Lucene search
+L

1282 matches found

Tenable Nessus
Tenable Nessus
added 2021/02/09 12:00 a.m.55 views

Security Updates for Microsoft Skype for Business (February 2021)

The Microsoft Skype for Business installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-24073 - A...

7.1CVSS6.4AI score0.02887EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/02/09 12:00 a.m.14 views

Microsoft Skype Security Breach

Microsoft Skype is a communication application from Microsoft USA. The program provides video calls and voice calls to other devices over the Internet for computers and mobile devices such as cell phones. A security vulnerability exists in Microsoft Skype for Business and Lync. The following...

7.1CVSS6.6AI score0.0162EPSS
SaveExploits0References4
NVD
NVD
added 2021/01/11 4:15 p.m.25 views

CVE-2020-24003

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access...

3.3CVSS3.6AI score0.01164EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/11 4:15 p.m.12 views

CVE-2020-24003

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access...

3.3CVSS5.8AI score0.01164EPSS
SaveExploits1References1
Prion
Prion
added 2021/01/11 4:15 p.m.527 views

Design/Logic Flaw

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access...

2.1CVSS3.8AI score0.01164EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/01/11 3:26 p.m.32 views

CVE-2020-24003

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access...

3.6AI score0.01164EPSS
SaveExploits1References1
CVE
CVE
added 2021/01/11 3:26 p.m.63 views

CVE-2020-24003

Summary: CVE-2020-24003 affects Microsoft Skype for macOS up to 8.59.0.77. The issue is the disable-library-validation entitlement, which can let a local process load a crafted library and thereby obtain unprompted microphone and camera access through the Skype client. This is a local-privilege s...

3.3CVSS3.8AI score0.01164EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/01/11 12:00 a.m.15 views

Microsoft Skype Authorization Issues Vulnerability

Microsoft Skype is a communication application from Microsoft USA. The program provides video calls and voice calls to other devices over the Internet for computers and mobile devices such as cell phones. A security vulnerability exists in Microsoft Skype through 8.59.0.77 on macOS that allows...

3.3CVSS5.8AI score0.01164EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/01/06 12:00 a.m.5 views

Skype Windows desktop version suffers from dll hijacking vulnerability

Skype Desktop is a free voice communication program. Skype Desktop for Windows has a dll hijacking vulnerability that can be exploited by attackers to remotely control a user's computer or implant a Trojan horse...

7.2AI score
SaveExploits0
OSV
OSV
added 2020/12/26 2:15 a.m.9 views

CVE-2020-27515

A Cross Site Scripting XSS vulnerability in Savsoft Quiz v5.0 allows remote attackers to inject arbitrary web script or HTML via the Skype ID field...

6.1CVSS6.5AI score0.01793EPSS
SaveExploits1References3
NVD
NVD
added 2020/12/26 2:15 a.m.21 views

CVE-2020-27515

A Cross Site Scripting XSS vulnerability in Savsoft Quiz v5.0 allows remote attackers to inject arbitrary web script or HTML via the Skype ID field...

6.1CVSS6AI score0.01793EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2020/12/26 1:55 a.m.31 views

CVE-2020-27515

A Cross Site Scripting XSS vulnerability in Savsoft Quiz v5.0 allows remote attackers to inject arbitrary web script or HTML via the Skype ID field...

6AI score0.01793EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2020/12/25 12:00 a.m.10 views

Savsoft Quiz Cross-Site Scripting Vulnerability

Savsoft Quiz is a Php-based administration platform for creating online exams and tests by Savsoft Individual Developers. A cross-site scripting vulnerability exists in Savsoft Quiz v5.0, which can be exploited by remote attackers to inject arbitrary web script or HTML via the Skype ID field...

6.1CVSS6.4AI score0.01793EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2020/12/11 11:30 a.m.37 views

Carnivore - Tool For Assessing On-Premises Microsoft Servers Authentication Such As ADFS, Skype, Exchange, And RDWeb

Carnivore is an assessment tool for Skype for Business, Exchange, ADFS, and RDWeb servers as well as some O365 functionality. Carnivore includes some new post-authentication Skype for Business functionality. Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Chris...

7.3AI score
SaveExploits0References3
Packet Storm
Packet Storm
added 2020/12/07 12:00 a.m.354 views

Savsoft Quiz 5 Cross Site Scripting

Exploit Title: Savsoft Quiz 5 - 'Skype ID' Stored XSS Exploit Author: Dipak Panchalth3.d1p4k Vendor Homepage: https://savsoftquiz.com Software Link: https://github.com/savsofts/savsoftquizv5 Version: 5 Tested on Windows 10 Attack Vector: This vulnerability can results attacker to inject the XSS...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/12/07 12:00 a.m.461 views

Savsoft Quiz 5 - 'Skype ID' Stored XSS

Exploit Title: Savsoft Quiz 5 - 'Skype ID' Stored XSS Exploit Author: Dipak Panchalth3.d1p4k Vendor Homepage: https://savsoftquiz.com Software Link: https://github.com/savsofts/savsoftquizv5 Version: 5 Tested on Windows 10 Attack Vector: This vulnerability can results attacker to inject the XSS...

5.3AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2020/12/06 12:00 a.m.51 views

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2020:2178-1 Rating: important References: Cross-References: CVE-2020-16013 CVE-2020-16017 Affected Products: openSUSE Leap 15.2:NonFree openSUSE Leap 15.1:NonFree An update that fixes two vulnerabilities is now...

9.6CVSS9.4AI score0.02751EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/12/01 12:00 a.m.8 views

December 1, 2020, update for Skype for Business 2016 (KB4486745)

None None...

6.1AI score
SaveExploits0
Citrix
Citrix
added 2020/11/09 12:00 a.m.11 views

RTOP Analyzer

RTOP Analyzer - v2.1.0.0 Created Date: Jun 22, 2016 Updated Date: Apr 30, 2018 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the downloa...

7.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/11/03 12:00 a.m.6 views

November 3, 2020, update for Skype for Business 2016 (KB4486710)

None None...

6.1AI score
SaveExploits0
Rows per page
Query Builder