Lucene search
+L

2042 matches found

CNNVD
CNNVD
added 2021/04/20 12:0 a.m.12 views

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite.Oracle Sales...

7.5CVSS5.7AI score0.147EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/04/20 12:0 a.m.8 views

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite.Oracle Sales...

7.5CVSS5.7AI score0.92907EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2021/03/23 7:50 p.m.42 views

MangaDex Site Offline Following Hacking Incident

MangaDex, the online repository of manga animation comics, will be closed until further notice following a hacking incident. Last week, the site reported that a cyberattacker had gained access to an administrative account, “through the reuse of a session token found in an old database leak throug...

7.5AI score
SaveExploits0References6
HackRead
HackRead
added 2021/03/23 6:46 p.m.45 views

MangaDex Hacked- Site Goes Offline until Further Notice

By Deeba Ahmed Manga reader MangaDex has gone offline after a malicious threat actor gained unauthorized access to its developer and administrator accounts. This is a post from HackRead.com Read the original post: MangaDex Hacked- Site Goes Offline until Further Notice...

3.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/03/18 10:19 a.m.6 views

Why Cached Credentials Can Cause Account Lockouts and How to Stop it

When a user account becomes locked out, the cause is often attributed to a user who has simply entered an old or incorrect password too many times. However, this is far from being the only thing that can cause an account to become locked. Another common cause, for example, is an application or...

5.7AI score
SaveExploits0
OSV
OSV
added 2021/03/11 4:15 p.m.3 views

CVE-2021-26887

An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...

7.8CVSS7AI score0.00921EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/11 4:15 p.m.24 views

CVE-2021-26887

An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...

7.8CVSS0.00921EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/03/11 4:15 p.m.3 views

CVE-2021-26887

An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...

7.8CVSS7.2AI score0.00921EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.27 views

EulerOS Virtualization 3.0.6.6 : gnupg2 (EulerOS-SA-2021-1479)

According to the version of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which resul...

7.5CVSS6.9AI score0.02082EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/03/09 12:0 a.m.5 views

PT-2021-2423 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the implementation of the Folder Redirection technology in Microsoft Windows, which is associated with insecure privilege management. An attacker who...

7.8CVSS6.5AI score0.00921EPSS
SaveExploits0References10
The Hacker News
The Hacker News
added 2021/03/05 4:36 p.m.9 views

Bug in Apple's Find My Feature Could've Exposed Users' Location Histories

Cybersecurity researchers on Thursday disclosed two distinct design and implementation flaws in Apple's crowdsourced Bluetooth location tracking system that can lead to a location correlation attack and unauthorized access to the location history of the past seven days, thereby deanonymizing user...

4.3CVSS7.1AI score0.00932EPSS
SaveExploits0
Prion
Prion
added 2021/03/03 8:15 p.m.17 views

Design/Logic Flaw

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...

5CVSS7.5AI score0.04123EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/03 7:37 p.m.25 views

CVE-2021-27935

An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...

7.7AI score0.04123EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.7 views

AdGuard 安全漏洞

Eugene AdGuard Home is an open source application from Eugene. It provides network-wide software for blocking ads and tracking. A security vulnerability exists in AdGuard before 0.105.2, which can be exploited by attackers to be able to brute-force their passwords offline, as the hash of the...

7.5CVSS7.3AI score0.04123EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
added 2021/02/16 5:15 p.m.39 views

Egregor ransomware hit by arrests

In a collaboration between French and Ukranian law enforcement, arrests have been made that might put a dent in one of the worlds most sophisticated ransomware operations. As reported first by France Inter, law enforcement made the arrests after French authorities traced ransom payments to...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:0 a.m.8 views

The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic, relates to reading data beyond the buffer in memory. This allows an attacker to gain unauthorized access to protected information.

The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.5CVSS6.1AI score0.02411EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.16 views

Microsoft Windows CSC Service Security Vulnerability

Microsoft Windows CSC Service is an application from Microsoft USA. It allows the use of network files while the local computer is offline. A security vulnerability exists in Microsoft Windows CSC Service. The following products and versions are affected:Windows Server 2012 R2 Server Core...

7.8CVSS7.1AI score0.00776EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.8 views

Microsoft Windows CSC Service Security Vulnerability

Microsoft Windows CSC Service is an application from Microsoft USA. It allows the use of network files while the local computer is offline. A security vulnerability exists in Microsoft Windows CSC Service. The following products and versions are affected:Windows Server 2012 R2 Server Core...

7.8CVSS7.1AI score0.00684EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.10 views

Microsoft Windows CSC Service Security Vulnerability

Microsoft Windows CSC Service is an application from Microsoft USA. Allows the use of network files while the local computer is offline. A security vulnerability exists in Microsoft Windows CSC Service elevation vulnerability. The following products and editions are affected:Windows Server 2008 R...

7.8CVSS7.1AI score0.00776EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.11 views

Microsoft Windows CSC Service Security Vulnerability

Microsoft Windows CSC Service is an application from Microsoft USA. It allows the use of network files while the local computer is offline. A security vulnerability exists in Microsoft Windows CSC Service. The following products and editions are affected:Windows 10 Version 1809 for x64-based...

7.8CVSS7.1AI score0.00684EPSS
SaveExploits0References4
Rows per page
Query Builder