Lucene search
+L

971 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/16 12:00 a.m.13 views

Vulnerability of the Node.js software platform’s Relative Distinguished Name (RDN) component, which allows attackers to perform spoofing attacks

The vulnerability of the Relative Distinguished Name RDN component in the Node.js software platform is related to errors in the certificate validation process. Exploiting this vulnerability allows attackers to perform spear-phishing attacks remotely...

7.4CVSS6.3AI score0.09358EPSS
SaveExploits1References6Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/02/16 12:00 a.m.8 views

The vulnerability of the implementation of the method for specifying all domain names and IP addresses in the Node.js software platform allows attackers to perform spoofing attacks.

The vulnerability of the method for specifying all domain names and IP addresses on the Node.js software platform is related to errors in the X.509 certificate validation process. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

7.4CVSS6.3AI score0.10364EPSS
SaveExploits1References14Affected Software7
Positive Technologies
Positive Technologies
added 2022/02/10 12:00 a.m.6 views

PT-2022-1679 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to conduct spoofing...

5CVSS4.4AI score0.00676EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2022/02/10 12:00 a.m.11 views

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser that comes with the post Windows 10 version of the system from Microsoft USA. Microsoft Edge suffers from a security vulnerability that exists due to incorrect handling of user-supplied data. The vulnerability can be exploited by remote attackers to trick victims...

4.7CVSS5.3AI score0.00676EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:00 a.m.43 views

AlmaLinux 8 : NetworkManager (ALSA-2021:4361)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4361 advisory. - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be...

6.1CVSS6.8AI score0.01399EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/02/08 12:00 a.m.18 views

Mozilla Firefox 代码问题漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation, U.S. A code issue vulnerability exists in Mozilla Firefox, which stems from an error in the product's handling of JavaScript dialog boxes. A remote attacker could exploit the vulnerability to perform a spoofing attack...

4.3CVSS7.3AI score0.0037EPSS
SaveExploits0References6
Veracode
Veracode
added 2022/02/07 3:47 a.m.30 views

Spoofing Attack

github.com/fleetdm/fleet is vulnerable to spoofing attack. The vulnerability exists due to an insecure authentication allowing an attacker to reuse the SAML response to log into the system...

6.5CVSS3.5AI score0.00896EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/02/05 12:00 a.m.4 views

PT-2022-2757 · Microsoft · Sharepoint Server +2

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundatio...

9CVSS7.4AI score0.01927EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/02/03 12:00 a.m.5 views

PT-2022-1698 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow a remote attacker to conduct spoofing...

5.3CVSS5.2AI score0.01573EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.23 views

Mageia: Security Advisory (MGASA-2021-0506)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.6AI score0.0383EPSS
SaveExploits0References5
Redos
Redos
added 2022/01/14 12:00 a.m.57 views

ROS-20220114-01

Vulnerability in Firefox browser, related to incorrect processing of user data. of user data. Exploitation of the vulnerability could allow an attacker acting remotely to mislead, by showing an incorrect origin when requesting to run a program and processing an external URL protocol Firefox brows...

10CVSS8.9AI score0.01344EPSS
SaveExploits6
Positive Technologies
Positive Technologies
added 2022/01/11 12:00 a.m.9 views

PT-2022-1525 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the Windows Certificate authentication procedure, allowing an attacker to conduct spoofing attacks. It is associated with data substitution, enabling...

7.8CVSS9.4AI score0.00704EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2022/01/04 12:00 a.m.48 views

Debian DLA-2874-1 : thunderbird - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2874 advisory. - During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash...

10CVSS8.5AI score0.0383EPSS
SaveExploits0References51
Tenable Nessus
Tenable Nessus
added 2021/12/30 12:00 a.m.45 views

openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2021:1635-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1635-1 advisory. - An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code...

10CVSS8.2AI score0.0383EPSS
SaveExploits3References74
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.9 views

The vulnerability of Google Chrome’s Payments component, which allows a hacker to perform spoofing attacks

The vulnerability of Google Chrome’s Payments component exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to carry out spearishing attacks...

6.5CVSS7.1AI score0.01438EPSS
SaveExploits1References9Affected Software6
Tenable Nessus
Tenable Nessus
added 2021/12/17 12:00 a.m.60 views

openSUSE 15 Security Update : MozillaFirefox (openSUSE-SU-2021:1575-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1575-1 advisory. - Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability...

8.8CVSS7.4AI score0.0202EPSS
SaveExploits0References21
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.11 views

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to carry out spoofing attacks.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

6.5CVSS6.9AI score0.01644EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.8 views

The vulnerability of the Autofill component in the Microsoft Edge browser, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of the Autofill component in the Microsoft Edge browser involves bypassing authentication through spearphishing. Exploiting this vulnerability allows attackers to carry out spearphishing attacks remotely...

6.5CVSS6.8AI score0.03468EPSS
SaveExploits0References7Affected Software7
Veracode
Veracode
added 2021/12/14 7:28 p.m.21 views

Spoofing Attack

firefox:sid is vulnerable to spoofing attack. The vulnerability exists due to the high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or spoofing attack...

4.3CVSS2.7AI score0.00544EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/12/14 12:15 p.m.6 views

CVE-2021-42027

A vulnerability has been identified in SINUMERIK Edge All versions V3.2. The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and...

7.4CVSS7AI score0.00479EPSS
SaveExploits0References2
Rows per page
Query Builder