Lucene search
+L

10664 matches found

Citrix
Citrix
added 2020/11/20 12:00 a.m.13 views

Hotfix XS80E005 - For Citrix Hypervisor 8.0

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.0. All customers who are affected by the issues described inCTX263477 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Ensure that you also installCTX258428 - Hotfix XS80E006 - For...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/11/20 12:00 a.m.19 views

Schneider Electric EcoStruxure Building Operation WebReports Improper Access Control Vulnerability

EcoStruxure Building Operation WebReports is a web application for creating, viewing and managing reports. An improper access control vulnerability exists in EcoStruxure Building Operation WebReports 1.9 - 3.1. A remote attacker could exploit this vulnerability to access restricted web resources...

6.5CVSS6.8AI score0.01373EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/11/20 12:00 a.m.13 views

GaussDB Kernel: Resource Labels

You can add a resource label to a group of database resources to control them, improving resource management efficiency. Therefore, you are advised to enable enablesecuritypolicy. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

7.2AI score
SaveExploits0
OSV
OSV
added 2020/11/19 10:15 p.m.7 views

CVE-2020-7573

A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker being able to access a restricted web resources due to improper access control...

6.5CVSS6.7AI score0.01373EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/11/19 9:02 p.m.36 views

CVE-2020-7573

A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker being able to access a restricted web resources due to improper access control...

6.4AI score0.01373EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:00 a.m.10 views

The vulnerability in the driver/xen/events/events_base.c component of Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the drivers/xen/events/eventsbase.c component in Linux operating systems arises from the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS6.6AI score0.00269EPSS
SaveExploits0References32Affected Software4
CNNVD
CNNVD
added 2020/11/19 12:00 a.m.14 views

Schneider Electric EcoStruxure Building Operation WebReports 安全漏洞

EcoStruxure Building Operation WebReports is a web application for creating, viewing and managing reports. An improper access control vulnerability exists in EcoStruxure Building Operation WebReports 1.9 - 3.1. A remote attacker could exploit this vulnerability to access restricted web resources...

6.5CVSS6.7AI score0.01373EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2020/11/18 8:30 p.m.173 views

Teler - Real-time HTTP Intrusion Detection

teler is an real-time intrusion detection and threat alert based on web log that runs in a terminal with resources that we collect and provide by the community. Features Real-time : Analyze logs and identify suspicious activity in real-time. Alerting : teler provides alerting when a threat is...

7.2AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2020/11/18 12:00 a.m.88 views

RHEL 8 : libreoffice (RHSA-2020:1598)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1598 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor...

9.8CVSS7.8AI score0.78347EPSS
SaveExploits6References17
ThreatPost
ThreatPost
added 2020/11/17 9:34 p.m.39 views

Defining Security Policies to Manage Remote Insider Threats

Even as state and local governments begin to relax COVID-19-related stay-at-home orders, many businesses have adapted to having more people work from home. This trend is likely to continue: Among the top 20 percent of earners, the number of people that work from home is close to 70 percent,...

7.2AI score
SaveExploits0References2
Citrix
Citrix
added 2020/11/16 12:00 a.m.12 views

How to Configure User SID Enumeration in the XML Service

This article contains information about configuring the Citrix XML Service to perform enumeration of Security Identifiers SIDs for user accounts when using Single Sign-on SSO or smart card authentication to Web Interface 5.0. Background When using SSO or smart card authentication, access for user...

6.7AI score
SaveExploits0
CNNVD
CNNVD
added 2020/11/16 12:00 a.m.11 views

Oracle GraalVM Resource Management Error Vulnerability

Oracle GraalVM is the United States Oracle Oracle company's set of instant compilers written in the Java language. The product supports multiple programming languages and execution modes. A resource management error vulnerability exists in Oracle GraalVM Enterprise Edition of Oracle GraalVM, whic...

7.5CVSS7AI score0.54164EPSS
SaveExploits0References54
CNNVD
CNNVD
added 2020/11/16 12:00 a.m.12 views

JetBrains YouTrack 信息泄露漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. An access control error vulnerability exists in JetBrains YouTrack versions prior to...

7.5CVSS7.1AI score0.02391EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/11/13 9:20 p.m.73 views

Updated microcode package fixes security vulnerabilities

Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2020-8694 Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to...

5.5CVSS5.7AI score0.00516EPSS
SaveExploits0References5
Gitee
Gitee
added 2020/11/13 1:35 p.m.6 views

CTF-All-In-One

This repository is an offensive tool for CTF Capture The Flag competitions, specifically targeting Linux binary security. The repository contains a collection of tools and resources for learning and practicing binary exploitation, reverse engineering, and other related skills. The repository...

6.8AI score
SaveExploits0
OSV
OSV
added 2020/11/12 6:15 p.m.3 views

ALPINE-CVE-2020-8698

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.9AI score0.00516EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/12 6:15 p.m.6 views

DEBIAN-CVE-2020-8698

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS6.1AI score0.00516EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/11/12 6:15 p.m.6 views

CVE-2020-8698

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS6.1AI score0.00516EPSS
SaveExploits0References7
Prion
Prion
added 2020/11/12 6:15 p.m.30 views

Design/Logic Flaw

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

2.1CVSS5.2AI score0.00516EPSS
SaveExploits0References5Affected Software11
AlpineLinux
AlpineLinux
added 2020/11/12 6:01 p.m.58 views

CVE-2020-8698

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS6AI score0.00516EPSS
SaveExploits0
Rows per page
Query Builder