Lucene search
+L

3590 matches found

Microsoft KB
Microsoft KB
•added 2020/09/03 12:00 a.m.•16 views

September 3, 2020-KB4570721 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 2004

None None...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/09/03 12:00 a.m.•13 views

The vulnerability in the implementation of the Cisco Discovery protocol of the IP camera software from Cisco Video Surveillance series 8000 allows a intruder to execute arbitrary code or trigger a reboot of the vulnerable IP camera.

The vulnerability of the Cisco Discovery protocol implemented in Cisco Video Surveillance IP cameras of the 8000 series exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a restart of the vulnerable IP...

8.8CVSS8AI score0.00955EPSS
SaveExploits0References3Affected Software1
The Hacker News
The Hacker News
•added 2020/08/25 9:46 a.m.•14 views

Get Lifetime Access to 1000+ Premium Online Training Courses for Just $59

"In today's knowledge economy, continual learning is an imperative." — Those words from Aytekin Tank, the founder of JotForm, are particularly important for anyone working in IT or development. With over 1,000 premium courses complete list from top instructors, StackSkills Unlimited provides...

5.8AI score
SaveExploits0
OSV
OSV
•added 2020/08/19 3:15 p.m.•7 views

CVE-2020-9722

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution...

7.8CVSS7.6AI score0.05813EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/08/17 4:15 p.m.•10 views

CVE-2020-8226

A vulnerability exists in phpBB...

5.8CVSS5.9AI score0.00966EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/08/15 12:00 a.m.•9 views

Anhui Hope Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2020-48244)

Anhui Hope Network Technology Co., Ltd. is an Internet basic product service provider mainly engaged in website construction, network promotion and network marketing. Anhui Hope Network Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerabili...

7.7AI score
SaveExploits0
OSV
OSV
•added 2020/08/14 8:15 p.m.•11 views

CVE-2020-17475

Lack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to grant physical access to anyone by sending packet data to UDP port 5000...

7.5CVSS7.1AI score0.00925EPSS
SaveExploits0References1
OSV
OSV
•added 2020/08/10 2:15 p.m.•10 views

DEBIAN-CVE-2020-6070

An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this...

7.8CVSS7.5AI score0.0173EPSS
SaveExploits1References1
OSV
OSV
•added 2020/08/07 4:15 p.m.•7 views

ALPINE-CVE-2020-11984

Apache HTTP server 2.4.32 to 2.4.44 modproxyuwsgi info disclosure and possible RCE...

9.8CVSS7AI score0.90039EPSS
SaveExploits2References1
Circl
Circl
•added 2020/07/29 1:18 p.m.•16 views

CVE-2020-14500

creationtimestamp| type| source ---|---|--- 2020-07-29 13:18:51+00:00| seen| https://t.me/thehackernews/786 2020-07-29 18:15:25+00:00| seen| https://t.me/truesecator/802 2020-07-29 21:40:39+00:00| seen| https://t.me/YemenShield/120 2020-07-31 07:51:27+00:00| seen| https://t.me/cKure/1568...

10CVSS8.9AI score0.01666EPSS
SaveExploits0References4
OSV
OSV
•added 2020/07/28 6:15 p.m.•17 views

CVE-2020-10923

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000. A...

8.8CVSS7.1AI score0.84676EPSS
SaveExploits2References1
OSV
OSV
•added 2020/07/28 6:15 p.m.•16 views

CVE-2020-10924

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

8.8CVSS7.5AI score0.87343EPSS
SaveExploits2References1
OSV
OSV
•added 2020/07/24 11:15 p.m.•17 views

CVE-2020-10600

An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive 2018 SP2 and prior versions...

7.1CVSS7.1AI score0.01201EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/07/21 12:00 a.m.•19 views

The vulnerability of the Deep Packet Inspection (DPI) implementation in the SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software allows a attacker to trigger a service failure.

The vulnerability of the Deep Packet Inspection DPI implementation in SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software lies in unauthorized access to the indexed source. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

8.6CVSS7.2AI score0.01415EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/07/15 12:00 a.m.•14 views

The vulnerability of the PAN-OS operating system on PA-7000 devices, related to insufficient channel restrictions for specified endpoints, allows a perpetrator to gain access to the device with root privileges.

The vulnerability of the PAN-OS operating system on PA-7000 devices is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability can allow a malicious actor to gain access to the device with root privileges...

10CVSS7.8AI score0.01679EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/07/07 12:00 a.m.•15 views

The vulnerability of the Enhanced Charging Service, a microprogramming-based software service for Cisco ASR 5000 routers, allows attackers to circumvent traffic classification rules and potentially avoid paying for the usage of network traffic.

The vulnerability of the Enhanced Charging Service provided by Cisco ASR 5000 router microprogramming software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass traffic classification rules and potentially avoid paying for t...

5.3CVSS5.9AI score0.01011EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2020/06/25 8:15 p.m.•20 views

CVE-2020-9437

SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS...

4.8CVSS5.8AI score0.00981EPSS
SaveExploits0References3
OSV
OSV
•added 2020/06/25 7:15 p.m.•8 views

UBUNTU-CVE-2020-10994

In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file...

5.5CVSS6.7AI score0.01432EPSS
SaveExploits0References8
Circl
Circl
•added 2020/06/17 7:55 a.m.•15 views

CVE-2020-0534

creationtimestamp| type| source ---|---|--- 2020-06-17 07:55:27+00:00| seen| https://t.me/cibsecurity/12787...

7.5CVSS7.9AI score0.01864EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2020/06/06 12:00 a.m.•18 views

Compatibility update for installing Windows 10, version 2004: June 6, 2020

None None...

6.1AI score
SaveExploits0
Rows per page
Query Builder