Lucene search
K

2242 matches found

Tenable Nessus
Tenable Nessus
added 2020/08/10 12:0 a.m.74 views

FreeBSD : Apache httpd -- Multiple vulnerabilities (76700d2f-d959-11ea-b53c-d4c9ef517024)

The Apache httpd projec reports : - modhttp2: Important: Push Diary Crash on Specifically Crafted HTTP/2 Header CVE-2020-9490 A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. -...

9.8CVSS6.9AI score0.90485EPSS
Exploits4References6
OSV
OSV
added 2020/08/07 4:15 p.m.2 views

ALPINE-CVE-2020-9490

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability f...

7.5CVSS6.9AI score0.89744EPSS
Exploits0References1
OSV
OSV
added 2020/08/07 4:15 p.m.2 views

DEBIAN-CVE-2020-9490

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability f...

7.5CVSS7.8AI score0.89744EPSS
Exploits0References1
OSV
OSV
added 2020/08/07 4:15 p.m.0 views

UBUNTU-CVE-2020-9490

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability f...

7.5CVSS7.3AI score0.89744EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2020/08/07 12:0 a.m.8 views

PT-2020-5444 · Apache +6 · Apache Http Server +6

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.20 through 2.4.43 Description: The issue is related to the implementation of the HTTP/2 mechanism in the Apache HTTP Server, which is associated with inconsistent interpretation of HTTP requests. This can allow...

9.8CVSS6.2AI score0.90485EPSS
Exploits4References130
FreeBSD
FreeBSD
added 2020/08/07 12:0 a.m.107 views

Apache httpd -- Multiple vulnerabilities

The Apache httpd projec reports: modhttp2: Important: Push Diary Crash on Specifically Crafted HTTP/2 Header CVE-2020-9490 A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards...

9.8CVSS0.5AI score0.90485EPSS
Exploits4References2
BDU FSTEC
BDU FSTEC
added 2020/07/23 12:0 a.m.4 views

The vulnerability of the Windows Push Notification Service allows a perpetrator to escalate their privileges on Windows operating systems.

The vulnerability of the Windows Push Notification Service exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.2AI score0.00762EPSS
Exploits0References3
CNVD
CNVD
added 2020/07/20 12:0 a.m.2 views

Microsoft Windows Push Notification Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security vulnerability exists in the way memory objects are handled in the Microsoft...

7.8CVSS6.7AI score0.00762EPSS
Exploits0References1
OSV
OSV
added 2020/07/14 11:15 p.m.0 views

CVE-2020-1387

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'...

7.8CVSS7.2AI score0.00762EPSS
Exploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.10 views

CVE-2020-1387

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'...

7.8CVSS0.00762EPSS
Exploits0References1
Prion
Prion
added 2020/07/14 11:15 p.m.12 views

Privilege escalation

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'...

4.6CVSS7.8AI score0.00762EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2020/07/14 10:54 p.m.14 views

CVE-2020-1387

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'...

8.2AI score0.00762EPSS
Exploits0References1
CVE
CVE
added 2020/07/14 10:54 p.m.101 views

CVE-2020-1387

Technical details about CVE-2020-1387 (affected product, root cause, impact, or remediation) are not publicly provided in the supplied documents; monitor for updates.

7.8CVSS8.5AI score0.00762EPSS
Exploits0References1Affected Software3
Microsoft CVE
Microsoft CVE
added 2020/07/14 7:0 a.m.40 views

Windows Push Notification Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To...

7.8CVSS3.8AI score0.00762EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/06/29 12:0 a.m.28 views

Debian DLA-2260-1 : mcabber security update

It was discovered that there was a 'roster push attack' in mcabber, a console-based Jabber XMPP client. This is identical to CVE-2015-8688 for gajim. For Debian 8 'Jessie', this problem has been fixed in version 0.10.2-1+deb8u1. We recommend that you upgrade your mcabber packages. NOTE: Tenable...

7.4CVSS5.9AI score0.04512EPSS
Exploits2References3
OpenVAS
OpenVAS
added 2020/06/29 12:0 a.m.39 views

Debian: Security Advisory (DLA-2260-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8AI score
Exploits0References3
Debian
Debian
added 2020/06/28 3:2 p.m.40 views

[SECURITY] [DLA 2260-1] mcabber security update

Package : mcabber Version : 0.10.2-1+deb8u1 CVE ID : CVE-2016-9928 It was discovered that there was a "roster push attack" in mcabber, a console-based Jabber XMPP client. This is identical to CVE-2015-8688 for gajim. For Debian 8 "Jessie", this problem has been fixed in version 0.10.2-1+deb8u1. W...

7.4CVSS5.6AI score0.04512EPSS
Exploits2
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:0 a.m.4 views

The vulnerability of the Windows Push Notification Service allows a perpetrator to elevate their privileges and execute arbitrary code on Windows operating systems.

The vulnerability of the Windows Push Notification Service is related to errors in memory object handling on Windows operating systems. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS7.5AI score0.00821EPSS
Exploits0References2
Citrix
Citrix
added 2020/06/22 12:0 a.m.6 views

Secure Mail TLS Version 1.0 and 1.1 Deprecation

To improve the security of connections to Citrix Listener Service used for Secure Mail notifications, Citrix will block any communication over Transport Layer Security TLS 1.0 and 1.1 as of August 31st, 2020. Affected Component: Push Notifications for Secure Mail...

7.2AI score
Exploits0
Akamai Blog
Akamai Blog
added 2020/06/09 5:45 p.m.69 views

How to Verify Adaptive Acceleration Features are Working on Browser

As we know, Adaptive Acceleration's umbrella consists of the below features: 1. Automatic Push/Preconnect 2. Resource Optimizer 3. Automatic Font Preload 4. Script Management To read more about these features, please refer to Akamai Community. Now let's see how we can validate if these features a...

0.4AI score
Exploits0
Rows per page
Query Builder