Lucene search
+L

478 matches found

BDU FSTEC
BDU FSTEC
added 2019/10/01 12:00 a.m.8 views

The vulnerability of the fly-admin-viewaudit security journal in the FLY environment of the Astra Linux operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the security journal “fly-admin-viewaudit” in the FLY operating system of Astra Linux relates to a bug in log opening with identical modification times. Exploiting this vulnerability could allow an attacker, working remotely, to gain unauthorized access to protected informati...

3.5CVSS5.5AI score
SaveExploits0References1
CNVD
CNVD
added 2019/09/26 12:00 a.m.10 views

Cisco IOS and IOS XE IP Ident Denial of Service Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the Ident protocol handler in Cisco IOS and IOS XE, which arises from the program's failure to properly handle memory structures. A remote attacker could cau...

8.6CVSS6.8AI score0.01984EPSS
SaveExploits0References1
Citrix
Citrix
added 2019/09/20 12:00 a.m.13 views

Server Host to Client URL Content Redirection and Validation

When using Host to Client URL Redirectiona specific URL may fail to open on the client as expected and instead open on the VDA. Other URL links will succeed in redirecting properly...

7AI score
SaveExploits0
Citrix
Citrix
added 2019/09/09 12:00 a.m.12 views

When closing and re-opening Workspace on IOS, refreshing or launching apps causes failure.

After IOS has enumerated and/or launched apps through Storefront via Netscaler Gateway, and the Workspace app is closed but not logged out, when re-opening Workspace you get failure when refreshing apps or launching new ones. Error message seen if clicking an app after re-opening workspace -...

7.2AI score
SaveExploits0
NVD
NVD
added 2019/08/14 9:15 p.m.23 views

CVE-2019-1147

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

9.3CVSS8.8AI score0.04321EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2019/08/06 12:00 a.m.10 views

August 6, 2019, update for Excel 2016 (KB4475550)

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2019/07/26 12:00 a.m.10 views

July 26, 2019—KB4505903 (OS Build 18362.267)

None None...

6.1AI score
SaveExploits0
OSV
OSV
added 2019/07/24 1:15 p.m.5 views

DEBIAN-CVE-2019-1010180

GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet...

7.8CVSS6.8AI score0.02628EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2019/07/08 12:00 a.m.26 views

Fedora 29 : filezilla / libfilezilla (2019-6e77507660)

Bugfixes, and a security fix: Fixed vulnerabilities : Filenames containing double-quotation marks were not escaped correctly when selected for opening/editing. Depending on the associated program, parts of the filename could be interpreted as commands. Note that Tenable Network Security has...

5.5AI score
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2019/06/18 12:00 a.m.13 views

June 18, 2019—KB4501371 (OS Build 17763.592)

None None...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:00 a.m.11 views

The vulnerability of the sub-component “Job Opening” in the PeopleSoft Enterprise HCM Talent Acquisition Manager component of the Oracle PeopleSoft products allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Job Opening sub-component of the PeopleSoft Enterprise HCM Talent Acquisition Manager component of the Oracle PeopleSoft products is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify...

8.2CVSS7.5AI score0.01238EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/04/23 7:32 p.m.10 views

CVE-2019-2590

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager component of Oracle PeopleSoft Products subcomponent: Job Opening. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7.3AI score0.01238EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/04/23 6:16 p.m.37 views

CVE-2019-2590

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager component of Oracle PeopleSoft Products subcomponent: Job Opening. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2AI score0.01238EPSS
SaveExploits0References1
OSV
OSV
added 2019/03/05 11:29 p.m.12 views

CVE-2019-0728

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'...

7.8CVSS7.7AI score0.27705EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2019/01/25 12:00 a.m.15 views

PT-2019-18293 · Foxit · Foxit Phantompdf

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. It requires user interaction, such as visiting a malicious page or opening a...

6.5CVSS6.3AI score0.0429EPSS
SaveExploits0References3
zdt
zdt
added 2019/01/14 12:00 a.m.59 views

Hootoo HT-05 - Remote Code Execution Exploit

require 'msf/core' require 'net/http' require "uri" class MetasploitModule 'Hootoo HT-05 remote shell exploit', 'Description' = %q This module tries to open a door in the device by exploiting the RemoteCodeExecution by creating a backdoor inside the device This exploit was written by Andrei Manol...

0.1AI score
SaveExploits0
CNVD
CNVD
added 2019/01/09 12:00 a.m.16 views

Microsoft Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-14461)

Microsoft Jet Database Engine is an underlying database engine. A remote code execution vulnerability exists in Microsoft Jet Database Engine, which arises from the failure of Jet Database Engine to properly handle objects in memory, and can be exploited to execute arbitrary code on a victim's...

9.3CVSS8.1AI score0.13596EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/12/12 12:00 a.m.19 views

Microsoft Excel Information Disclosure Vulnerability (CNVD-2019-02778)

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability by tricking a user into opening a specially crafted document to obtain sensitive information...

4.7CVSS6AI score0.06217EPSS
SaveExploits0References1
OSV
OSV
added 2018/12/01 8:29 p.m.10 views

CVE-2018-4040

An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A specially crafted document can cause certain RTF tokens to dereference a pointer that has been uninitialized and then write to it. An attacker must convince a...

7.8CVSS5.7AI score0.01006EPSS
SaveExploits1References1
Imperva Blog
Imperva Blog
added 2018/11/16 5:35 p.m.88 views

With The NASDAQ Bell Ceremony, We Kick Off The Next Leg of Imperva’s Incredible Journey

On Friday morning our CEO Chris Hylen and company execs rung the NASDAQ opening bell in New York, welcoming another day of trading for the world’s second-largest stock exchange; and taking full advantage of the opportunity to celebrate recent corporate milestones for Imperva. “I’m honored to be...

1.7AI score
SaveExploits0
Rows per page
Query Builder