Lucene search
+L

554 matches found

CNNVD
CNNVD
added 2020/12/21 12:00 a.m.13 views

Tenable Network Security Tenable.Sc Security Vulnerability

Tenable Network Security Tenable.Sc is a vulnerability analysis solution from Tenable Network Security, USA. The product supports real-time vulnerability assessment and management, among other things. A security vulnerability exists in versions of Tenable.sc prior to 5.17.0, which stems from the...

7.5CVSS7.1AI score0.01111EPSS
SaveExploits0References2
NVD
NVD
added 2020/11/17 2:15 a.m.56 views

CVE-2020-25705

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Bas...

7.4CVSS7.4AI score0.06692EPSS
SaveExploits1References1
Prion
Prion
added 2020/11/17 2:15 a.m.46 views

Design/Logic Flaw

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Bas...

5.8CVSS7AI score0.06692EPSS
SaveExploits1References1Affected Software2
UbuntuCve
UbuntuCve
added 2020/11/17 2:15 a.m.89 views

CVE-2020-25705

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Bas...

7.4CVSS7AI score0.06692EPSS
SaveExploits1References7
CVE
CVE
added 2020/11/17 1:16 a.m.632 views

CVE-2020-25705

CVE-2020-25705 is a Linux kernel ICMP handling flaw that lets an off-path attacker bypass UDP source port randomization and rapidly scan open UDP ports. Affected products include various kernel versions and embedded/Linux-based devices; remediation is via kernel updates (e.g., CentOS/AlmaLinux ad...

7.4CVSS7.3AI score0.06692EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/11/17 1:16 a.m.70 views

CVE-2020-25705

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Bas...

7.5AI score0.06692EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
added 2020/10/12 8:17 a.m.10 views

openupload.joinville.sc.gov.br Cross Site Scripting vulnerability OBB-1400159

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/12 12:45 a.m.12 views

sc-yachting.com Cross Site Scripting vulnerability OBB-1327656

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/09/12 12:38 a.m.11 views

sc-cctv.com.tw Cross Site Scripting vulnerability OBB-1327597

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Veracode
Veracode
added 2020/09/02 2:41 a.m.17 views

Malicious Package

react-dates-sc is a malicious package. The library contains code that when executed in the browser, would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

1.6AI score
SaveExploits0
OSV
OSV
added 2020/09/01 8:32 p.m.15 views

GHSA-5645-GC7H-98H8 Malicious Package in react-dates-sc

Version 0.3.0 of react-dates-sc contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.0 of this module is found installed you...

7.1AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/01 8:32 p.m.39 views

Malicious Package in react-dates-sc

Version 0.3.0 of react-dates-sc contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.0 of this module is found installed you...

6.9AI score
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
added 2020/07/31 8:04 a.m.10 views

sc.12348.gov.cn Cross Site Scripting vulnerability OBB-1244010

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/05/27 7:38 p.m.8 views

atendimento.sebrae-sc.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1174350 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/05/25 4:31 p.m.9 views

sc-project.in Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1171593 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

SaveExploits0
Openbugbounty
Openbugbounty
added 2020/05/18 12:25 p.m.16 views

sc-sandhausen.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1164744 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

0.6AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/05/16 9:00 p.m.9 views

sc-sandhausen.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1162983 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

6.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2020/05/12 3:31 p.m.84 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7CVSS6.5AI score0.03083EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2020/05/12 12:00 a.m.59 views

RHEL 8 : kernel (RHSA-2020:2102)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2102 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Kernel: NetLabel: null pointer...

7CVSS6.5AI score0.03083EPSS
SaveExploits1References8
OSV
OSV
added 2020/04/29 4:15 a.m.14 views

UBUNTU-CVE-2019-20792

OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check...

6.8CVSS6.9AI score0.007EPSS
SaveExploits1References5
Rows per page
Query Builder