Lucene search
+L

2484 matches found

OSV
OSV
•added 2019/12/06 6:15 p.m.•13 views

CVE-2019-18671

Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes in the .bss segment via crafted messages. The vulnerability could allow code execution or other forms of impact. It can be triggered by unauthenticated attacke...

9.8CVSS6.1AI score0.03271EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2019/12/06 5:53 p.m.•40 views

CVE-2019-18671

Insufficient checks in the USB packet handling of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow out-of-bounds writes in the .bss segment via crafted messages. The vulnerability could allow code execution or other forms of impact. It can be triggered by unauthenticated attacke...

9.7AI score0.03271EPSS
SaveExploits0References4
CVE
CVE
•added 2019/12/06 5:53 p.m.•140 views

CVE-2019-18671

CVE-2019-18671 affects the ShapeShift KeepKey hardware wallet. Insufficient checks in USB packet handling allow out-of-bounds writes in the .bss segment on firmware up to 6.2.1, with potential code execution or other impact. The issue can be triggered by unauthenticated users and is reachable via...

10CVSS9.6AI score0.03271EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/11/19 12:00 a.m.•14 views

The vulnerability of the Segment component in Oracle Retail Customer Management and Segmentation Foundation software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Segment component of the Oracle Retail Customer Management and Segmentation Foundation software lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

5.9CVSS6.8AI score0.01373EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/11/18 12:00 a.m.•13 views

The vulnerability of the Segment component in the Oracle Retail Customer Management and Segmentation software application allows a hacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Segment component in Oracle Retail Customer Management and Segmentation Foundation software relates to access control deficiencies. Exploiting this vulnerability could allow an attacker operating remotely to modify, add, or delete data, or gain unauthorized access to...

4.9CVSS6.5AI score0.00726EPSS
SaveExploits0References3Affected Software1
Trend Micro Simply Security
Trend Micro Simply Security
•added 2019/11/04 6:22 p.m.•38 views

Tips to Accelerating PCI Data Security Standard Projects with Deep Security as a Service

Does your organization need to meet PCI DSS requirements? Are you struggling with multiple security tools? Or stretching your already overstretched team to prepare for an audit? Time to hit the accelerator with Trend Micro! If your applications deal with credit or payment card data, you need to g...

0.7AI score
SaveExploits0
Cvelist
Cvelist
•added 2019/10/16 5:40 p.m.•37 views

CVE-2019-2883

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Segment. The supported version that is affected is 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

4.3AI score0.00726EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/16 12:00 a.m.•3 views

CVE-2019-2883: Undefined Security Weakness

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Segment. The supported version that is affected is 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

4.9CVSS5.6AI score0.00726EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/16 12:00 a.m.•2 views

CVE-2019-2884: Undefined Security Weakness

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Segment. The supported version that is affected is 17.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

5.9CVSS6.1AI score0.01373EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•10 views

The vulnerability of the mkv::virtual_segment_c::seek() function in the VideoLAN VLC media player software allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the mkv::virtualsegmentc::seek function in the VideoLAN VLC media player software relates to its use after deallocation. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

7.8CVSS5.5AI score0.01455EPSS
SaveExploits0References7Affected Software4
Symantec
Symantec
•added 2019/10/15 12:00 a.m.•19 views

Oracle Retail Customer Management and Segmentation Foundation Remote Security Vulnerability

Description Oracle Retail Customer Management and Segmentation Foundation is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Segment' component is affected. This vulnerability affects the following supported versions: 17.0 Technologies...

1.4AI score
SaveExploits0References1Affected Software1
Akamai Blog
Akamai Blog
•added 2019/10/11 8:00 p.m.•147 views

Optimizing Video Streaming Performance with Origin-Assisted Prefetching

Online video streaming is everywhere today. It's available on the smallest hand-held devices to the largest of screens in our living rooms. Magically and for the most part, it works and provides a very captivating experience. However, if you step back to look at the overall architecture, media...

6.8AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2019/10/11 8:00 p.m.•121 views

How to Scale Addressable Advertising with Low Latency for Live Streaming

Written by: David Springfall, Founder and CTO of Yospace Under David's technical and strategic leadership, Yospace pioneered server-side ad insertion and established itself as the global leader in OTT stream monetisation. The Yospace technology supports full one-to-one personalisation and provide...

0.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2019/10/10 10:03 p.m.•35 views

CVE-2017-5482

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

9.8CVSS1.4AI score0.05504EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/10/10 10:03 p.m.•33 views

CVE-2017-5204

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

9.8CVSS1.4AI score0.05997EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/10/10 4:09 a.m.•31 views

CVE-2016-7937

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

9.8CVSS1.4AI score0.03198EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/10/09 10:11 a.m.•54 views

CVE-2017-2583

Linux kernel built with the Kernel-based Virtual Machine CONFIGKVM support was vulnerable to an incorrect segment selectorSS value error. The error could occur while loading values into the SS register in long mode. A user or process inside a guest could use this flaw to crash the guest, resultin...

8.4CVSS2.5AI score0.00605EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/10/08 12:00 a.m.•21 views

PT-2019-5864 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/segment.c, where an attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math...

9.8CVSS6.5AI score0.89855EPSS
SaveExploits78References366
BDU FSTEC
BDU FSTEC
•added 2019/09/27 12:00 a.m.•12 views

The vulnerability of the Segment component in Oracle Retail Customer Engagement software allows a hacker to gain read access to data or cause a partial service disruption.

The vulnerability of the Segment component in Oracle Retail Customer Engagement software relates to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain read-only access to data or cause partial service disruption by sending specially crafted HTTP requests...

6.1CVSS5.5AI score0.00859EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2019/08/29 7:15 p.m.•24 views

CVE-2019-14778

The mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free...

7.8CVSS8.7AI score0.01455EPSS
SaveExploits0References8
Rows per page
Query Builder