Lucene search
+L
NcscMost viewed

4249 matches found

NCSC
NCSC
•added 2022/01/19 12:0 a.m.•15 views

Vulnerabilities fixed in Oracle Construction and Engineering

Oracle has fixed vulnerabilities in the following products: Primavera P6 Enterprise Project Portfolio Management Primavera P6 Professional Project Management Primavera Portfolio Management Primavera Data Warehouse Primavera Analytics Primavera Unifier Instantis EnterpriseTrack Primavera Gateway T...

9.8CVSS9.5AI score0.99999EPSS
SaveExploits36
NCSC
NCSC
•added 2022/01/13 12:0 a.m.•15 views

Vulnerabilities fixed in Citrix Hypervisor

Several security issues have been fixed in Citrix Hypervisor, which may cause the host to crash or become un responsive. Citrix has released updates to fix the vulnerabilities. More information can be found on the page below: https://support.citrix.com/article/CTX335432...

8.8CVSS9AI score0.00333EPSS
SaveExploits0
NCSC
NCSC
•added 2021/12/15 12:0 a.m.•15 views

Vulnerabilities fixed in Adobe products

Adobe has fixed vulnerabilities in several of its products. The vulnerabilities potentially enable a malicious person to execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User Rights Increased user privileges Adobe...

9.3CVSS7.4AI score0.02328EPSS
SaveExploits0
NCSC
NCSC
•added 2021/10/27 12:0 a.m.•15 views

Vulnerabilities fixed in Apple macOS

Apple has fixed a large number of vulnerabilities in macOS Catalina, Big Sur and Monterey. The vulnerabilities allow a malicious party potentially able to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data...

9.3CVSS6.9AI score0.42674EPSS
SaveExploits0
NCSC
NCSC
•added 2021/09/27 12:0 a.m.•15 views

Vulnerability fixed in Trend Micro ServerProtect

Trend Micro has fixed a vulnerability in ServerProtect. A unauthenticated malicious party could potentially abuse it to bypass authentication. The vulnerability has a CVSS3.1 score of 9.8 assigned. Content-wise, however, few technical details made publicly available. Trend Micro has released...

10CVSS6.9AI score0.0931EPSS
SaveExploits0
NCSC
NCSC
•added 2021/09/24 12:0 a.m.•15 views

Vulnerabilities fixed in SonicWall SMA100 series

Vulnerabilities have been fixed in SonicWall SMA100 series. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Increased user privileges SonicWall has release...

9.1CVSS7.3AI score0.80701EPSS
SaveExploits4
NCSC
NCSC
•added 2021/08/03 12:0 a.m.•15 views

Vulnerabilities fixed in Google Android

Google has fixed vulnerabilities in Android. The vulnerabilities potentially enable a malicious person to carry out attacks that lead to the following categories of damage: Remote code execution User Rights Access to sensitive data Access to system data Increased user privileges Few technical...

10CVSS8.8AI score0.01377EPSS
SaveExploits1
NCSC
NCSC
•added 2021/07/02 12:0 a.m.•15 views

Vulnerability found in Microsoft Windows

There is a vulnerability in the Printer Spooler service from Microsoft. The vulnerability allows an authenticated malicious person able to execute arbitrary code and obtain elevated privileges. obtain. By exploiting the vulnerability, it is possible to take over a Domain Controller. Earlier this...

10CVSS7.3AI score0.99759EPSS
SaveExploits77
NCSC
NCSC
•added 2021/05/31 12:0 a.m.•15 views

Vulnerabilities fixed in IBM Cognos

IBM has fixed vulnerabilities in Cognos Analytics. The vulnerabilities allow an unauthenticated malicious person, possibly remotely, be able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Access...

10CVSS8.8AI score0.34731EPSS
SaveExploits11
NCSC
NCSC
•added 2021/04/16 12:0 a.m.•15 views

Vulnerabilities fixed in SUSE Linux Enterprise kernel

SUSE developers have fixed several vulnerabilities in the Linux kernel as used in SUSE Linux Enterprise. The vulnerabilities potentially enable a local malicious person to execute attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution...

8.8CVSS5.7AI score0.03132EPSS
SaveExploits9
NCSC
NCSC
•added 2021/02/25 12:0 a.m.•15 views

Vulnerabilities fixed in Cisco Nexus 9000 series

Cisco has fixed vulnerabilities in Nexus 9000 Series Fabric Switches. The vulnerabilities allow an unauthenticated remote malicious party able to cause a denial-of-service cause and to bypass a security measure. Cisco categorizes these vulnerabilities according to the CVSSv3 method with a highest...

8.6CVSS6.8AI score0.01476EPSS
SaveExploits0
NCSC
NCSC
•added 2021/02/17 12:0 a.m.•15 views

Vulnerability fixed in Red Hat kernel

Vulnerabilities have been fixed in the Red Hat kernel. The vulnerabilities allow a locally authenticated malicious agent to able to cause a denial-of-service and to launch a so-called chache-poisioning attack. -= Red Hat =- Red Hat has made updates available for Red Hat Enterprise Linux 8. You ca...

7.8CVSS7.7AI score0.06692EPSS
SaveExploits3
NCSC
NCSC
•added 2021/02/17 12:0 a.m.•15 views

Vulnerabilities fixed in Node.js

Vulnerabilities have been fixed in Node.js. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights Access to system data -= Red Hat =- Red Hat has...

9.8CVSS8.9AI score0.69062EPSS
SaveExploits10
NCSC
NCSC
•added 2020/10/15 12:0 a.m.•15 views

Multiple vulnerabilities fixed in McAfee ePolicy Orchestrator

McAfee has fixed multiple vulnerabilities in McAfee ePolicy Orchestrator. The vulnerabilities allow a malicious party whether or not unauthenticated malicious person may be able to launch attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS...

7.5CVSS8.2AI score0.86608EPSS
SaveExploits17
NCSC
NCSC
•added 2020/10/15 12:0 a.m.•15 views

Vulnerability fixed in Sonicwall

Due to a vulnerability in SonicOS, a remote malicious party can cause a Denial of Service DoS and potentially execute arbitrary code execute arbitrary code by sending a malicious request to the firewall. SonicWall has released updates to address the vulnerability. fix. For more information, see:...

9.8CVSS7.8AI score0.24563EPSS
SaveExploits0
NCSC
NCSC
•added 2020/09/10 12:0 a.m.•15 views

Vulnerabilities fixed in Android

Google has fixed several vulnerabilities in the Android operating system. The vulnerabilities allow a malicious person to able to perform attacks that can lead to the following types of damage: Remote code execution User rights. Access to sensitive data Increased user privileges Google has...

10CVSS6AI score0.02821EPSS
SaveExploits0
NCSC
NCSC
•added 2020/09/03 12:0 a.m.•15 views

Vulnerabilities fixed in Samsung Mobile

Samsung has fixed several vulnerabilities in its Android distribution. The vulnerabilities allow a malicious potentially able to carry out attacks leading to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Access to system data...

9.8CVSS8.6AI score0.03291EPSS
SaveExploits6
NCSC
NCSC
•added 2020/08/18 12:0 a.m.•15 views

Vulnerabilities fixed in Red Hat JBoss Enterprise Application Platform

Vulnerabilities have been fixed in Red Hat JBoss Enterprise Application Platform. The vulnerabilities allow a malicious person to able to perform attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data Bypassing authenticatio...

9.8CVSS8.6AI score0.08028EPSS
SaveExploits0
NCSC
NCSC
•added 2020/04/15 12:0 a.m.•15 views

Multiple vulnerabilities fixed in Oracle Java SE

Oracle has fixed several vulnerabilities in Oracle Java SE. A malicious party could potentially exploit the vulnerabilities to gain elevated privileges, to access potentially sensitive data or to launch a denial-of-service attack. An overview of the fixed vulnerabilities:...

8.3CVSS7.9AI score0.0623EPSS
SaveExploits0
NCSC
NCSC
•added 6 days ago•14 views

Flattening of vulnerability handling in SQLite through the SQLite Consortium

The SQLite Consortium has identified a vulnerability in SQLite version 3.41. This vulnerability relates to the expression evaluation logic of SQLite. An attacker can exploit this vulnerability remotely by submitting specially crafted malicious SQL statements. Exploitation may result in the...

6.1AI score0.00401EPSS
SaveExploits0References2
NCSC
NCSC
•added 2026/07/29 1:29 p.m.•14 views

Vulnerabilities present in VMware products

VMware has identified vulnerabilities in VMware vCenter and VMware ESX products. VMware vCenter contains a critical authentication-bypass vulnerability in the Directory Service, with the identifier CVE-2026-59309. This vulnerability allows a malicious individual with network access to VMware...

9.8CVSS6.2AI score0.0114EPSS
SaveExploits0References2
NCSC
NCSC
•added 2026/07/22 3:25 p.m.•14 views

Vulnerabilities found in Oracle MySQL Server and MySQL Cluster

Oracle has identified several vulnerabilities in Oracle MySQL Server and MySQL Cluster. These vulnerabilities apply to various versions of Oracle MySQL Server and MySQL Cluster. Some of these vulnerabilities enable attackers with high privileges and network access to cause Denial-of-Service attac...

8.5CVSS7.1AI score0.00463EPSS
SaveExploits0References2
NCSC
NCSC
•added 2026/07/13 9:26 a.m.•14 views

Vulnerabilities handled in the n8n workflow automation platform

n8n has identified several vulnerabilities in its workflow automation platform. These vulnerabilities include: - An authorization issue where authenticated users can assign workflows to folders within projects to which they do not have access, due to insufficient validation of request payloads...

8.8CVSS6.3AI score0.0038EPSS
SaveExploits0References9
NCSC
NCSC
•added 2026/06/24 9:1 a.m.•14 views

The vulnerabilities in libssh2 are addressed through libssh.

LibSSH has vulnerabilities in libssh2, including versions up to 1.11.1. The first vulnerability involves a denial-of-service attack during the pre-authentication phase, within the SSHMSGEXTINFO handler. A malicious SSH server can send a specially constructed extensioncount value, causing the clie...

9.2CVSS6.2AI score0.02027EPSS
SaveExploits14References2
NCSC
NCSC
•added 2026/06/19 6:52 a.m.•14 views

Vulnerabilities in Cisco Identity Services Engine

Cisco has addressed several vulnerabilities in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC. These vulnerabilities can be exploited by both authenticated and unauthenticated attackers. An authenticated attacker with administrative privileges can send special...

9.1CVSS6.2AI score0.00748EPSS
SaveExploits0References1
NCSC
NCSC
•added 2026/06/16 1:30 p.m.•14 views

Kwetsbaarheid verholpen in Cisco Catalyst SD-WAN Manager

Cisco has identified a vulnerability in the Cisco Catalyst SD-WAN Manager. This vulnerability resides in the web user interface of the Cisco Catalyst SD-WAN Manager and involves a directory traversal flaw. This flaw is caused by improper input validation during the file upload process. An...

6.5CVSS6AI score0.28171EPSS
SaveExploits2References1
NCSC
NCSC
•added 2026/05/12 5:53 p.m.•14 views

Vulnerabilities in Microsoft Azure

Microsoft has identified vulnerabilities in various Azure components. A malicious individual could exploit these vulnerabilities to impersonate other users, gain elevated privileges, execute arbitrary code, and potentially access sensitive data. The vulnerabilities with IDs CVE-2026-40379,...

10CVSS6.3AI score0.05378EPSS
SaveExploits0
NCSC
NCSC
•added 2026/05/06 9:18 a.m.•14 views

Vulnerabilities are being addressed in the Progress MOVEit Automation system.

Progress has addressed vulnerabilities in MOVEit Automation. The vulnerability with identifier CVE-2026-4670 involves a bypass of authentication in MOVEit Automation. A malicious individual without rights can exploit this vulnerability without any user interaction being required. The second...

9.8CVSS6AI score0.05633EPSS
SaveExploits0References1
NCSC
NCSC
•added 2026/04/04 1:49 p.m.•14 views

Vulnerability fixed in Fortinet's FortiClient EMS

Fortinet has fixed a vulnerability in FortiClient EMS. The vulnerability involves improper access controls in FortiClient EMS. Unauthenticated attackers can bypass security controls by sending specially crafted requests and execute unauthorized code or commands. The vulnerability can be exploited...

9.8CVSS6AI score0.8894EPSS
SaveExploits8References1
NCSC
NCSC
•added 2026/03/30 11:36 a.m.•14 views

Vulnerability fixed in Fortinet FortiClient EMS

Fortinet has fixed a vulnerability in FortiClient EMS version 7.4.4. The vulnerability with reference CVE-2026-21643 concerns a critical vulnerability in FortiClient EMS. The cause lies in the improper neutralization of special SQL commands, which allows an unauthenticated malicious person to...

9.8CVSS6.1AI score0.94085EPSS
SaveExploits1References1
NCSC
NCSC
•added 2026/03/26 9:50 a.m.•14 views

Vulnerabilities fixed in Cisco IOS XE Software

Cisco has fixed vulnerabilities in Cisco IOS XE Software, specifically for several products such as Catalyst 9000 Series Switches, Catalyst CW9800 Family, and Cisco Meraki. The vulnerabilities include several issues, such as a memory leak in the IKEv2 implementation, vulnerabilities in the DHCP...

8.6CVSS5.8AI score0.00354EPSS
SaveExploits0References11
NCSC
NCSC
•added 2026/03/12 2:42 p.m.•14 views

Vulnerabilities fixed in GitLab

GitLab fixed vulnerabilities in versions 18.9.2, 18.8.6 and 18.7.6 The vulnerabilities included several issues, including incorrect authorization checks that allowed authenticated users to access sensitive data, such as metadata from private repositories, and enabling denial-of-service situations...

8.7CVSS5.8AI score0.00523EPSS
SaveExploits0References1
NCSC
NCSC
•added 2026/03/11 9:19 a.m.•14 views

Vulnerabilities fixed in Fortinet FortiManager and FortiAnalyzer

Fortinet has fixed vulnerabilities in FortiAnalyzer and FortiManager including cloud variants. The vulnerability with reference CVE-2025-54820 is in FortiManager. This vulnerability allows a remote unauthenticated malicious person to execute unauthorized commands via a stack-based buffer overflow...

8.1CVSS6.3AI score0.0087EPSS
SaveExploits0References7
NCSC
NCSC
•added 2026/02/11 11:34 a.m.•14 views

Vulnerabilities fixed in Fortinet FortiOS

Fortinet has fixed vulnerabilities in FortiOS Versions 7.0 to 7.6.4, 7.4.0 to 7.4.9, and 7.2.0 to 7.2.11. The vulnerabilities include an Authentication Bypass that allows unauthenticated attackers to bypass LDAP authentication for Agentless VPN or FSSO policies, depending on specific configuratio...

8.1CVSS5.8AI score0.01365EPSS
SaveExploits2References4
NCSC
NCSC
•added 2026/02/11 11:34 a.m.•14 views

Vulnerabilities fixed in Fortinet FortiSandbox, FortiAuthenticator and FortiClient

Fortinet has fixed vulnerabilities in FortiSandbox versions 4.4.8 and 5.0.5, FortiAuthenticator versions 6.3 to 6.6.6 and FortiClient versions 7.0, 7.2 and 7.4. The vulnerability in FortiSandbox involves Cross-site Scripting, which allows unauthenticated attackers to execute arbitrary commands vi...

9.6CVSS6AI score0.06289EPSS
SaveExploits0References3
NCSC
NCSC
•added 2026/02/10 7:5 p.m.•14 views

Vulnerability fixed in Microsoft SQL Server

Microsoft has fixed a vulnerability in SQL Server Power BI. A malicious party could exploit the vulnerability to execute arbitrary code on the vulnerable SQL Server. Microsoft has made updates available that fix the described vulnerability. We recommend that you install these updates. More...

8.8CVSS6.4AI score0.00902EPSS
SaveExploits0
NCSC
NCSC
•added 2026/02/09 10:41 a.m.•14 views

Vulnerability fixed in PEAR

PEAR has fixed a vulnerability in version 1.33.0. The vulnerability is in how the pregreplace function handles the /e modifier. This poses a risk of unauthorized code execution, which could compromise the integrity of applications using this framework. The patch fixes this problem by ensuring tha...

9.8CVSS5.9AI score0.00395EPSS
SaveExploits0References1
NCSC
NCSC
•added 2026/01/21 2:15 p.m.•14 views

Vulnerability fixed in GNU Inetutils telnetd

Security researchers have found a a vulnerability in Inetutils telnetd version 2.7. This vulnerability has been present since version 1.9.3 that came out in 2015, according to the researchers. The vulnerability is in the way the telnetd service handles the USER environment variable. By setting th...

9.8CVSS5.7AI score0.97878EPSS
SaveExploits63References4
NCSC
NCSC
•added 2026/01/09 11:11 a.m.•14 views

Vulnerabilities fixed in GitLab

GitLab has fixed vulnerabilities in GitLab CE/EE. The vulnerabilities include several issues, including the ability for authenticated users to abuse external API calls, which could lead to a Denial-of-Service. In addition, GraphQL allowed authenticated users to make unauthorized changes to projec...

9.6CVSS6.5AI score0.0063EPSS
SaveExploits0References1
NCSC
NCSC
•added 2025/12/15 9:6 a.m.•14 views

Vulnerabilities fixed in Apple macOS

Apple has fixed vulnerabilities in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3 and macOS Tahoe 26.2. The vulnerabilities covered a wide range of issues, including memory corruption, logging problems, and unauthorized access to sensitive user data. These vulnerabilities could be exploited by malicio...

9.8CVSS6.8AI score0.32483EPSS
SaveExploits16References3
NCSC
NCSC
•added 2025/11/18 9:1 a.m.•14 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in Chrome Specifically for versions prior to 142.0.7444.175. The vulnerabilities are in Google Chrome's V8 engine and allow remote attackers to exploit heap corruption via specially crafted HTML pages, which can lead to unauthorized actions, such as access to...

8.8CVSS6.9AI score0.04915EPSS
SaveExploits1References1
NCSC
NCSC
•added 2025/11/18 7:3 a.m.•14 views

Vulnerabilities fixed in IBM AIX

IBM has fixed vulnerabilities in IBM AIX versions 7.2 and 7.3, as well as in IBM VIOS versions 3.1 and 4.1. The vulnerabilities are related to the insecure storage of NIM private keys, making systems vulnerable to man-in-the-middle attacks. Attackers can also send specially crafted URL requests,...

10CVSS7.3AI score0.00655EPSS
SaveExploits0References1
NCSC
NCSC
•added 2025/11/18 7:2 a.m.•14 views

Vulnerabilities fixed in Zoom Workplace and Zoom Clients

Zoom has fixed vulnerabilities in Zoom Workplace and Zoom Clients Specifically for versions prior to 6.5.10. The vulnerabilities include improper validation of certificates, cross-site scripting, and improper handling of sensitive information, which can lead to unauthorized access and information...

9.8CVSS6.5AI score0.00411EPSS
SaveExploits0References9
NCSC
NCSC
•added 2025/11/11 6:31 p.m.•14 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code in the victim's context and gain access to sensitive data. Successful exploitation requires the malicious party to tric...

9.8CVSS6.6AI score0.05923EPSS
SaveExploits0
NCSC
NCSC
•added 2025/10/23 1:35 p.m.•14 views

Vulnerabilities fixed in Oracle Financial Services

Oracle has fixed vulnerabilities in Oracle Financial Services components. The vulnerabilities allow unauthenticated attackers to gain unauthorized access to sensitive data over HTTP. This can lead to unauthorized access and modification of critical data, with a CVSS score of 9.8 highlighting the...

9.8CVSS7.2AI score0.74866EPSS
SaveExploits9References1
NCSC
NCSC
•added 2025/10/23 7:19 a.m.•14 views

Vulnerabilities fixed in Oracle Database products

Oracle fixed vulnerabilities in Oracle Database Server products Vulnerabilities in Oracle Database Server allow unauthenticated attackers to gain unauthorized access to critical data, which can lead to breaches of data confidentiality, integrity and availability. Specific vulnerabilities, such as...

9.8CVSS7.6AI score0.67267EPSS
SaveExploits14References1
NCSC
NCSC
•added 2025/10/17 10:44 a.m.•14 views

Vulnerabilities fixed in Adobe Experience Manager

Adobe has fixed vulnerabilities in Adobe Experience Manager versions 6.5.23 and earlier. The vulnerabilities are in the configuration of Adobe Experience Manager, which allows attackers to execute arbitrary code without any user interaction. This can lead to unauthorized access and control of...

10CVSS8AI score0.87515EPSS
SaveExploits7References1
NCSC
NCSC
•added 2025/10/17 8:19 a.m.•14 views

Vulnerability fixed in WatchGuard Fireware OS

WatchGuard has fixed a vulnerability in Fireware OS Specific to certain VPN configurations. The vulnerability is in the way Fireware OS handles Out-of-bounds Write. This allows a malicious, unauthenticated attacker to execute arbitrary code. This could lead to serious consequences for affected...

9.8CVSS7.4AI score0.91121EPSS
SaveExploits5References1
NCSC
NCSC
•added 2025/10/14 6:21 p.m.•14 views

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer Tools. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, bypass security measures and gain access to sensitive data. The most serious vulnerability has been assigned CVE-2025-55315 and is located i...

9.9CVSS6.5AI score0.65838EPSS
SaveExploits5
NCSC
NCSC
•added 2025/10/14 6:13 p.m.•14 views

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user and potentially grant themselves elevated privileges, in order to gain access to sensitive data or execute arbitrary code with elevated privileges. The...

9.8CVSS7.3AI score0.07159EPSS
SaveExploits0
Total number of security vulnerabilities4249