Lucene search
+L

14368 matches found

CNVD
CNVD
added 2021/03/01 12:00 a.m.30 views

Synology DiskStation Manager Sensitive Information Plaintext Transfer Vulnerability (CNVD-2021-13674)

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A sensitive information clear text transfer vulnerability exists in...

9CVSS6.2AI score0.00747EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2021/03/01 12:00 a.m.25 views

Accellion File Transfer Appliance Unsupported Version

The remote host is an Accellion File Transfer Appliance which is no longer supported by the vendor. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network Security, Inc...

7AI score
SaveExploits0References1
CNVD
CNVD
added 2021/03/01 12:00 a.m.21 views

Synology DiskStation Manager Sensitive Information Plaintext Transfer Vulnerability

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A sensitive information clear text transfer vulnerability exists in synorelay...

8.3CVSS6.2AI score0.00723EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/03/01 12:00 a.m.57 views

Synology DiskStation Manager Sensitive Information Plaintext Transfer Vulnerability (CNVD-2021-13678)

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A sensitive information clear text transfer vulnerability exists in synorelay...

8.7CVSS6.2AI score0.00651EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/26 10:15 p.m.13 views

CVE-2021-26565

Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session...

5.9CVSS6.8AI score0.00723EPSS
SaveExploits1References2
OSV
OSV
added 2021/02/26 3:15 a.m.6 views

CVE-2021-23955

The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vulnerability affects Firefox 85...

6.1CVSS7.4AI score0.00657EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/02/26 3:15 a.m.5 views

CVE-2021-23955

The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vulnerability affects Firefox 85...

6.1CVSS6.7AI score0.00657EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/26 3:15 a.m.5 views

CVE-2021-23958

The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnerability affects Firefox 85...

6.5CVSS6.8AI score0.00882EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/02/26 12:00 a.m.14 views

Synology DiskStation Manager 安全漏洞

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A sensitive information clear text transfer vulnerability exists in...

9CVSS7.2AI score0.00747EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/02/26 12:00 a.m.14 views

Synology DiskStation Manager 安全漏洞

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A sensitive information clear text transfer vulnerability exists in synorelay...

8.7CVSS7.3AI score0.00651EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2021/02/24 8:30 p.m.41 views

BlackMamba - C2/post-exploitation Framework

BlackMamba is a multi client C2/post exploitation framework with some spyware features. Powered by Python 3.8.6 and QT Framework. Some of BlackMamba features are: Multi Client - Supports multiple client connections at the same time. Real Time Communication Updates - Real time communication and...

7.9AI score
SaveExploits0References4
CISA
CISA
added 2021/02/24 12:00 a.m.23 views

CISA Releases Joint Cybersecurity Advisory on Exploitation of Accellion File Transfer Appliance

The cybersecurity authorities of Australia, New Zealand, Singapore, the United Kingdom, and the United States have released Joint Cybersecurity Advisory AA21-055A: Exploitation of Accellion File Transfer Appliance. Cyber actors worldwide have exploited vulnerabilities in Accellion File Transfer...

6.8AI score
SaveExploits0References3
The Hacker News
The Hacker News
added 2021/02/23 7:18 a.m.15 views

Hackers Exploit Accellion Zero-Days in Recent Data Theft and Extortion Attacks

Cybersecurity researchers on Monday tied a string of attacks targeting Accellion File Transfer Appliance FTA servers over the past two months to data theft and extortion campaign orchestrated by a cybercrime group called UNC2546. The attacks, which began in mid-December 2020, involved exploiting...

10CVSS7.5AI score0.56686EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/02/23 12:00 a.m.25 views

Google Chrome Security Update (stable-channel-update-for-desktop_16-2021-02) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

9.6CVSS9.9AI score0.09458EPSS
SaveExploits8References1
NVD
NVD
added 2021/02/22 10:15 p.m.16 views

CVE-2021-21149

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page...

8.8CVSS0.01468EPSS
SaveExploits1References5
OSV
OSV
added 2021/02/22 10:15 p.m.3 views

DEBIAN-CVE-2021-21149

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page...

8.8CVSS8.3AI score0.01468EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/22 10:15 p.m.9 views

UBUNTU-CVE-2021-21149

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page...

8.8CVSS7.5AI score0.01468EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2021/02/22 9:20 p.m.74 views

CVE-2021-21149

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page...

8.8CVSS8.9AI score0.01468EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/02/22 9:20 p.m.37 views

CVE-2021-21149

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page...

8.8CVSS9.2AI score0.01468EPSS
SaveExploits1
CVE
CVE
added 2021/02/22 9:20 p.m.267 views

CVE-2021-21149

CVE-2021-21149 is a stack buffer overflow in the Data Transfer component of Google Chrome on Linux prior to 88.0.4324.182, enabling remote out-of-bounds memory access via a crafted HTML page. Upstream and downstream advisories (Chromium/Chrome updates) fix this by upgrading to 88.0.4324.182 or ne...

8.8CVSS8.6AI score0.01468EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder