Lucene search
+L

5056 matches found

OSV
OSV
added 2022/02/14 10:15 p.m.6 views

UBUNTU-CVE-2022-0586

Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.9AI score0.0202EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2022/02/14 5:10 p.m.12 views

log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender

A flaw was found in the Java logging library Apache Log4j in version 1.x. JMSAppender in Log4j 1.x is vulnerable to deserialization of untrusted data. This allows a remote attacker to execute code on the server if the deployed application is configured to use JMSAppender and to the attacker's JND...

7.5CVSS7.5AI score0.81147EPSS
SaveExploits9References9
OSV
OSV
added 2022/02/12 2:15 a.m.4 views

DEBIAN-CVE-2022-0294

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.8AI score0.00743EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/12 2:15 a.m.11 views

CVE-2022-0294

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.8AI score0.00743EPSS
SaveExploits0References3
NVD
NVD
added 2022/02/12 2:15 a.m.19 views

CVE-2022-0294

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS0.00743EPSS
SaveExploits0References2
Prion
Prion
added 2022/02/12 2:15 a.m.23 views

Design/Logic Flaw

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

4.3CVSS6.5AI score0.00743EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/02/12 2:15 a.m.36 views

CVE-2022-0294

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.7AI score0.00743EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/12 2:15 a.m.9 views

UBUNTU-CVE-2022-0294

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS5.7AI score0.00743EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/02/12 1:35 a.m.47 views

CVE-2022-0294

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS7.2AI score0.00743EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/02/12 1:35 a.m.37 views

CVE-2022-0294

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.9AI score0.00743EPSS
SaveExploits0References2
CVE
CVE
added 2022/02/12 1:35 a.m.123 views

CVE-2022-0294

CVE-2022-0294 refers to an “Inappropriate implementation in Push messaging” in Google Chrome before version 97.0.4692.99. The publicly provided data states that a remote attacker who had already compromised the renderer process could bypass site isolation via a crafted HTML page. The linked Chrom...

6.5CVSS6.5AI score0.00743EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/02/10 12:00 a.m.75 views

Apache Pulsar Input Validation Error Vulnerability

Apache Pulsar is the United States Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenant, persistent storage, multi-machine room cross-region data replication,...

6.5CVSS6.3AI score0.01726EPSS
SaveExploits1References1
Securelist
Securelist
added 2022/02/09 10:00 a.m.2592 views

Spam and phishing in 2021

Figures of the year In 2021: 45.56% of e-mails were spam 24.77% of spam was sent from Russia with another 14.12% from Germany Our Mail Anti-Virus blocked 148 173 261 malicious attachments sent in e-mails The most common malware family found in attachments were Agensla Trojans Our Anti-Phishing...

9.3CVSS0.99945EPSS
SaveExploits36
RedHat Linux
RedHat Linux
added 2022/02/08 12:52 p.m.14 views

log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink

A flaw was found in the Java logging library Apache Log4j in version 1.x. JMSSink in Log4j 1.x is vulnerable to deserialization of untrusted data. This allows a remote attacker to execute code on the server if JMSSink is deployed and has been configured to perform JNDI requests...

8.8CVSS7.4AI score0.63556EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/02/07 1:48 p.m.15 views

log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender

A flaw was found in the Java logging library Apache Log4j in version 1.x. JMSAppender in Log4j 1.x is vulnerable to deserialization of untrusted data. This allows a remote attacker to execute code on the server if the deployed application is configured to use JMSAppender and to the attacker's JND...

7.5CVSS7.5AI score0.81147EPSS
SaveExploits9References9
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.9 views

The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, allows a intruder to cause service failures or modify the log files on the server.

The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, stems from improper processing of output data for registration logs. Exploiting this...

5.9CVSS7.5AI score0.00804EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:00 a.m.11 views

The vulnerability of the centralized system for managing emergency messages and events in CAMS, compared to distributed systems like CENTUM, allows a intruder to cause system failures, including the suppression of emergency signals.

The vulnerability of the centralized system for managing emergency messages and events in CAMS distributed systems like CENTUM is related to the use of pre-set account data. Exploiting this vulnerability could allow a malicious actor to cause server failures, including the suppression of emergenc...

7.8CVSS7.7AI score0.00997EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/02/05 10:00 a.m.17 views

CVE-2021-4198

A NULL Pointer Dereference vulnerability in the messagingipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects:...

6.1CVSS6.3AI score0.00566EPSS
SaveExploits0References3
NVD
NVD
added 2022/02/04 11:15 p.m.39 views

CVE-2022-23605

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed from local chat history of Wire Webapp. In versions before 2022-01-27-production.0 ephemeral messages and assets might still be accessible...

4.4CVSS0.00307EPSS
SaveExploits0References2
CVE
CVE
added 2022/02/04 10:32 p.m.72 views

CVE-2022-23605

CVE-2022-23605 affects Wire Webapp: expired ephemeral messages were not reliably removed from local chat history and, in affected versions prior to 2022-01-27-production.0, ephemeral messages/assets could be accessible via the local search function. Viewing a message in chat view triggers deletio...

4.4CVSS3.7AI score0.00307EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder