Lucene search
+L

54 matches found

Cvelist
Cvelist
added 2014/10/20 10:00 a.m.19 views

CVE-2014-7499

The Sword aka com.ireadercity.c25 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
SaveExploits0References3
CVE
CVE
added 2014/10/20 10:00 a.m.38 views

CVE-2014-7499

The CVE-2014-7499 entry refers to The Sword (com.ireadercity.c25) Android app version 3.0.2 that does not verify X.509 certificates from SSL servers, allowing man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafted certificate. The issue affects the app’s TLS c...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
The Hacker News
The Hacker News
added 2012/12/10 1:34 p.m.9 views

Aramco cyber attacks intends to stop oil production

Saudi Arabia's national oil company "Aramco" is the country's largest oil production facility and is a significant exporter in the Organization of the Petroleum Exporting Countries. They said that a cyber attack against it in August which damaged some 30,000 computers was aimed at stopping oil an...

6.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2012/12/10 2:34 a.m.10 views

Aramco cyber attacks intends to stop oil production

Saudi Arabia's national oil company "Aramco" is the country’s largest oil production facility and is a significant exporter in the Organization of the Petroleum Exporting Countries. They said that a cyber attack against it in August which damaged some 30,000 computers was aimed at stopping oil an...

6.6AI score
SaveExploits0
ThreatPost
ThreatPost
added 2012/08/27 10:24 p.m.20 views

Saudi Aramco Confirms Scope of Malware Attack

Officials at oil giant Saudi Aramco have confirmed that about 30,000 of the company’s workstations were hit by a malware attack on August 15, a number that lines up with claims made in posts on Pastebin by a group taking credit for the attack. The company said that while tens of thousands of...

0.3AI score
SaveExploits0References4
ThreatPost
ThreatPost
added 2012/08/23 2:08 p.m.22 views

Aramco Threatened With New Attack

Attackers are threatening to launch a second assault on Saudi Aramco on Saturday in order to prove its abilities and the fact that it’s not relying on help from an Aramco insider. The first attack on the oil company occurred last week and resulted in the company taking its Web sites offline, sayi...

0.4AI score
SaveExploits0References4
ThreatPost
ThreatPost
added 2012/08/22 2:40 p.m.8 views

Some Signs Point to Shamoon as Malware in Aramco Attack

While researchers continue to dig into the Shamoon malware, looking for its origins and a complete understanding of its capabilities, a group calling itself the Cutting Sword of Justice is claiming responsibility for an attack on the massive Saudi oil company Aramco, which some experts believe...

6.9AI score
SaveExploits0References6
OpenVAS
OpenVAS
added 2009/02/16 12:00 a.m.23 views

Fedora Update for sword FEDORA-2008-1951

Check for the Version of sword OpenVAS Vulnerability Test Fedora Update for sword FEDORA-2008-1951 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

7.5CVSS0.1AI score0.02901EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/02/16 12:00 a.m.15 views

Fedora Update for sword FEDORA-2008-1951

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS6.7AI score0.02901EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/02/16 12:00 a.m.16 views

Fedora Update for sword FEDORA-2008-1922

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS6.7AI score0.02901EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.27 views

Gentoo Security Advisory GLSA 200803-06 (sword)

The remote host is missing updates announced in advisory GLSA 200803-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.2AI score0.02901EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.15 views

Gentoo Security Advisory GLSA 200803-06 (sword)

The remote host is missing updates announced in advisory GLSA 200803-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.02901EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2008/03/07 12:00 a.m.27 views

GLSA-200803-06 : SWORD: Shell command injection

The remote host is affected by the vulnerability described in GLSA-200803-06 SWORD: Shell command injection Dan Dennison reported that the diatheke.pl script used in SWORD does not properly sanitize shell meta-characters in the 'range' parameter before processing it. Impact : A remote attacker...

7.5CVSS5.8AI score0.02901EPSS
SaveExploits0References2
securityvulns
securityvulns
added 2008/03/04 12:00 a.m.68 views

[ GLSA 200803-06 ] SWORD: Shell command injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

7.5CVSS6.6AI score0.02901EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/02/28 12:00 a.m.14 views

Debian: Security Advisory (DSA-1508-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.02901EPSS
SaveExploits0References3
Fedora
Fedora
added 2008/02/26 12:24 a.m.18 views

[SECURITY] Fedora 8 Update: sword-1.5.10-2.fc8

The SWORD Project is the CrossWire Bible Society's free Bible software project. Its purpose is to create cross-platform open-source tools-- covered by the GNU General Public License-- that allow programmers and Bible societies to write new Bible software more quickly and easily. We also create...

2.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2008/02/26 12:00 a.m.21 views

Fedora 7 : sword-1.5.10-2.fc7 (2008-1922)

Thu Feb 21 2008 Deji Akingunola - 1.5.10-2 - Fix command injection bug Bug 433723 - Tue Nov 6 2007 Deji Akingunola - 1.5.10-1 - Update to version 1.5.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

7.5CVSS5.5AI score0.02901EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2008/02/26 12:00 a.m.25 views

Fedora 8 : sword-1.5.10-2.fc8 (2008-1951)

Thu Feb 21 2008 Deji Akingunola - 1.5.10-2 - Fix command injection bug Bug 433723 - Mon Nov 5 2007 Deji Akingunola - 1.5.10-1 - Update to version 1.5.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

7.5CVSS5.5AI score0.02901EPSS
SaveExploits0References3
Prion
Prion
added 2008/02/25 9:44 p.m.30 views

Design/Logic Flaw

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter...

7.5CVSS8AI score0.02901EPSS
SaveExploits0References13Affected Software2
NVD
NVD
added 2008/02/25 9:44 p.m.27 views

CVE-2008-0932

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter...

7.5CVSS7.5AI score0.02901EPSS
SaveExploits0References13
Rows per page
Query Builder