Lucene search
K

17 matches found

OSV
OSV
added 2025/07/31 7:15 p.m.2 views

MAL-2025-6559 Malicious code in oca-pylint-plugin (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/31 7:15 p.m.4 views

Malicious code in oca-pylint-plugin (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/12/24 5:50 p.m.11 views

acr-oca.es Improper Access Control vulnerability OBB-3820952

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
Exploits0
NVD
NVD
added 2023/05/09 7:15 p.m.17 views

CVE-2021-26406

Insufficient validation in parsing Owner's Certificate Authority OCA certificates in SEV AMD Secure Encrypted Virtualization and SEV-ES user application can lead to a host crash potentially resulting in denial of service...

7.5CVSS7.7AI score0.00445EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/05/09 6:59 p.m.17 views

CVE-2021-26406

Insufficient validation in parsing Owner's Certificate Authority OCA certificates in SEV AMD Secure Encrypted Virtualization and SEV-ES user application can lead to a host crash potentially resulting in denial of service...

7.9AI score0.00445EPSS
Exploits0References2
CVE
CVE
added 2023/05/09 6:59 p.m.56 views

CVE-2021-26406

CVE-2021-26406 describes insufficient validation in parsing Owner’s Certificate Authority (OCA) certificates within AMD SEV/SEV-ES, potentially causing a host crash and denial of service. The vulnerability is documented across multiple AMD security bulletins (AMD-SB-3001, AMD-SB-4001) with mitiga...

7.5CVSS8.4AI score0.00445EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.2 views

PT-2023-12100 · Amd · Amd Secure Encrypted Virtualization +1

Name of the Vulnerable Software and Affected Versions: AMD Secure Encrypted Virtualization SEV and SEV-ES affected versions not specified Description: The issue is related to insufficient validation in parsing Owner's Certificate Authority OCA certificates, which can lead to a host crash and...

7.5CVSS6.5AI score0.00445EPSS
Exploits0References6
Openbugbounty
Openbugbounty
added 2023/04/08 10:35 p.m.12 views

oca-lso.fr Cross Site Scripting vulnerability OBB-3254154

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
Exploits0
Qualys Blog
Qualys Blog
added 2021/12/07 7:51 p.m.24 views

Continuous Security Hardening and Monitoring for IBM® z/OS® Mainframes and Databases Using Qualys Policy Compliance

Mainframes are a key infrastructure component for many enterprises worldwide. Arguably the most secure, reliable, and efficient computing platform, mainframes hold some 70% of the worlds business-critical data. Even though they are highly secure and resilient, it’s a common misconception that...

7.4AI score
Exploits0
Openbugbounty
Openbugbounty
added 2021/11/13 2:43 p.m.12 views

oca-catalog.ru Improper Access Control vulnerability OBB-2266874

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.6AI score
Exploits0
ThreatPost
ThreatPost
added 2020/05/13 7:10 p.m.43 views

Texas Courts Won't Pay Up in Ransomware Attack

A ransomware attack has hit the information technology office that supports Texas appellate courts and judicial agencies, leading to their websites and computer servers being shut down. The office said that it will not pay the ransom requested by the cybercriminals. Specifically affected is the...

6.9AI score
Exploits0References11
Qualys Blog
Qualys Blog
added 2019/11/28 3:0 p.m.76 views

Qualys Cloud Platform 8.22 New Features (VM, PC)

Update December 11, 2019: See additional details about this release. The 8.22.0 release adds several new features in Qualys Cloud Platform, adds a new API in Policy Compliance and support for 2 new technologies for OCA. Feature Highlights Qualys Cloud Platform Support for DNS tracking – You can n...

7.1AI score
Exploits0
NVD
NVD
added 2019/07/05 8:15 p.m.8 views

CVE-2018-14733

The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...

7.5CVSS7.5AI score0.00863EPSS
Exploits0References5
Cvelist
Cvelist
added 2019/07/05 7:54 p.m.11 views

CVE-2018-14733

The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...

7.5AI score0.00863EPSS
Exploits0References5
CVE
CVE
added 2019/07/05 7:54 p.m.338 views

CVE-2018-14733

The CVE-2018-14733 issue affects Odoo, specifically the OCA dbfilter_from_header module, impacting Odoo 8.x–11.x. The root cause is a regular expression denial of service (ReDoS) under certain circumstances, exposed via the dbfilter_from_header plugin. Public references in Red Hat, Debian, and CN...

7.5CVSS7.4AI score0.00863EPSS
Exploits0References5Affected Software1
Qualys Blog
Qualys Blog
added 2019/06/25 12:5 a.m.184 views

Qualys Cloud Platform 2.39 New Features

This release of the Qualys Cloud Platform version 2.39 includes updates and new features for Out-of-Band Configuration Assessment OCA, Vulnerability Management, and Web Application Scanning, highlights as follows. Vulnerability Management Trending uses Include/Exclude Filters in Dashboard – Widge...

7.4AI score
Exploits0
OSV
OSV
added 2017/10/06 2:47 p.m.0 views

USN-3440-1 poppler vulnerabilities

It was discovered that Poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service. CVE-2017-14518, CVE-2017-14520, CVE-2017-14617, CVE-2017-14929, CVE-2017-14975, CVE-2017-14977 It was discover...

7.8CVSS6.7AI score0.01248EPSS
Exploits4References10
Rows per page
Query Builder