Lucene search
K

2272 matches found

OSV
OSV
added 2020/05/26 6:15 p.m.0 views

UBUNTU-CVE-2020-12389

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. Note: this issue only affects Firefox on Windows operating systems.. This vulnerability affects Firefox ESR 68.8 and Firefox 76...

10CVSS7.3AI score0.01728EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2020/05/26 5:4 p.m.43 views

CVE-2020-12388

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. Note: this issue only affects Firefox on Windows operating systems.. This vulnerability affects Firefox ESR 68.8 and Firefox 76...

10CVSS9.1AI score0.02714EPSS
Exploits0
ICS
ICS
added 2020/05/21 12:0 p.m.149 views

Detecting Citrix CVE-2019-19781

Summary Unknown cyber network exploitation CNE actors have successfully compromised numerous organizations that employed vulnerable Citrix devices through a critical vulnerability known as CVE-2019-19781.1 Though mitigations were released on the same day Citrix announced CVE-2019-19781,...

9.8CVSS10AI score0.99999EPSS
Exploits48References46
Apple
Apple
added 2020/05/20 12:0 a.m.41 views

About the security content of tvOS 13.4.5

About the security content of tvOS 13.4.5 This document describes the security content of tvOS 13.4.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS9.8AI score0.77246EPSS
Exploits10References1Affected Software1
Kitploit
Kitploit
added 2020/05/09 10:0 p.m.173 views

GDBFrontend - An Easy, Flexible And Extensionable GUI Debugger

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Deb Package Debian / Ubuntu / KDE Neon You can install GDBFrontend via deb package for Debian-based distributions. You can install it from following commands: echo "deb trusted=yes https://oguzhaneroglu.com/deb/ ./" | sud...

7.4AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2020/05/06 1:39 a.m.33 views

CVE-2020-12389

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. Note: this issue only affects Firefox on Windows operating systems.. This vulnerability affects Firefox ESR 68.8 and Firefox 76...

7.5CVSS3AI score0.01728EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2020/05/06 1:39 a.m.39 views

CVE-2020-12388

The Mozilla Foundation Security Advisory describes this flaw as: The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape...

7.5CVSS2.8AI score0.02714EPSS
Exploits0References4
NVD
NVD
added 2020/04/30 9:15 p.m.12 views

CVE-2020-5881

On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition VE is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer NDAL Interfaces can lock up and in turn disrupting the communicatio...

7.5CVSS7.5AI score0.01276EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/04/30 8:39 p.m.16 views

CVE-2020-5881

On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition VE is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer NDAL Interfaces can lock up and in turn disrupting the communicatio...

7.5AI score0.01276EPSS
Exploits0References1
NVD
NVD
added 2020/04/29 2:15 a.m.20 views

CVE-2020-8484

Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

7.8CVSS7.5AI score0.00326EPSS
Exploits0References1
Prion
Prion
added 2020/04/29 2:15 a.m.23 views

Design/Logic Flaw

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

4.6CVSS7.4AI score0.00326EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/04/29 1:58 a.m.26 views

CVE-2020-8484 ABB System 800xA Inter process communication vulnerability - 800xA for DCI

Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

7.8CVSS7.5AI score0.00326EPSS
Exploits0References1
CVE
CVE
added 2020/04/29 1:58 a.m.98 views

CVE-2020-8484

ABB System 800xA for DCI contains an inter-process communication protection weakness that allows an authenticated local attacker to inject data, enabling reads/writes to controllers or causing Windows processes to crash. Affected products include System 800xA for DCI (all published versions). CVS...

7.8CVSS7.5AI score0.00326EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2020/04/27 3:15 p.m.4 views

CVE-2020-12266

An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage. The devices automatically query these pages to update dashboards and other statistics, but the pages can be accessed...

7.5CVSS7.1AI score0.01722EPSS
Exploits0References5
NVD
NVD
added 2020/04/27 1:15 p.m.24 views

CVE-2020-10996

An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transitionkey for SST processes in place of the random key expected...

8.1CVSS8.1AI score0.01502EPSS
Exploits0References3
OSV
OSV
added 2020/04/27 1:15 p.m.36 views

CVE-2020-10996

An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transitionkey for SST processes in place of the random key expected...

8.1CVSS7.2AI score0.01502EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2020/04/27 1:15 p.m.29 views

CVE-2020-10996

An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transitionkey for SST processes in place of the random key expected...

8.1CVSS7.2AI score0.01502EPSS
Exploits0References5
OSV
OSV
added 2020/04/27 1:15 p.m.2 views

UBUNTU-CVE-2020-10996

An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transitionkey for SST processes in place of the random key expected...

8.1CVSS5.8AI score0.01502EPSS
Exploits0References5
CVE
CVE
added 2020/04/27 12:45 p.m.50 views

CVE-2020-10996

CVE-2020-10996 affects Percona XtraDB Cluster prior to 5.7.28-31.41.2. A bundled script sets a static transition_key for SST processes instead of the random key, indicating a potential security weakness in SST key handling. The documented remediation is to upgrade to Percona XtraDB Cluster 5.7.28...

8.1CVSS8.4AI score0.01502EPSS
Exploits0References3Affected Software1
The Hacker News
The Hacker News
added 2020/04/24 10:38 a.m.76 views

Malicious USB Drives Infect 35,000 Computers With Crypto-Mining Botnet

Cybersecurity researchers from ESET on Thursday said they took down a portion of a malware botnet comprising at least 35,000 compromised Windows systems that attackers were secretly using to mine Monero cryptocurrency. The botnet, named "VictoryGate," has been active since May 2019, with infectio...

2.1AI score
Exploits0
Rows per page
Query Builder