Lucene search
K

2271 matches found

Imperva Blog
Imperva Blog
added 2017/10/23 4:1 p.m.22 views

Monitor More, Worry Less. Outpace Threats With Machine Learning.

In the past two years, enterprises have created more data than has been created in the entire history of humankind. At scale, securing this amount of data requires a re-think of how we grant and revoke access to sensitive files and, more importantly, how we identify and track the inevitable acces...

7.2AI score
Exploits0
OSV
OSV
added 2017/10/11 5:29 p.m.1 views

DEBIAN-CVE-2017-13720

In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash denial of service. This occurs because '\0'...

7.1CVSS7AI score0.00063EPSS
Exploits0References1
OSV
OSV
added 2017/10/11 5:29 p.m.20 views

CVE-2017-13720

In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash denial of service. This occurs because '\0'...

7.1CVSS6.8AI score
Exploits0References6
Debian CVE
Debian CVE
added 2017/10/11 5:0 p.m.16 views

CVE-2017-13720

In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash denial of service. This occurs because '\0'...

7.1CVSS7AI score0.00063EPSS
Exploits0
OSV
OSV
added 2017/10/10 1:2 p.m.2 views

USN-3442-1 libxfont, libxfont1, libxfont2 vulnerabilities

It was discovered that libXfont incorrectly handled certain patterns in PatternMatch. A local attacker could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly obtain sensitive information. CVE-2017-13720 It was discovered that libXfont incorrectly handled...

7.1CVSS6.6AI score0.00067EPSS
Exploits0References3
OSV
OSV
added 2017/10/05 12:0 a.m.0 views

UBUNTU-CVE-2017-13720

In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash denial of service. This occurs because '\0'...

7.1CVSS6.8AI score0.00063EPSS
Exploits0References3
exploitpack
exploitpack
added 2017/09/21 12:0 a.m.7 views

Microsoft Edge - Chakra Incorrectly Parses Object Patterns

Microsoft Edge - Chakra Incorrectly Parses Object Patterns function f a: b = 0x1111, c = 0x2222, .c = 0x3333 = ; f;...

0.6AI score
Exploits0
Fedora
Fedora
added 2017/09/19 3:27 a.m.35 views

[SECURITY] Fedora 26 Update: kxstitch-1.2.0-9.fc26

KXStitch can be used to create cross stitch patterns from scratch. It is al so possible to convert existing images to a cross stitch pattern or scan one w ith a Sane supported scanner...

9.8CVSS1.2AI score0.2299EPSS
Exploits14
Imperva Blog
Imperva Blog
added 2017/07/31 3:30 p.m.40 views

Clustering and Dimensionality Reduction: Understanding the “Magic” Behind Machine Learning

These days we hear about machine learning and artificial intelligence AI in all aspects of life. We see machines that learn and imitate the human brain in order to automate human processes. There are autonomous cars that learn the road conditions to drive, personal assistants we can converse with...

6.5AI score
Exploits0
seebug.org
seebug.org
added 2017/07/07 12:0 a.m.31 views

Apache Struts 2 remote command execution vulnerability(S2-048)

Vulnerability overview Struts is a Apache Software Foundation ASF sponsored an open source project. By using JavaServlet/JSP technology, is implemented based on the Java EEWeb application of the MVC design pattern application framework, MVC is a classic design pattern in a classic product. But in...

7.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/07/04 11:28 a.m.10 views

imperialfastener.com XSS vulnerability

Vulnerable URL: http://www.imperialfastener.com/curtainpatterndetail.php?pattern=1"...

6.9AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/05/30 12:0 a.m.24 views

Debian DSA-3865-1 : mosquitto - security update

It was discovered that pattern-based ACLs in the Mosquitto MQTT broker could be bypassed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3865. The text itself is copyright C Software in t...

6.5CVSS6.8AI score0.03992EPSS
Exploits2References3
OSV
OSV
added 2017/05/25 5:29 p.m.17 views

CVE-2016-5007

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space...

7.5CVSS6.6AI score0.00155EPSS
Exploits0References4
OSV
OSV
added 2017/05/25 5:29 p.m.2 views

DEBIAN-CVE-2016-5007

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space...

7.5CVSS7.6AI score0.00155EPSS
Exploits0References1
OSV
OSV
added 2017/05/25 5:29 p.m.0 views

UBUNTU-CVE-2016-5007

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space...

7.5CVSS7.1AI score0.00155EPSS
Exploits0References3
NVD
NVD
added 2017/05/25 5:29 p.m.17 views

CVE-2016-5007

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space...

7.5CVSS7.6AI score0.00155EPSS
Exploits0References4
Prion
Prion
added 2017/05/25 5:29 p.m.21 views

Authorization

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space...

5CVSS6.9AI score0.00155EPSS
Exploits0References4Affected Software2
CVE
CVE
added 2017/05/25 5:0 p.m.140 views

CVE-2016-5007

CVE-2016-5007 affects Spring Security (3.2.x, 4.0.x, 4.1.0) and Spring Framework (3.2.x, 4.0.x, 4.1.x, 4.2.x). The root cause is differences in URL pattern matching/space trimming that can cause some paths to be treated as protected when they should not be, due to varying pattern matching between...

7.5CVSS7.4AI score0.00155EPSS
Exploits0References4Affected Software3
Cvelist
Cvelist
added 2017/05/25 5:0 p.m.24 views

CVE-2016-5007

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space...

7.6AI score0.00155EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2017/05/25 5:0 p.m.38 views

CVE-2016-5007

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space...

7.5CVSS7.6AI score0.00155EPSS
Exploits0
Rows per page
Query Builder