Lucene search
+L

8373 matches found

The Hacker News
The Hacker News
added 2019/12/13 10:21 a.m.7 views

Flaw in Elementor and Beaver Addons Let Anyone Hack WordPress Sites

Attention WordPress users! Your website could easily get hacked if you are using "Ultimate Addons for Beaver Builder ," or "Ultimate Addons for Elementor " and haven't recently updated them to the latest available versions. Security researchers have discovered a critical yet easy-to-exploit...

5.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2019/12/13 10:21 a.m.83 views

Flaw in Elementor and Beaver Addons Let Anyone Hack WordPress Sites

Attention WordPress users! Your website could easily get hacked if you are using "Ultimate Addons for Beaver Builder," or "Ultimate Addons for Elementor" and haven't recently updated them to the latest available versions. Security researchers have discovered a critical yet easy-to-exploit...

1.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/12/12 12:00 a.m.48 views

RHEL 7 : OpenShift Container Platform 4.2 jenkins-2-plugins (RHSA-2019:4097)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:4097 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

9.9CVSS6.3AI score0.02698EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2019/12/11 8:38 a.m.56 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.2 jenkins-2-plugins security update

An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.9CVSS6.3AI score0.02698EPSS
SaveExploits0References3
NVD
NVD
added 2019/12/06 4:15 p.m.23 views

CVE-2019-19627

SROS 2 0.8.1 after CVE-2019-19625 is mitigated leaks ROS 2 node-related information regardless of the rtpsprotectionkind configuration. SROS2 provides the tools to generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2...

7.5CVSS5.5AI score0.02146EPSS
SaveExploits1References5
OSV
OSV
added 2019/12/06 4:15 p.m.16 views

CVE-2019-19627

SROS 2 0.8.1 after CVE-2019-19625 is mitigated leaks ROS 2 node-related information regardless of the rtpsprotectionkind configuration. SROS2 provides the tools to generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2...

5.3CVSS5.3AI score
SaveExploits0References5
Prion
Prion
added 2019/12/06 4:15 p.m.17 views

Default configuration

SROS 2 0.8.1 which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2 leaks node information due to a leaky default configuration as indicated in the policy/defaults/dds/governance.xml document...

5CVSS5.1AI score0.01502EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/12/06 3:09 p.m.42 views

CVE-2019-19625

SROS 2 0.8.1 which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2 leaks node information due to a leaky default configuration as indicated in the policy/defaults/dds/governance.xml document...

7.5CVSS5.5AI score0.01502EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/12/06 2:15 p.m.46 views

Updated ansible packages fix security vulnerability

Updated ansible package fixes security vulnerability: Splunk and Sumologic callback plugins leak sensitive data in logs CVE-2019-14864...

6.5CVSS3AI score0.01873EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2019/12/04 12:00 a.m.43 views

EulerOS 2.0 SP2 : wireshark (EulerOS-SA-2019-2425)

According to the versions of the wireshark packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Wireshark is a network traffic analyzer for Unix-ish operating systems.This package lays base for libpcap, a packet capture and filtering...

7.8CVSS7.1AI score0.14207EPSS
SaveExploits14References44
Tenable Nessus
Tenable Nessus
added 2019/11/22 12:00 a.m.43 views

RHEL 7 : ansible (RHSA-2019:3925)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:3925 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

6.5CVSS7.2AI score0.01873EPSS
SaveExploits1References5
Symantec
Symantec
added 2019/11/21 12:00 a.m.17 views

Multiple Jenkins Plugins Multiple Security Vulnerabilities

...

1.8AI score
SaveExploits0Affected Software6
OSV
OSV
added 2019/11/20 3:15 p.m.10 views

DEBIAN-CVE-2011-1028

The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smartyinternalcompileprivatespecialvariable.php file...

9.8CVSS9.1AI score0.01613EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2019/11/20 2:53 p.m.23 views

Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs

A data disclosure flaw was found in Ansible when using the Splunk and Sumologic modules, as they are not respecting when the flag nolog is enabled. This flaw can disclose and collect sensitive data from the system and expose it to an attacker...

6.5CVSS7.1AI score0.01873EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2019/11/20 2:51 p.m.79 views

Moderate: Red Hat Security Advisory: ansible security update

An update for Ansible is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

6.5CVSS7AI score0.01873EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2019/11/20 2:51 p.m.10 views

Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs

A data disclosure flaw was found in Ansible when using the Splunk and Sumologic modules, as they are not respecting when the flag nolog is enabled. This flaw can disclose and collect sensitive data from the system and expose it to an attacker...

6.5CVSS7.1AI score0.01873EPSS
SaveExploits1References4
CNVD
CNVD
added 2019/11/20 12:00 a.m.13 views

WordPress download-plugins-dashboard plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress download-plugins-dashboard plugin. The...

6.1CVSS6.3AI score0.00924EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2019/11/19 4:51 p.m.275 views

Exploit for CVE-2018-2894

Ladon Scanner for Python !Authorhttps://img.shields.io/bad...

10CVSS7.2AI score0.9981EPSS
SaveExploits132
Fedora
Fedora
added 2019/11/19 1:50 a.m.47 views

[SECURITY] Fedora 29 Update: limnoria-20191109-2.fc29

Supybot is a robust it doesn't crash, user friendly it's easy to configure and programmer friendly plugins are extremely easy to write Python IRC bot. It aims to be an adequate replacement for most existing IRC bots. It includes a very flexible and powerful ACL system for controlling access to...

9.8CVSS1.2AI score0.02327EPSS
SaveExploits0
NVD
NVD
added 2019/11/05 9:15 p.m.19 views

CVE-2011-1133

Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php...

6.1CVSS6.2AI score0.01773EPSS
SaveExploits0References4
Rows per page
Query Builder