Lucene search
+L

470 matches found

myhack58
myhack58
added 2015/10/15 12:00 a.m.27 views

Google AdMob filter vulnerabilities, malicious ads sneak into the application-vulnerability warning-the black bar safety net

! There are Android app developers complained, because the official advertising network poorly regulated, resulting in this pollution-free Android application infected with malicious ads. Android app strange is implanted in the third-party advertising From Sydney, two bus the Android app Arrivo a...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2015/05/22 12:00 a.m.22 views

Windows Registry Check: Violations

List registry entries which didn SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.105990";...

7.3AI score
SaveExploits0
Mozilla
Mozilla
added 2015/05/12 12:00 a.m.43 views

Sensitive URL encoded information written to Android logcat — Mozilla

Security researcher Muneaki Nishimura reported that Firefox for Android would write potentially sensitive data to the Android logcat that was encoded as part of logged URL strings. On Android 4.0 or earlier systems, logcat data is available to any application having READLOGS permission, leading t...

2.1CVSS8.9AI score0.0033EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.16 views

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the yelp package up to version 2.22.1-r2 of the Gentoo Linux operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

10CVSS5.4AI score0.19395EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.12 views

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xorg-x11-Xdmx-6.8.2 package on the CentOS operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

9.3CVSS5.4AI score0.05781EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.10 views

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xorg-x11 package in the OpenSUSE operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

9.3CVSS5.4AI score0.05781EPSS
SaveExploits0References2Affected Software1
FreeBSD
FreeBSD
added 2015/04/13 12:00 a.m.55 views

Ruby -- OpenSSL Hostname Verification Vulnerability

Ruby Developers report: After reviewing RFC 6125 and RFC 5280, we found multiple violations of matching hostnames and particularly wildcard certificates. Ruby’s OpenSSL extension will now provide a string-based matching algorithm which follows more strict behavior, as recommended by these RFCs. I...

5.9CVSS6.4AI score0.02815EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2015/03/31 1:17 a.m.13 views

Anonymous Hackers Threaten Israel with 'Electronic-Holocaust' on 7th April

The famous cyber hacker group Anonymous has vowed an 'Electronic Holocaust' against Israel in response to what the group calls 'crimes in the Palestinian territories'. In a spooky video "message to Israel" posted on YouTube March 4, Anonymous declared yet another cyber attack on April 7, which is...

6.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2015/03/30 11:30 a.m.10 views

postgresql: information leak through constraint violation errors

An information leak flaw was found in the wathe PostgreSQL database server handled certain error messages. An authenticated database user could possibly obtain the results of a query they did not have privileges to execute by observing the constraint violation error messages produced when the que...

4.3CVSS7.3AI score0.0251EPSS
SaveExploits0References5
ThreatPost
ThreatPost
added 2015/03/12 10:31 a.m.15 views

Obama Administration Seeks More Legal Power to Disrupt Botnets

The federal government is seeking more legal power to step in and shut down botnets through an amendment to the existing criminal law, which would allow the Department of Justice to obtain injunctions to disrupt these malicious networks. The Obama administration has proposed an amendment to...

2AI score
SaveExploits0References7
ArchLinux
ArchLinux
added 2015/02/17 12:00 a.m.53 views

krb5: multiple issues

CVE-2014-5352 authenticated remote code execution: In the MIT krb5 libgssapikrb5 library, after gssprocesscontexttoken is used to process a valid context deletion token, the caller is left with a security context handle containing a dangling pointer. Further uses of this handle will result in...

9CVSS1.7AI score0.06213EPSS
SaveExploits0References8
OSV
OSV
added 2015/01/21 10:07 a.m.24 views

SUSE-SU-2015:0290-1 Security update for krb5

MIT kerberos krb5 was updated to fix several security issues and bugs. Security issues fixed: CVE-2014-5351: The kadm5randkeyprincipal3 function in lib/kadm5/srv/svrprincipal.c in kadmind in MIT Kerberos 5 aka krb5 sent old keys in a response to a -randkey -keepold request, which allowed remote...

9CVSS6.6AI score0.06213EPSS
SaveExploits0References9
NVD
NVD
added 2014/09/11 2:16 p.m.20 views

CVE-2011-4887

Cross-site scripting XSS vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall WAF 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

4.3CVSS5.7AI score0.01284EPSS
SaveExploits0References6
Prion
Prion
added 2014/09/11 2:16 p.m.18 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall WAF 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

4.3CVSS6.1AI score0.01284EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/09/10 12:00 a.m.67 views

MS KB2987114: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote host is missing KB2987114. It is, therefore, affected by the following vulnerabilities : - Unspecified memory corruption issues exist that allow arbitrary code execution. CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0555 - An unspecified error...

10CVSS8.4AI score0.84298EPSS
SaveExploits7References15
Tenable Nessus
Tenable Nessus
added 2014/09/10 12:00 a.m.48 views

Google Chrome < 37.0.2062.120 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 37.0.2062.120. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists related to rendering that allows a remote attacker to execute arbitrary code. CVE-2014-3178 - Unspecified...

10CVSS7.8AI score0.84298EPSS
SaveExploits7References15
Tenable Nessus
Tenable Nessus
added 2014/09/10 12:00 a.m.42 views

Adobe AIR <= AIR 14.0.0.178 Multiple Vulnerabilities (APSB14-21)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 14.0.0.178. It is, therefore, affected by the following vulnerabilities : - Unspecified memory corruption issues exist that allow arbitrary code execution. CVE-2014-0547, CVE-2014-0549,...

10CVSS8.3AI score0.84298EPSS
SaveExploits7References13
The Hacker News
The Hacker News
added 2014/02/10 10:26 p.m.148 views

Beware! Cyber Criminals may spoil your Valentine's Day

Valentine's Day - a day of hearts, Chocolates, Flowers and Celebrations when people express their emotions to their loved ones and most of us send E-cards, purchase special gifts with the help of various Online Shop Sites and many other tantrums making them feel special. While you are busy in...

9.3CVSS8.5AI score0.99976EPSS
SaveExploits12
OpenVAS
OpenVAS
added 2014/01/06 12:00 a.m.19 views

CPE-based Policy Check Violations

Shows all CPEs which are either present or missing depending on what to check for from CPE-based Policy Check. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

7.3AI score
SaveExploits0
ThreatPost
ThreatPost
added 2013/11/19 2:20 p.m.12 views

Google Pays $17 Million to Settle Privacy Violations

Thirty-seven states are claiming a privacy victory against Google and will split a $17 million settlement from the search giant. Google, which generated $2.97 billion in online advertising revenue in the third quarter, was deliberately bypassing default privacy settings in Apple’s Safari browser ...

0.2AI score
SaveExploits0References3
Rows per page
Query Builder