Lucene search
+L

5910 matches found

The Hacker News
The Hacker News
•added 2019/07/25 6:37 p.m.•275 views

Your Android Phone Can Get Hacked Just By Playing This Video

Are you using an Android device? Beware! You should be more careful while playing a video on your smartphone—downloaded anywhere from the Internet or received through email. That's because, a specially crafted innocuous-looking video file can compromise your Android smartphone—thanks to a critica...

9.3CVSS2.6AI score0.08926EPSS
SaveExploits6
NVD
NVD
•added 2019/07/23 2:15 p.m.•30 views

CVE-2019-11730

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS6.8AI score0.20271EPSS
SaveExploits0References13
osv_cve
osv_cve
•added 2019/07/23 2:15 p.m.•25 views

CVE-2019-11730

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS8.3AI score
SaveExploits0References13
osv_debian
osv_debian
•added 2019/07/23 2:15 p.m.•10 views

DEBIAN-CVE-2019-11730

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS8.4AI score0.20271EPSS
SaveExploits0References1
Prion
Prion
•added 2019/07/23 2:15 p.m.•31 views

Design/Logic Flaw

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

4.3CVSS6.6AI score0.20271EPSS
SaveExploits0References13Affected Software5
AlpineLinux
AlpineLinux
•added 2019/07/23 1:16 p.m.•110 views

CVE-2019-11730

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS7.3AI score0.20271EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2019/07/23 1:16 p.m.•81 views

CVE-2019-11730

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS7.8AI score0.20271EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2019/07/18 12:00 a.m.•25 views

Microsoft.NET Framework Privilege Escalation

The vulnerability of the Microsoft.NET Framework software platform, as well as the Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation email messaging software, is related to implementation errors in authentication procedures. Exploiting this...

6.8CVSS5.6AI score0.06024EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2019/07/18 12:00 a.m.•77 views

Symantec Messaging Gateway 10.x < 10.7.1 Privilege Escalation Vulnerability (SYMSA1486)

According to its self-reported version number, the Symantec Messaging Gateway SMG running on the remote host is 10.x prior to 10.7.1. It is, therefore, affected by a privilege escalation vulnerability as described in the vendor advisory. An authenticated attacker can exploit this to gain privileg...

9.8CVSS8.5AI score0.02282EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2019/07/16 9:31 a.m.•123 views

Hackers Can Manipulate Media Files You Receive Via WhatsApp and Telegram

If you think that the media files you receive on your end-to-end encrypted secure messaging apps can not be tampered with, you need to think again. Security researchers at Symantec yesterday demonstrated multiple interesting attack scenarios against WhatsApp and Telegram Android apps, which could...

1.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2019/07/15 1:40 p.m.•125 views

Mozilla: Same-origin policy treats all files in a directory as having the same-origin

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS7.3AI score0.20271EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/07/15 12:45 p.m.•43 views

Mozilla: Same-origin policy treats all files in a directory as having the same-origin

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS7.3AI score0.20271EPSS
SaveExploits0References5
osv_alpine
osv_alpine
•added 2019/07/12 8:15 p.m.•9 views

ALPINE-CVE-2019-12827

Buffer overflow in respjsipmessaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message...

6.5CVSS7AI score0.04121EPSS
SaveExploits0References1
NVD
NVD
•added 2019/07/11 9:15 p.m.•44 views

CVE-2019-12751

Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

9.8CVSS9.7AI score0.02282EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2019/07/11 9:15 p.m.•19 views

CVE-2019-12751

Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

9.8CVSS5.8AI score0.02282EPSS
SaveExploits0References2
Prion
Prion
•added 2019/07/11 9:15 p.m.•31 views

Privilege escalation

Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

7.5CVSS9.6AI score0.02282EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2019/07/11 8:01 p.m.•256 views

CVE-2019-12751

Symantec Messaging Gateway (SMG) before version 10.7.1 is affected by a privilege-escalation vulnerability. The issue allows an attacker to gain elevated privileges within the application, as described in vendor advisories and security feeds. Remediation provided by the vendor is to upgrade to SM...

9.8CVSS9.7AI score0.02282EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/07/11 8:01 p.m.•44 views

CVE-2019-12751

Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

9.8AI score0.02282EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2019/07/11 6:00 p.m.•79 views

Mozilla: Same-origin policy treats all files in a directory as having the same-origin

A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and...

6.5CVSS7.3AI score0.20271EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2019/07/11 12:00 a.m.•7 views

PT-2019-12920

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.7.1 Description The issue is related to a privilege escalation, where an attacker may attempt to compromise the software to gain elevated access to protected resources. Recommendations For versio...

9.8CVSS0.02282EPSS
SaveExploits0References4
Rows per page
Query Builder