Lucene search
+L

13142 matches found

FreeBSD
FreeBSD
added 2020/10/29 12:00 a.m.20 views

wordpress -- multiple issues

wordpress developers reports: Ten security issues affect WordPress versions 5.5.1 and earlier. If you havent yet updated to 5.5, all WordPress versions since 3.7 have also been updated to fix the following security issues: -Props to Alex Concha of the WordPress Security Team for their work in...

0.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/10/29 12:00 a.m.24 views

The vulnerability of the Microsoft .NET Framework software, related to errors in memory object handling, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Microsoft .NET Framework software platform is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.7CVSS5.5AI score0.03288EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2020/10/29 12:00 a.m.31 views

WordPress <= 5.5.1 - Bypass Protected Meta That Could Lead To Arbitrary File Deletion vulnerability

Bypass Protected Meta That Could Lead To Arbitrary File Deletion vulnerability found by Slavco Mihajloski mslavco in WordPress versions = 5.5.1. Solution Update the WordPress to the latest available version at least 5.5.2...

9.1CVSS3.9AI score0.04108EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/29 12:00 a.m.20 views

The vulnerability of the service for managing access to remote catalogs and authentication mechanisms, related to deficiencies in access control, allows attackers to disclose protected information and compromise its integrity.

The vulnerability of the service for managing access to remote catalogs and the authentication mechanism sssd is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information and compromise its integri...

5.5CVSS6.3AI score0.01102EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/10/29 12:00 a.m.19 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.8CVSS6.5AI score0.03842EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/29 12:00 a.m.24 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.8CVSS6.5AI score0.03842EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/29 12:00 a.m.16 views

The vulnerability of the Microsoft SharePoint Server software, related to errors in memory object handling, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Microsoft SharePoint Server software is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5CVSS5.7AI score0.04171EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/29 12:00 a.m.16 views

The vulnerability of Microsoft Exchange Server servers, related to errors in message processing, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Exchange Server is related to errors in message processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS6.9AI score0.0273EPSS
SaveExploits0References2
OSV
OSV
added 2020/10/27 8:15 p.m.8 views

CVE-2018-4433

A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, watchOS 5, iOS 12, tvOS 12, macOS Mojave 10.14. A malicious application may be able to modify protected parts of th...

5.5CVSS5.8AI score0.00747EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:00 a.m.17 views

The vulnerability of the set_file_metadata function in the GNU Wget download manager allows a hacker to gain access to protected information.

The vulnerability of the setfilemetadata function in the GNU Wget download manager is related to the lack of protection for metadata. Exploiting this vulnerability could allow an attacker to access protected information...

7.8CVSS6.6AI score0.00606EPSS
SaveExploits1References4Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:00 a.m.18 views

The vulnerability of the Tricon Communications Module, related to the lack of protection for operational data, allows attackers to disclose the protected information.

The vulnerability of the Tricon Communications Module is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

7.8CVSS7.2AI score0.01308EPSS
SaveExploits0References4Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:00 a.m.18 views

The vulnerability of Intel Thunderbolt controller interfaces, related to insufficient input data validation, allows attackers to gain unauthorized access to protected information.

The vulnerability of Intel Thunderbolt controller interfaces is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.8CVSS5.5AI score0.00338EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/10/27 12:00 a.m.8 views

Huawei Taurus-AN00B Elevation of Privilege Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A security vulnerability exists in Huawei Taurus-AN00B versions prior to 10.1.0.156, which stems from a lack of privilege restrictions on certain business functions of the product. An attacker can exploit the vulnerabili...

7.8CVSS7.2AI score0.00197EPSS
SaveExploits0References1
OSV
OSV
added 2020/10/22 6:15 p.m.6 views

CVE-2020-9771

This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A user may gain access to protected parts of the file system...

7.1CVSS5.8AI score0.0037EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/10/22 6:15 p.m.8 views

CVE-2020-9771

This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A user may gain access to protected parts of the file system...

7.1CVSS7AI score0.0037EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:00 a.m.16 views

The vulnerability of the Windows Setup application’s installation process allows a perpetrator to enhance their privileges and gain unauthorized access to protected information.

The vulnerability of the Windows Setup application’s installation process is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information...

7.8CVSS7.2AI score0.00955EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:00 a.m.19 views

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected...

6.8CVSS7AI score0.01005EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:00 a.m.10 views

The vulnerability of Intel processor BIOS microprogramming software, related to privilege management errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Intel processor BIOS microprogramming software is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5CVSS6.5AI score0.00326EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:00 a.m.14 views

The vulnerability of the do_bid_note function in the File type detection utility allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dobidnote function in the File type-detection utility readelf.c involves reading beyond the allocated buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

9.3CVSS6.8AI score0.02333EPSS
SaveExploits1References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:00 a.m.13 views

The vulnerability of the Adobe Photoshop graphic editor, related to reading data beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS7AI score0.02577EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder