Lucene search
+L

1399 matches found

zdt
zdt
added 2017/08/14 12:00 a.m.132 views

Apache Subversion Arbitrary Code Execution Vulnerability

Apache Subversion has released version 1.9.7 which addresses an arbitrary code execution vulnerability. I'm happy to announce the release of Apache Subversion 1.9.7. Please choose the mirror closest to you by visiting: http://subversion.apache.org/download.cgi?update=201708081800recommended-relea...

7.5CVSS9.9AI score0.18892EPSS
SaveExploits3
RedHat Linux
RedHat Linux
added 2017/08/01 8:39 a.m.11 views

gnutls: Heap read overflow in read-packet.c

Multiple heap-based buffer overflows in the readattribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate...

9.8CVSS7.6AI score0.06179EPSS
SaveExploits0References4
Prion
Prion
added 2017/07/25 6:29 p.m.19 views

Authentication flaw

s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message...

5CVSS7.5AI score0.03909EPSS
SaveExploits0References3Affected Software1
Apple
Apple
added 2017/07/19 5:37 a.m.60 views

About the security content of iCloud for Windows 6.2.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

9.3CVSS0.7AI score0.095EPSS
SaveExploits62Affected Software1
NVD
NVD
added 2017/07/17 1:18 p.m.23 views

CVE-2017-11353

yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...

5.9CVSS5.8AI score0.00777EPSS
SaveExploits0References2
OSV
OSV
added 2017/07/17 1:18 p.m.22 views

CVE-2017-11353

yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...

5.9CVSS7AI score
SaveExploits0References2
Prion
Prion
added 2017/07/17 1:18 p.m.25 views

Race condition

yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...

4.3CVSS5.8AI score0.00777EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2017/07/17 1:18 p.m.41 views

CVE-2017-11353

yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...

5.9CVSS6.2AI score0.00777EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2017/07/17 1:00 a.m.32 views

CVE-2017-11353

yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...

5.8AI score0.00777EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2017/07/17 1:00 a.m.42 views

CVE-2017-11353

yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...

5.9CVSS3.4AI score0.00777EPSS
SaveExploits0
CVE
CVE
added 2017/07/17 1:00 a.m.72 views

CVE-2017-11353

CVE-2017-11353 affects yadm (yet another dotfile manager) version 1.10.0. The issue is a race condition related to how git commands set permissions for new files and directories, which potentially allows access to SSH and PGP keys. The connected documents provide this description but do not inclu...

5.9CVSS5.8AI score0.00777EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
added 2017/07/08 10:22 p.m.20 views

[SECURITY] Fedora 25 Update: pius-2.2.4-1.fc25

The PGP Individual UID Signer PIUS is a tool for individually signing all of the UIDs on a set of keys and encrypt-emailing each one to it's respective email address. This drastically reduces the time and errors involved in signing keys after a key signing party...

3.2AI score
SaveExploits0
Fedora
Fedora
added 2017/07/08 9:20 p.m.19 views

[SECURITY] Fedora 24 Update: pius-2.2.4-1.fc24

The PGP Individual UID Signer PIUS is a tool for individually signing all of the UIDs on a set of keys and encrypt-emailing each one to it's respective email address. This drastically reduces the time and errors involved in signing keys after a key signing party...

3.2AI score
SaveExploits0
Fedora
Fedora
added 2017/07/07 11:21 p.m.13 views

[SECURITY] Fedora 26 Update: pius-2.2.4-1.fc26

The PGP Individual UID Signer PIUS is a tool for individually signing all of the UIDs on a set of keys and encrypt-emailing each one to it's respective email address. This drastically reduces the time and errors involved in signing keys after a key signing party...

3.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2017/06/23 12:00 a.m.12 views

The vulnerability of the read_attribute function in the GnuTLS library, related to the occurrence of operations outside the buffer boundaries in memory, allows attackers to compromise the integrity and accessibility of data.

The vulnerability of the readattribute function in the GnuTLS library is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to compromise the integrity and accessibility of data through a specially created OpenPGP certificate...

9.8CVSS7.8AI score0.06179EPSS
SaveExploits0References15Affected Software3
Apple
Apple
added 2017/05/15 12:00 a.m.47 views

About the security content of iTunes 12.6.1 for Windows

About the security content of iTunes 12.6.1 for Windows This document describes the security content of iTunes 12.6.1 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patche...

8.8CVSS9AI score0.07655EPSS
SaveExploits3References1Affected Software1
The Hacker News
The Hacker News
added 2017/05/10 10:16 p.m.15 views

Dutch Police Seize Another Company that Sells PGP-Encrypted Blackberry Phones

The Dutch police arrested four suspects on Tuesday on suspicion of money laundering and involvement in selling custom encrypted BlackBerry and Android smartphones to criminals. The Dutch National High Tech Crime Unit NHTCU, dedicated team within the Dutch National Police Agency aims to investigat...

6.6AI score
SaveExploits0
Prion
Prion
added 2017/05/03 8:59 p.m.25 views

Information disclosure

PGP/MIME encrypted messages injected into a Vaultive O365 before 4.5.21 frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol="application/pgp-encrypted"; boundary="abc123abc123"' to 'Content-Type: text/plain' - this results in the encrypted...

6.4CVSS9AI score0.0076EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2017/05/03 8:59 p.m.24 views

CVE-2017-7229

PGP/MIME encrypted messages injected into a Vaultive O365 before 4.5.21 frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol="application/pgp-encrypted"; boundary="abc123abc123"' to 'Content-Type: text/plain' - this results in the encrypted...

9.1CVSS9.2AI score0.0076EPSS
SaveExploits0References1
OSV
OSV
added 2017/05/03 8:59 p.m.7 views

CVE-2017-7229

PGP/MIME encrypted messages injected into a Vaultive O365 before 4.5.21 frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol="application/pgp-encrypted"; boundary="abc123abc123"' to 'Content-Type: text/plain' - this results in the encrypted...

9.1CVSS5.8AI score0.0076EPSS
SaveExploits0References1
Rows per page
Query Builder