Lucene search
+L

13391 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2021/02/20 1:16 a.m.17 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Application Center

Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 8 used by IBM Spectrum LSF Application Center. IBM Spectrum LSF Application Center has addressed the applicable CVEs. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

0.5AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/20 1:15 a.m.16 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Explorer

Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 8 used by IBM Spectrum LSF Explorer. IBM Spectrum LSF Explorer has addressed the applicable CVEs. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

0.2AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/20 1:14 a.m.6 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Process Manager

Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 8 used by IBM Spectrum LSF Process Manager. IBM Spectrum LSF Process Manager has addressed the applicable CVEs. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected...

0.8AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/19 2:37 p.m.59 views

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - October 2020

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, and 8 that are used by Maximo Asset Management, Maximo Asset Management Essentials, Maximo Asset Management for Energy Optimization, Maximo Asset Management Essentials, Maximo Industry Solutions including...

5.8CVSS2.1AI score0.03758EPSS
SaveExploits0Affected Software20
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/19 12:47 a.m.12 views

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On January 2021 CPU

Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...

2AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/18 3:34 p.m.37 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM WebSphere Cast Iron & App Connect Professional. These issues were disclosed as part of the IBM Java SDK updates in October 2020. IBM WebSphere Cast Iron & App Connect Professional have addressed the...

5.8CVSS0.7AI score0.03758EPSS
SaveExploits0Affected Software2
ThreatPost
ThreatPost
added 2021/02/18 2:01 p.m.60 views

SDK Bug Lets Attackers Spy on User’s Video Calls Across Dating, Healthcare Apps

Click to Register A vulnerability in an SDK that allows users to make video calls in apps like eHarmony, Plenty of Fish, MeetMe and Skout allows threat actors to spy on private calls without the user knowing. Researchers discovered the flaw, CVE-2020-25605, in a video-calling SDK from a Santa...

5.5AI score0.06254EPSS
SaveExploits1References4
Trellix
Trellix
added 2021/02/18 12:00 a.m.30 views

Beyond Clubhouse: Vulnerable Agora SDKs Still in Widespread Use | McAfee Blogs

Beyond Clubhouse: Vulnerable Agora SDKs Still in Widespread Use Steve Povolny · FEB 18, 2021 On February 17th, 2021, McAfee disclosed findings based on a 10-month long disclosure process with major video conferencing vendor Agora, Inc. As we disclosed the findings to Agora in April 2020, this...

5.9CVSS5.6AI score0.06254EPSS
SaveExploits1
Trellix
Trellix
added 2021/02/18 12:00 a.m.33 views

Beyond Clubhouse: Vulnerable Agora SDKs Still in Widespread Use | McAfee Blogs

Beyond Clubhouse: Vulnerable Agora SDKs Still in Widespread Use Steve Povolny · FEB 18, 2021 On February 17th, 2021, McAfee disclosed findings based on a 10-month long disclosure process with major video conferencing vendor Agora, Inc. As we disclosed the findings to Agora in April 2020, this...

5.7AI score0.06254EPSS
SaveExploits1
ALT Linux
ALT Linux
added 2021/02/18 12:00 a.m.51 views

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.3-alt1

5.0.3-alt1 built Feb. 18, 2021 Vitaly Lipatov in task 266508 Feb. 17, 2021 Vitaly Lipatov - .NET 5.0.3 and .NET SDK 5.0.103 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...

7.5CVSS8.5AI score0.0334EPSS
SaveExploits0
OSV
OSV
added 2021/02/17 9:15 p.m.13 views

CVE-2020-25605

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

5.9CVSS6.5AI score0.06254EPSS
SaveExploits1References2
NVD
NVD
added 2021/02/17 9:15 p.m.20 views

CVE-2020-25605

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

5.9CVSS0.06254EPSS
SaveExploits1References2
Prion
Prion
added 2021/02/17 9:15 p.m.29 views

Design/Logic Flaw

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

4.3CVSS5.6AI score0.06254EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/02/17 8:40 p.m.33 views

CVE-2020-25605

Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic...

5.5AI score0.06254EPSS
SaveExploits1References2
CVE
CVE
added 2021/02/17 8:40 p.m.85 views

CVE-2020-25605

Agora Video SDKs prior to 3.1 were vulnerable to cleartext transmission of sensitive information (including App ID, channel, and token), enabling an attacker on the network to observe call setup data and potentially join ongoing calls to access audio/video. The issue has been mitigated in version...

5.9CVSS5.4AI score0.06254EPSS
SaveExploits1References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/17 5:46 p.m.13 views

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime may affect Tivoli Netcool Performance Manager for Wireless,Oracle July 2020 CPU

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 & 8 used by Tivoli Netcool Performance Manager for Wireless. Tivoli Netcool Performance Manager for Wireless has addressed the applicable CVEs.These issues were disclosed as part of the IBM Java SDK updates in...

1.2AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/17 5:10 p.m.45 views

Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect WebSphere Service Registry and Repository and WebSphere Service Registry and Repository Studio January 2021 CPU

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by WebSphere Service Registry and Repository and WebSphere Service Registry and Repository Studio. These issues were disclosed as part of the IBM Java SDK updates in January 2021. These issues are also addressed...

9.8CVSS0.5AI score0.03625EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/17 4:48 p.m.16 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects WebSphere Application Server January 2021 CPU that is bundled with IBM WebSphere Application Server in IBM Cloud

Summary WebSphere Application Server is shipped as a component of IBM WebSphere in IBM Cloud. There are multiple vulnerabiltities in the IBM® SDK Java™ Technology Edition that is shipped with IBM WebSphere Application Server. These issues were disclosed in the IBM Java SDK updates in January 2021...

1.4AI score
SaveExploits0Affected Software1
NVD
NVD
added 2021/02/17 2:15 p.m.27 views

CVE-2020-24453

Improper input validation in the IntelR EPID SDK before version 8, may allow an authenticated user to potentially enable an escalation of privilege via local access...

7.8CVSS0.00293EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/17 2:15 p.m.14 views

CVE-2020-24453

Improper input validation in the IntelR EPID SDK before version 8, may allow an authenticated user to potentially enable an escalation of privilege via local access...

7.8CVSS7.1AI score0.00293EPSS
SaveExploits0References1
Rows per page
Query Builder