Lucene search
K

2257 matches found

The Hacker News
The Hacker News
added 2023/04/13 8:0 p.m.35 views

Google Launches New Cybersecurity Initiatives to Strengthen Vulnerability Management

Google on Thursday outlined a set of initiatives aimed at improving the vulnerability management ecosystem and establishing greater transparency measures around exploitation. "While the notoriety of zero-day vulnerabilities typically makes headlines, risks remain even after they're known and fixe...

6.5AI score
Exploits0
MSRC
MSRC
added 2023/04/11 7:0 a.m.8 views

Best practices regarding Azure Storage Keys, Azure Functions, and Azure Role Based Access

Summary Azure provides developers and security operations staff a wide array of configurable security options to meet organizational needs. Throughout the software development lifecycle, it is important for customers to understand the shared responsibility model, as well as be familiar with vario...

7.3AI score
Exploits0
MSRC
MSRC
added 2023/04/11 7:0 a.m.22 views

Best practices regarding Azure Storage Keys, Azure Functions, and Azure Role Based Access

Summary Summary Azure provides developers and security operations staff a wide array of configurable security options to meet organizational needs. Throughout the software development lifecycle, it is important for customers to understand the shared responsibility model, as well as be familiar wi...

6.7AI score
Exploits0
OpenVAS
OpenVAS
added 2023/04/10 12:0 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2023:1797-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.6AI score0.27763EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/04/10 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2023:1794-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.00825EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2023/04/05 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2023:1747-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.00714EPSS
Exploits0References4
AlmaLinux
AlmaLinux
added 2023/04/04 12:0 a.m.49 views

Moderate: nodejs:16 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 16.19.1. Security Fixes: glob-parent: Regular Expression Denial of Service...

8.6CVSS8AI score0.00416EPSS
Exploits5References18
OpenVAS
OpenVAS
added 2023/04/04 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2023:1734-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.0011EPSS
Exploits1References4
Krebs on Security
Krebs on Security
added 2023/04/03 4:13 p.m.25 views

A Serial Tech Investment Scammer Takes Up Coding?

John Clifton Davies, a 60-year-old con man from the United Kingdom who fled the country in 2015 before being sentenced to 12 years in prison for fraud, has enjoyed a successful life abroad swindling technology startups by pretending to be a billionaire investor. Davies newest invention appears to...

6.4AI score
Exploits0
OpenVAS
OpenVAS
added 2023/03/30 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2023:1659-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.1AI score0.00136EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2023/03/30 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2023:1684-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.7AI score0.00266EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.34 views

SUSE: Security Advisory (SUSE-SU-2023:0764-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.67011EPSS
Exploits5References7
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2023:1622-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.05624EPSS
Exploits4References5
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.33 views

SUSE: Security Advisory (SUSE-SU-2023:0667-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.8AI score
Exploits0References5
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2023:0681-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.3AI score0.00131EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2023:0663-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.1AI score0.01445EPSS
Exploits4References5
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2023:0872-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.7AI score0.00296EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2023:0556-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.3AI score0.00084EPSS
Exploits0References4
OSV
OSV
added 2023/03/14 5:15 a.m.2 views

PYSEC-2023-315

SAP Business Object Adaptive Job Server - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the...

8.8CVSS7.6AI score0.01745EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/02/27 12:0 a.m.2 views

The vulnerability of Microsoft Visual Studio, a software development tool, stems from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.6CVSS6.7AI score0.0147EPSS
Exploits0References2Affected Software3
Rows per page
Query Builder