Lucene search
+L

3191 matches found

OSV
OSV
added 2020/03/24 2:52 p.m.9 views

SUSE-SU-2020:0762-1 Security Beta update for Salt

This update fixes the following issues: salt: - Requiring python3-distro only for openSUSE/SLE = 15 - Use full option name instead of undocumented abbreviation for zypper - Python-distro is only needed for Python 3.7. Removing it for Python 2 - Fixed a local privilege escalation to root bsc115746...

8.4CVSS9.3AI score0.00386EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2020/03/17 1:15 p.m.2 views

CVE-2020-6646

An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the Disclaimer Description of a Replacement Message...

5.4CVSS5.2AI score0.00803EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2020/03/11 12:0 a.m.136 views

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: March 10, 2020

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: March 10, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stac...

6.6AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/03/11 12:0 a.m.68 views

Servicing stack update for Windows Server 2012: March 10, 2020

Servicing stack update for Windows Server 2012: March 10, 2020 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stack so that your devic...

6.6AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/03/10 7:0 a.m.129 views

Description of the security update for Office Online Server: March 10, 2020

None None...

9.3CVSS7.1AI score0.11964EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/03/10 7:0 a.m.44 views

Description of the security update for SharePoint Server 2010 Office Web Apps: March 10, 2020

Description of the security update for SharePoint Server 2010 Office Web Apps: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability...

9.3CVSS7.9AI score0.11829EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/03/10 7:0 a.m.239 views

Description of the security update for SharePoint Enterprise Server 2013: March 10, 2020

None None...

5.4CVSS6.2AI score0.01299EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/03/10 7:0 a.m.66 views

Description of the security update for Office 2010: March 10, 2020

Description of the security update for Office 2010: March 10, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the program does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...

9.3CVSS8.6AI score0.11829EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/03/10 12:0 a.m.1150 views

Servicing stack update for Windows 10, version 1803: March 10, 2020

None None...

5.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/03/10 12:0 a.m.65 views

Servicing stack update for Windows 10, version 1903 and 1909: March 10, 2020

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/03/10 12:0 a.m.111 views

Servicing stack update for Windows 10, version 1607: March 10, 2020

None None...

6.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/03/04 4:16 p.m.56 views

Loyalty Cards Targeted in Tesco Clubcard Attack

U.K. supermarket giant Tesco is warning on a credential-stuffing attack that potentially affects 600,000 members of its Clubcard loyalty program. It said that it detected cybercriminals trying out different name and password combos, gleaned from a database of stolen usernames and passwords for...

0.1AI score
SaveExploits0References13
Packet Storm
Packet Storm
added 2020/03/02 12:0 a.m.133 views

Intelbras Wireless N 150Mbps WRN240 Authentication Bypass

Exploit Title: Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass Config Upload Date: 2019-11-20 Exploit Author: Elber Tavares Vendor Homepage: https://www.intelbras.com/ Software Link: http://en.intelbras.com.br/node/1033 Version: Intelbras Wireless N 150Mbps - WRN240 Tested on: linux,...

5CVSS0.4AI score0.0781EPSS
SaveExploits5
Microsoft KB
Microsoft KB
added 2020/02/11 8:0 a.m.73 views

Description of the security update for Microsoft Exchange Server 2019 and 2016: February 11, 2020

None None...

9CVSS7.1AI score0.99965EPSS
SaveExploits29
Microsoft KB
Microsoft KB
added 2020/02/11 12:0 a.m.90 views

Servicing stack update for Windows 10, version 1903 and 1909: February 11, 2020

None None...

6.1AI score
SaveExploits0
OSV
OSV
added 2020/02/06 12:0 p.m.11 views

RUSTSEC-2020-0162 `tokio-proto` is deprecated/unmaintained

The tokio-proto crate has been deprecated, and its GitHub repository has been archived. Users may be interested in tokio-tower instead, per https://github.com/tokio-rs/tokio/issues/118issuecomment-452969665...

7.1AI score
SaveExploits0References3
Oracle linux
Oracle linux
added 2020/02/05 12:0 a.m.49 views

ipa security and bug fix update

4.6.5-11.0.1 - Blank out header-logo.png product-name.png - Replace login-screen-logo.png Orabug: 20362818 4.6.5-11.el77.4 - Resolves: 1781153 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents - Resolves: 1777303 - CVE-2019-10195...

8.8CVSS0.6AI score0.07353EPSS
SaveExploits0
Kitploit
Kitploit
added 2020/01/31 11:30 a.m.150 views

MassDNS - A High-Performance DNS Stub Resolver For Bulk Lookups And Reconnaissance (Subdomain Enumeration)

MassDNS is a simple high-performance DNS stub resolver targetting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per second using publicly available resolvers...

7.5AI score
SaveExploits0References6
OSV
OSV
added 2020/01/27 7:15 p.m.7 views

CVE-2019-19143

TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI...

6.1CVSS6.6AI score0.03788EPSS
SaveExploits5References2
Cvelist
Cvelist
added 2020/01/27 6:17 p.m.35 views

CVE-2019-19143

TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI...

6.3AI score0.03788EPSS
SaveExploits5References2
Rows per page
Query Builder