Lucene search
+L

29701 matches found

attackerkb
attackerkb
•added 2023/11/30 2:15 p.m.•8 views

CVE-2023-48964

Tenda i6 V1.0.0.83856 is vulnerable to Buffer Overflow via /goform/WifiMacFilterSet...

7.5CVSS5.8AI score0.0077EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/11/30 2:15 p.m.•17 views

CVE-2023-48964

Tenda i6 V1.0.0.83856 is vulnerable to Buffer Overflow via /goform/WifiMacFilterSet...

7.5CVSS5.8AI score0.0077EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/11/30 12:00 a.m.•13 views

PT-2023-7336

Name of the Vulnerable Software and Affected Versions iOS versions prior to 17.1.2 iPadOS versions prior to 17.1.2 macOS Sonoma versions prior to 14.1.2 Safari versions prior to 17.1.2 Description A memory corruption issue was addressed with improved locking, which may lead to arbitrary code...

8.8CVSS8AI score0.09295EPSS
SaveExploits0References157
Malwarebytes
Malwarebytes
•added 2023/11/29 11:00 p.m.•39 views

Update now! Chrome fixes actively exploited zero-day vulnerability

Google has released an update to Chrome which includes seven security fixes including one for a vulnerability which is known to have already been exploited. If you’re a Chrome user on Windows, Mac, or Linux, you should update as soon as possible. The easiest way to update Chrome is to set it to...

6.8CVSS7.2AI score0.16468EPSS
SaveExploits0
hivepro
hivepro
•added 2023/11/29 11:50 a.m.•49 views

Google Addresses Sixth Zero-Day Flaw Exploited by Attackers Wildly

Summary: Multiple vulnerabilities have been discovered in Google Chrome, including a zero-day vulnerability CVE-2023-6345 actively exploited for remote code execution. Users are advised to update Chrome to version 119.0.6045.199/.200 Windows or 119.0.6045.199 Mac and Linux promptly to safeguard...

6.8CVSS8AI score0.16468EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2023/11/29 12:00 a.m.•23 views

talagent Component Information Disclosure

The vulnerability of the talagent component in the Mac OS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

7.8CVSS6.5AI score0.00365EPSS
SaveExploits0References12Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/11/29 12:00 a.m.•23 views

macOS State Management Disclosure

The vulnerability of macOS operating systems is related to state management errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

5.3CVSS5.8AI score0.00869EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
•added 2023/11/29 12:00 a.m.•29 views

Google Chrome Security Update (stable-channel-update-for-desktop_28-2023-11) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

9.6CVSS9.6AI score0.16468EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/11/28 12:00 a.m.•25 views

Google Chrome < 119.0.6045.199 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 119.0.6045.199. It is, therefore, affected by multiple vulnerabilities as referenced in the 202311stable-channel-update-for-desktop28 advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a...

9.6CVSS8.8AI score0.16468EPSS
SaveExploits0References13
attackerkb
attackerkb
•added 2023/11/27 12:15 a.m.•16 views

CVE-2023-49321

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 a...

5.3CVSS5.8AI score0.00613EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/27 12:00 a.m.•16 views

PT-2023-7342 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a buffer overflow in the formAddMacfilterRule function of the Tenda AX1803 network device's firmware. This can be exploited by a remote attacker to execute arbitrary code via t...

9.8CVSS9.7AI score0.01407EPSS
SaveExploits1References4
NVD
NVD
•added 2023/11/26 10:15 p.m.•32 views

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.1CVSS0.00676EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/11/26 10:15 p.m.•17 views

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.1CVSS5.8AI score0.00676EPSS
SaveExploits1References2
Prion
Prion
•added 2023/11/26 10:15 p.m.•22 views

Design/Logic Flaw

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

6.4CVSS7AI score0.00676EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/11/26 12:00 a.m.•19 views

WithSecure products Security breaches

WithSecure products are a range of security software from the Finnish company WithSecure. A security vulnerability exists in some WithSecure products. An attacker has exploited the vulnerability to cause the scanning engine to crash. The following products and versions are affected: WithSecure...

7.5CVSS6.6AI score0.00701EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/11/26 12:00 a.m.•26 views

WithSecure products Security breaches

WithSecure products are a range of security software from the Finnish company WithSecure. A security vulnerability exists in some WithSecure products. An attacker could exploit the vulnerability to cause a denial of service on the system. The following products and versions are affected: WithSecu...

5.3CVSS6.5AI score0.00613EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/11/26 12:00 a.m.•17 views

Precision Bridge Security Vulnerability

Precision Bridge is a data migration and synchronization software from Precision Bridge. Precision Bridge A security vulnerability exists in PrecisionBridge.exe versions prior to 7.3.21, which stems from the use of the same license key on multiple systems via vectors involving Process Hacker memo...

9.1CVSS6.8AI score0.00676EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/11/26 12:00 a.m.•25 views

PT-2023-31167 · Withsecure · Withsecure Linux Protection +7

Name of the Vulnerable Software and Affected Versions: WithSecure Client Security version 15 WithSecure Server Security version 15 WithSecure Email and Server Security version 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac version 15 WithSecure...

5.3CVSS5.1AI score0.00613EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/26 12:00 a.m.•16 views

PT-2023-31162 · Unknown · Precision Bridge

Name of the Vulnerable Software and Affected Versions: Precision Bridge PrecisionBridge.exe versions prior to 7.3.21 Description: The issue allows for an integrity violation where the same license key can be used on multiple systems. This is achieved through vectors involving a Process Hacker...

9.1CVSS9AI score0.00676EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/26 12:00 a.m.•6 views

CVE-2023-49312: Improper Certificate Validation

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

9.1CVSS8.1AI score0.00676EPSS
SaveExploits1References2
Rows per page
Query Builder