Lucene search
+L

15428 matches found

Vulnrichment
Vulnrichment
added 2020/06/03 5:40 p.m.15 views

CVE-2020-3209 Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability

A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the area of code that manag...

6.8CVSS6.8AI score0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/06/03 5:40 p.m.42 views

CVE-2020-3209 Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability

A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the area of code that manag...

6.8CVSS6.6AI score0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/06/03 5:40 p.m.24 views

CVE-2020-3208 Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability

A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs could allow an authenticated, local attacker to boot a malicious software image on an affected device. The vulnerability is due to insufficient acce...

6.7CVSS6.4AI score0.00322EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/06/03 4:0 p.m.31 views

Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability

A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs could allow an authenticated, local attacker to boot a malicious software image on an affected device. The vulnerability is due to insufficient acce...

6.7CVSS3.1AI score0.00322EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/06/03 4:0 p.m.63 views

Cisco IOS XE Software Privilege Escalation Vulnerability

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges. The vulnerability is due to insufficient validation of user-supplied content. This vulnerability could allow an attacker to load malicious...

6.7CVSS2.7AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/06/03 12:0 a.m.9 views

PT-2020-2874 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges. The issue is due to...

7.2CVSS6.3AI score0.00339EPSS
SaveExploits0References4
Krebs on Security
Krebs on Security
added 2020/05/18 3:31 p.m.35 views

This Service Helps Malware Authors Fix Flaws in their Code

Almost daily now there is news about flaws in commercial software that lead to computers getting hacked and seeded with malware. But the reality is most malicious software also has its share of security holes that open the door for security researchers or ne'er-do-wells to liberate or else seize...

7.4AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/05/12 8:53 p.m.72 views

REvil Ransomware Attack Hits A-List Celeb Law Firm

A popular law firm that works with several A-list celebrities, including Lady Gaga, Drake and Madonna, has been hit by a ransomware attack. Hackers are now threatening to release the 756 gigabytes of data allegedly stolen – including non-disclosure agreements, client contracts and personal...

6.8AI score
SaveExploits0References11
Microsoft Security Update
Microsoft Security Update
added 2020/05/12 5:0 p.m.30 views

Windows Malicious Software Removal Tool - v5.82 (KB890830)

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...

2.1AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2020/05/12 5:0 p.m.14 views

Windows Malicious Software Removal Tool - v5.82 (KB890830)

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...

2.1AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2020/05/12 5:0 p.m.79 views

Windows Malicious Software Removal Tool x64 - v5.82 (KB890830)

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...

2.1AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2020/05/12 5:0 p.m.17 views

Windows Malicious Software Removal Tool x64 - v5.82 (KB890830)

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...

2.1AI score
SaveExploits0
Prion
Prion
added 2020/05/06 5:15 p.m.16 views

Design/Logic Flaw

A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper...

4CVSS5.1AI score0.00602EPSS
SaveExploits0References1Affected Software2
OSV
OSV
added 2020/04/22 4:15 p.m.20 views

CVE-2020-7642

lazysizes through 5.2.0 allows execution of malicious JavaScript. The following attributes are not sanitized by the video-embed plugin: data-vimeo, data-vimeoparams, data-youtube and data-ytparams which can be abused to inject malicious JavaScript...

5.4CVSS6.8AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/04/22 12:0 a.m.467 views

Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool MSRT improperly handles junctions. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to...

7.8CVSS7.7AI score0.0082EPSS
SaveExploits0References3
Veracode
Veracode
added 2020/04/10 12:50 a.m.45 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

9.3CVSS4.6AI score0.10118EPSS
SaveExploits1References23Affected Software4
Veracode
Veracode
added 2020/04/10 12:36 a.m.23 views

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as a web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox...

10CVSS4.4AI score0.03733EPSS
SaveExploits1References16Affected Software2
Microsoft Security Update
Microsoft Security Update
added 2020/03/10 5:0 p.m.25 views

Windows Malicious Software Removal Tool x64 - March 2020 (KB890830)

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...

2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2020/03/10 5:0 p.m.13 views

Windows Malicious Software Removal Tool - March 2020 (KB890830)

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...

2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2020/03/10 5:0 p.m.29 views

Windows Malicious Software Removal Tool x64 - March 2020 (KB890830)

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...

2AI score
SaveExploits0
Rows per page
Query Builder