

6.5CVSS6.9AI score0.01125EPSS
SaveExploits1References1
Prion
Prion
added 2020/03/12 1:15 p.m.23 views

Code injection

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...

5.5CVSS6.4AI score0.01125EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/03/12 1:0 p.m.37 views

CVE-2019-5648 LDAP Credential Exposure in Barracuda Load Balancer ADC

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...

8.7CVSS6.4AI score0.01125EPSS
SaveExploits1References1
CVE
CVE
added 2020/03/12 1:0 p.m.52 views

CVE-2019-5648

CVE-2019-5648 affects Barracuda Load Balancer ADC with unpatched firmware (≤ v6.4). Authenticated administrative users can modify the LDAP service configuration to point the LDAP server to an attacker-controlled system, enabling exposure of LDAP credentials over the network. The description and l...

8.7CVSS6.7AI score0.01125EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/12 12:0 a.m.11 views

The vulnerability of the software update function of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to load any file onto a vulnerable device.

The vulnerability of the Cisco Enterprise NFV Infrastructure Software’s software update function NFVIS is related to errors during file signature verification. Exploiting this vulnerability could allow an attacker to load any desired file onto a vulnerable device...

6.8CVSS6.6AI score0.00207EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2020/03/11 12:0 a.m.5 views

Intel(R) Graphics Driver Load Value Injection (LVI) Vulnerability

IntelR Graphics Driver is a graphics card driver from Intel. A security vulnerability exists in IntelR Graphics Driver. An attacker could exploit the vulnerability to potentially enable denial of service via local access...

5.5CVSS6.3AI score0.00313EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2020/03/10 6:8 p.m.114 views

High-Severity Flaws Plague Intel Graphics Drivers

Intel has issued security patches for six high-severity vulnerabilities in its Windows graphics drivers which, if exploited, could enable escalation of privilege, denial of service DoS and information disclosure. The graphics driver is software that controls how graphic components work with the...

7.2CVSS8.3AI score0.0104EPSS
SaveExploits1References24
GithubExploit
GithubExploit
added 2020/03/10 5:0 p.m.74 views

Exploit for CVE-2020-0551

PoC for the LVI-LFB Control Flow Hijacking attack CVE-2020-0...

5.6CVSS7.5AI score0.0104EPSS
SaveExploits1
OSV
OSV
added 2020/03/10 5:0 p.m.5 views

UBUNTU-CVE-2020-0551

Load value injection in some IntelR Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334:...

5.6CVSS6AI score0.0104EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2020/03/10 5:0 p.m.28 views

CVE-2020-0551

Load value injection in some IntelR Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334:...

5.6CVSS6.6AI score0.0104EPSS
SaveExploits1References5
Rows per page
Query Builder