Lucene search
+L

1262 matches found

CNNVD
CNNVD
added 2021/06/21 12:00 a.m.12 views

White Shark System 访问控制错误漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A sensitive information disclosure vulnerability exis...

5.3CVSS5.7AI score0.0145EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/06/21 12:00 a.m.8 views

White Shark System 安全漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". An unauthorized access vulnerability exists in...

9CVSS5.7AI score0.02436EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/06/21 12:00 a.m.11 views

White Shark System 安全漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A sensitive information disclosure vulnerability exis...

6.5CVSS5.7AI score0.01169EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/06/21 12:00 a.m.13 views

PT-2021-10493 · Unknown · White Shark System

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue allows remote attackers to exploit the vulnerability and create a task, leading to sensitive information disclosure via the default task add.php endpoint. The default task add.php...

6.5CVSS6.3AI score0.01169EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/06/21 12:00 a.m.12 views

PT-2021-10496 · Unknown · White Shark System

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue is related to a web site physical path leakage. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was...

5.3CVSS4.8AI score0.00895EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/06/21 12:00 a.m.11 views

White Shark System SQL注入漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A SQL injection vulnerability exists in White Shark...

7.5CVSS6AI score0.01669EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/06/21 12:00 a.m.10 views

White Shark System 跨站请求伪造漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A cross-site request forgery vulnerability exists in...

6.5CVSS5.5AI score0.00501EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/06/21 12:00 a.m.17 views

White Shark System SQL注入漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A SQL injection vulnerability exists in White Shark...

7.5CVSS6AI score0.01669EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/06/21 12:00 a.m.12 views

White Shark System SQL注入漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A SQL injection vulnerability exists in White Shark...

7.5CVSS6AI score0.01669EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/06/21 12:00 a.m.11 views

White Shark System 安全漏洞

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". An unauthorized access vulnerability exists in...

9.8CVSS5.7AI score0.01803EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2021/06/18 1:07 p.m.42 views

Russia bans VyprVPN, Opera VPN services for not complying with blacklist request

Russia's telecommunications and media regulator Roskomnadzor RKN on Thursday introduced restrictions on the operation of VyprVPN and Opera VPN services in the country. "In accordance with the regulation on responding to threats to circumvent restrictions on access to child pornography, suicidal,...

1.7AI score
SaveExploits0
Amd
Amd
added 2021/06/12 12:00 a.m.65 views

TLB Poisoning Attacks on AMD Secure Encrypted Virtualization (SEV)

Bulletin ID: AMD-SB-1023 Potential Impact: Loss of Integrity, Confidentiality and Availability Summary A malicious hypervisor HV along with an unprivileged process controlled by an attacker and executing in a guest VM, may maliciously control the process of flushing the Translation Lookaside Buff...

8.4CVSS8.2AI score0.00239EPSS
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2021/06/08 12:00 a.m.13 views

The U.S. EO on Ransomware: What Does it Mean? – Part 2

The White House is urging companies to do more to stem the tide of ransomware attacks now that they are starting to impact critical infrastructure and supply chains. It is a good start, but what will be the implication of this to U.S. businesses?...

1.3AI score
SaveExploits0
ThreatPost
ThreatPost
added 2021/06/02 3:52 p.m.60 views

REvil Ransomware Ground Down JBS: Sources

The cyberattack that flattened operations at JBS Foods over the weekend was indeed a ransomware strike, the global food distributor has confirmed to the Biden administration, with sources pointing to the REvil Group as the responsible gang. Four people familiar with the matter who weren’t...

7AI score
SaveExploits0References22
Prion
Prion
added 2021/06/01 2:15 p.m.20 views

Server side request forgery (ssrf)

In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability...

5.8CVSS6.2AI score0.02073EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/06/01 2:15 p.m.8 views

CVE-2021-25640

In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability...

6.1CVSS6.1AI score0.02073EPSS
SaveExploits0References3Affected Software1
Wired Threat Level
Wired Threat Level
added 2021/05/11 12:15 a.m.44 views

DarkSide Hit Colonial Pipeline—and Created an Unholy Mess

As the White House gets involved in the response, the group behind the malware is scrambling...

7AI score
SaveExploits0
Krebs on Security
Krebs on Security
added 2021/04/29 12:26 p.m.44 views

Task Force Seeks to Disrupt Ransomware Payments

Some of the worlds top tech firms are backing a new industry task force focused on disrupting cybercriminal ransomware gangs by limiting their ability to get paid, and targeting the individuals and finances of the organized thieves behind these crimes. In a 81-page report delivered to the Biden...

6.7AI score
SaveExploits0
CISA
CISA
added 2021/04/26 12:00 a.m.31 views

FBI-DHS-CISA Joint Advisory on Russian Foreign Intelligence Service Cyber Operations

The Federal Bureau of Investigation FBI, Department of Homeland Security, and CISA have released a Joint Cybersecurity Advisory CSA addressing Russian Foreign Intelligence Service SVR cyber actors—also known as Advanced Persistent Threat 29 APT 29, the Dukes, CozyBear, and Yttrium—continued...

6.6AI score
SaveExploits0References6
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.39 views

SUSE: Security Advisory (SUSE-SU-2020:0454-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.57132EPSS
SaveExploits2References6
Rows per page
Query Builder