Lucene search
+L
NcscMost viewed

4362 matches found

NCSC
NCSC
added 2023/07/13 12:00 a.m.15 views

Vulnerabilities fixed in Schneider Electric EcoStruxture components

Schneider Electric has fixed vulnerabilities in StruxtureWare Datacenter Expert and EcoStruxture OPC UA Server Expert. an authenticated malicious person could exploit the vulnerabilities to gain access to sensitive data or execute arbitrary commands execute arbitrary commands for which it is not...

8.8CVSS7.7AI score0.0086EPSS
SaveExploits0
NCSC
NCSC
added 2023/07/11 12:00 a.m.15 views

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution Administrator/Root rights Remote...

9.8CVSS7.4AI score0.43409EPSS
SaveExploits7
NCSC
NCSC
added 2023/07/03 12:00 a.m.15 views

Vulnerabilities fixed in Citrix ADC and Gateway

Citrix has fixed vulnerabilities in ADC and Gateway. A malicious party could exploit the vulnerabilities to gain access to system data, or to perform a cross-site scripting attack. Such an attack could result in execution of code in the victim's browser. To access system data, the malicious party...

7.5CVSS8.9AI score0.80907EPSS
SaveExploits3
NCSC
NCSC
added 2023/06/23 12:00 a.m.15 views

Vulnerabilities fixed in IBM Qradar

IBM has fixed vulnerabilities in QRadar. An authenticated malicious party can exploit the vulnerabilities to launch attacks execute attacks that could result in the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Remote code execution User Rights Access to system...

9.8CVSS7AI score0.19781EPSS
SaveExploits3
NCSC
NCSC
added 2023/06/22 12:00 a.m.15 views

Vulnerability fixed in Juniper JunOS

Juniper has fixed a vulnerability in JunOS. A unauthenticated malicious person could exploit the vulnerability to cause cause a denial-of-service. The vulnerability is in the way BGP traffic is handled. In specific circumstances, a BGP update can result in the disconnection of the connection...

7.5CVSS6.9AI score0.00645EPSS
SaveExploits0
NCSC
NCSC
added 2023/06/16 12:00 a.m.15 views

Vulnerability fixed in ESET Security products

ESET has fixed a vulnerability in the following Security products for Linux and macOS: Server Security for Linux Endpoint Antivirus for Linux Cyber Security Endpoint Antivirus for macOS A local malicious agent can exploit the vulnerability to grant themselves elevated privileges and execute code...

7.8CVSS7.1AI score0.00148EPSS
SaveExploits0
NCSC
NCSC
added 2023/06/16 12:00 a.m.15 views

Fixed vulnerabilities in Microsoft ODBC driver for SQL Server

Microsoft has fixed vulnerabilities in the ODBC Driver for SQL Server. A malicious party could exploit the vulnerabilities to execute arbitrary code on the vulnerable system. To exploit the vulnerabilities, the malicious party must have a rogue SQL server and trick the victim into connecting...

7.8CVSS7.8AI score0.00722EPSS
SaveExploits0
NCSC
NCSC
added 2023/06/15 12:00 a.m.15 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in Chrome. A malicious person could exploit the vulnerabilities to cause a denial-of-service cause or potentially execute arbitrary code with privileges of the victim. Google has released updates to fix the vulnerabilities in Chrome 114.0.5735.133 for linux and...

8.8CVSS7.8AI score0.13813EPSS
SaveExploits0
NCSC
NCSC
added 2023/05/30 12:00 a.m.15 views

Vulnerabilities fixed in Dell EMC Powerpath

Dell has fixed vulnerabilities in Powerpath. A local malicious person could exploit the vulnerabilities to grant themselves elevated privileges and execute code with SYSTEM privileges, or to gain access to the license key and thereby perform unauthorized new installations. Dell has released updat...

7.8CVSS7.6AI score0.00176EPSS
SaveExploits0
NCSC
NCSC
added 2023/05/09 12:00 a.m.15 views

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Circumvention of security measure. Remote code execution Administrator/Root rights Remote code execution User...

9.8CVSS7.9AI score0.94683EPSS
SaveExploits3
NCSC
NCSC
added 2023/05/08 12:00 a.m.15 views

Vulnerability fixed in GitLab Enterprise Edition and Community Edition

GitLab has fixed a vulnerability in GitLab Enterprise Edition EE and Community Edition CE. A malicious person with user privileges could exploit the vulnerability to use a GraphQL endpoint to install rogue runners in any project within the environment and thus execute arbitrary code execute. GitL...

9.6CVSS7.2AI score0.05042EPSS
SaveExploits0
NCSC
NCSC
added 2023/05/08 12:00 a.m.15 views

Vulnerability fixed in OPC Foundation .NET Reference Server

OPC Foundation has fixed a vulnerability in .NET Reference Server. An unauthenticated malicious person could exploit it to cause a denial-of-service. OPC Foundation has released updates to fix the vulnerability fix in OPC .NET Reference Server 1.4.371.86. For more information, see:...

7.5CVSS6.9AI score0.01047EPSS
SaveExploits1
NCSC
NCSC
added 2023/04/20 12:00 a.m.15 views

Vulnerabilities fixed in Oracle Peoplesoft

Vulnerabilities have been fixed in Oracle PeopleSoft. The vulnerabilities allow a malicious party to carry out attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Access to sensitive data...

10CVSS7.7AI score0.81039EPSS
SaveExploits8
NCSC
NCSC
added 2023/04/19 12:00 a.m.15 views

Vulnerabilities fixed in Oracle Essbase

Oracle has fixed vulnerabilities in Oracle Essbase. The vulnerabilities allow a malicious party to cause a denial-of-service DoS or to gain access to sensitive data. ------------------.------.------------------------------------- | CVE ID | CVSS | Vector |...

9.8CVSS6.6AI score0.04494EPSS
SaveExploits7
NCSC
NCSC
added 2023/04/12 12:00 a.m.15 views

Vulnerabilities fixed in Adobe Dimension

Adobe has fixed vulnerabilities in Dimension. A malicious person could exploit the vulnerabilities to gain access to sensitive data in the victim's context, or to execute arbitrary code execute arbitrary code with the victim's privileges. To do this, the malicious party must trick the victim into...

7.8CVSS8AI score0.00345EPSS
SaveExploits0
NCSC
NCSC
added 2023/04/12 12:00 a.m.15 views

Vulnerability fixed in Adobe InCopy

Adobe has fixed a vulnerability in InCopy. A malicious person could exploit the vulnerability to execute arbitrary code with the victim's privileges. To do so, the malicious party must trick the victim into opening a malicious file to open. Adobe has released updates to fix the vulnerability in...

7.8CVSS7.3AI score0.00365EPSS
SaveExploits0
NCSC
NCSC
added 2023/04/12 12:00 a.m.15 views

Vulnerabilities fixed in Schneider Electric Modicon components

Schneider Electric has fixed vulnerabilities in several Modicon components. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or to manipulate the operation of the vulnerable components. To do this, however, the malicious party must have access to the production...

8.8CVSS7AI score0.00883EPSS
SaveExploits0
NCSC
NCSC
added 2023/04/11 12:00 a.m.15 views

Fixed vulnerabilities in HP Laserjet printers and multifunctionals

Hewlett Packard has fixed vulnerabilities in the firmware of several HP Laserjet, Color Laserjet and Laserjet Pro printers and multifunction devices. An unauthenticated malicious person with access to the local network could exploit the vulnerabilities to cause a denial-of-service cause, or to...

9.8CVSS7.9AI score0.01499EPSS
SaveExploits0
NCSC
NCSC
added 2023/04/11 12:00 a.m.15 views

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in the Azure components Service Connector and Machine Learning. A malicious party could exploit the vulnerabilities to bypass internal firewall rules, or to gain access to logging data. The malicious party must be authenticated with the appropriate...

7.5CVSS6.3AI score0.01503EPSS
SaveExploits0
NCSC
NCSC
added 2023/04/03 12:00 a.m.15 views

Vulnerabilities fixed in IBM Aspera Cargo and Connect

IBM has fixed vulnerabilities in Aspera Connect and Aspera Cargo. A local malicious party could exploit the vulnerabilities to cause a Buffer overflow. This usually leads to a Denial-of-Service, but can also lead to execution of arbitrary code on the system. The malicious party does not need prio...

9.8CVSS6.8AI score0.00656EPSS
SaveExploits0
NCSC
NCSC
added 2023/03/31 12:00 a.m.15 views

Vulnerabilities fixed in GitLab Enterprise and Community Editions

GitLab has fixed several vulnerabilities in GitLab Enterprise and Community Editions. A malicious person with access to the development environment could exploit the vulnerabilities to launch attacks execute attacks that can result in the following categories of damage: Cross-Site Scripting XSS...

9.8CVSS6.8AI score0.01242EPSS
SaveExploits1
NCSC
NCSC
added 2023/03/28 12:00 a.m.15 views

Vulnerabilities fixed in Apple macOS

Apple has fixed several vulnerabilities in macOS. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root rights Remote...

9.8CVSS7.6AI score0.1654EPSS
SaveExploits8
NCSC
NCSC
added 2023/03/27 12:00 a.m.15 views

Vulnerabilities fixed in Apache OpenOffice

Apache has fixed vulnerabilities in OpenOffice. A malicious party can exploit the vulnerabilities to execute arbitrary code execute arbitrary code in the context of the application, with permissions from the victim. To do this, the malicious party must trick the victim into opening a malicious fi...

8.1CVSS9.1AI score0.02208EPSS
SaveExploits0
NCSC
NCSC
added 2023/03/16 12:00 a.m.15 views

Vulnerabilities fixed in Aruba Clearpass Policy Manager

Aruba Networks has fixed vulnerabilities in Clearpass Policy Manager. The vulnerabilities are located in the web-based management interface of CPPM and allow a malicious person to access gain access to sensitive data, execute arbitrary code on the underlying system or, through a chain of actions,...

9.8CVSS7.2AI score0.00961EPSS
SaveExploits0
NCSC
NCSC
added 2023/03/07 12:00 a.m.15 views

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. Also fixed vulnerabilities in closed-source parts of Android that are developed by third parties, such as Qualcomm, Unisoc and Mediatek. The vulnerabilities potentially enable a malicious party to perform attacks that result in the following categories...

9.8CVSS7.1AI score0.01465EPSS
SaveExploits1
NCSC
NCSC
added 2023/03/01 12:00 a.m.15 views

Vulnerabilities fixed in ForgeRock Web Agents and Java Agents

ForgeRock has fixed vulnerabilities in Web Agents and Java Agents. An unauthenticated remote malicious agent could potentially exploit the vulnerabilities potentially exploit them to bypass authentication, gain access to sensitive data or execute arbitrary code execute arbitrary code. ForgeRock h...

9.8CVSS7.5AI score0.00973EPSS
SaveExploits0
NCSC
NCSC
added 2023/02/03 12:00 a.m.15 views

Vulnerabilities fixed in GitLab CE and EE

Vulnerabilities have been fixed in GitLab Enterprise Edition EE and Community Edition CE. The vulnerabilities potentially enable a malicious party to perform a Cross-Site Request Forgery XSRF and/or a possible denial-of-service DoS exploit. GitLab has released updates to fix the vulnerabilities i...

8.1CVSS7AI score0.01247EPSS
SaveExploits0
NCSC
NCSC
added 2023/01/31 12:00 a.m.15 views

Vulnerabilities fixed in Schneider Electric EcoStruxure and Modicon products

Vulnerabilities have been fixed in Schneider Electric products. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS. Bypassing authentication Remote code execution User Rights Schneider Electric has issued update...

9.8CVSS7.5AI score0.01455EPSS
SaveExploits0
NCSC
NCSC
added 2023/01/24 12:00 a.m.15 views

Vulnerabilities fixed in Apple macOS

Apple has fixed several vulnerabilities in macOS Big Sur, Monterey and Ventura. A malicious party could exploit them to cause a denial-of-service, access gain access to sensitive data or execute code with privileges from the system. To execute code with system privileges, the malicious party tric...

9.8CVSS6.9AI score0.04448EPSS
SaveExploits3
NCSC
NCSC
added 2023/01/18 12:00 a.m.15 views

Vulnerabilities fixed in Oracle Fusion Middleware

Oracle has fixed vulnerabilities in Fusion Middleware products, including WebLogic Server and HTTP Server. A unauthenticated malicious person could potentially exploit them to execute arbitrary code. To do so, it would need to malicious network traffic should be sent to the vulnerable system. sen...

10CVSS7.9AI score0.99931EPSS
SaveExploits48
NCSC
NCSC
added 2023/01/13 12:00 a.m.15 views

Vulnerabilities fixed in Dell PowerEdge

Dell has fixed vulnerabilities in PowerEdge Server based on the AMD EPYC platform. The vulnerabilities allow a local malicious party to cause a denial-of-service, access gain access to sensitive data or potentially execute code. Dell has released updates to fix the vulnerabilities. For more...

8.8CVSS7.1AI score0.00616EPSS
SaveExploits0
NCSC
NCSC
added 2023/01/10 12:00 a.m.15 views

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in several products. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Circumvention of security measure. Remote code execution User Rights SQL...

9.9CVSS7.5AI score0.01039EPSS
SaveExploits0
NCSC
NCSC
added 2023/01/03 12:00 a.m.15 views

Vulnerability fixed in MISP

A vulnerability has been fixed in MISP. The vulnerability allows an authenticated malicious person to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the application being visited. CIRCL has released an...

6.1CVSS6.6AI score0.00415EPSS
SaveExploits0
NCSC
NCSC
added 2022/12/23 12:00 a.m.15 views

Vulnerability fixed in HP OfficeConnect 1820 and 1850 switches

HPO has fixed a vulnerability in the firmware of its OfficeConnect 1820 and 1850 switches. An unauthenticated malicious party could, by exploiting the vulnerability, perform a directory traversal and thereby gain access to system data. This data could potentially be used to setting up further...

7.5CVSS6.9AI score0.01765EPSS
SaveExploits0
NCSC
NCSC
added 2022/12/23 12:00 a.m.15 views

Vulnerability fixed in Juniper JunOS

Juniper has fixed a vulnerability in JunOS and JunOS Evolved. The vulnerability allows an unauthenticated malicious person at remote user to cause a denial-of-service by sending a sending a rogue BGP message. To do this, the malicious party must have built a valid BGP session. The vulnerability i...

7.5CVSS6.9AI score0.00665EPSS
SaveExploits0
NCSC
NCSC
added 2022/12/22 12:00 a.m.15 views

Vulnerabilities fixed in Mattermost

Unspecified vulnerabilities have been fixed in MatterMost. Mattermost has not released any substantive information released, but estimates the severity of the vulnerabilities as MEDIUM. The grading of this security advisory is accordingly accordingly. MatterMost indicates in accordance with their...

6.8AI score
SaveExploits0
NCSC
NCSC
added 2022/12/21 12:00 a.m.15 views

Vulnerability fixed in Dell Openmanage

A vulnerability has been fixed in Dell Openmanage Server Administrator OMSA. An authenticated malicious party can exploit the exploit the vulnerability to grant themselves elevated privileges on the vulnerable system and thereby execute arbitrary code with privileges of the system. This...

7.8CVSS7.2AI score0.00186EPSS
SaveExploits0
NCSC
NCSC
added 2022/12/09 12:00 a.m.15 views

Vulnerability fixed in Cisco IP phones

Cisco has fixed a vulnerability in the firmware for Cisco IP phones series 7800 and 8800. An unauthenticated malicious person with access to the phone network could exploit the vulnerability to cause cause a stack overflow on the vulnerable device. With this causes a denial-of-service and allows...

8.8CVSS7.9AI score0.06099EPSS
SaveExploits0
NCSC
NCSC
added 2022/12/01 12:00 a.m.15 views

Vulnerabilities fixed in Zimbra Collaboration

Zimbra has fixed vulnerabilities in Zimbra Collaboration. A malicious party could exploit the vulnerabilities to use a Cross-site scripting attack to gain access to sensitive data, or to execute arbitrary code on the system. To execute arbitrary code, the malicious party needs prior authenticatio...

8.6CVSS9.4AI score0.21079EPSS
SaveExploits1
NCSC
NCSC
added 2022/11/25 12:00 a.m.15 views

Vulnerability fixed in IBM DB2

A vulnerability has been fixed in IBM DB2. This vulnerability allows a malicious party to perform a denial-of-service DoS cause by using the db2expln tool and entering an incorrect SQL statement into it. IBM has made an update available to fix the vulnerability. fix. For more information, see:...

6.5CVSS7.3AI score0.0133EPSS
SaveExploits0
NCSC
NCSC
added 2022/11/09 12:00 a.m.15 views

Vulnerabilities fixed in Intel Products

Intel has fixed vulnerabilities in the firmware of chipsets from Active Management Technology AMT, Server Platform Services SPS, and PROSet/Wireless WiFi. The vulnerabilities allow a malicious able to perform a denial-of-service DoS or obtain elevated user privileges. Intel has released updates t...

9.8CVSS7AI score0.00698EPSS
SaveExploits0
NCSC
NCSC
added 2022/11/03 12:00 a.m.15 views

Vulnerabilities fixed in GitLab enterPrise Edition and Community Edition

GitLab has fixed several vulnerabilities in GitLab Enterprise Edition and Community Edition. An authenticated malicious person can exploit the vulnerabilities for attacks that can result in the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Circumvention of...

9CVSS6.9AI score0.86326EPSS
SaveExploits2
NCSC
NCSC
added 2022/10/25 12:00 a.m.15 views

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed vulnerabilities in iOS and iPadOS. The vulnerabilities potentially allow a malicious person to launch attacks execute attacks that result in the following categories of damage: Manipulation of data Circumvention of security measure Remote code execution Administrator/Root rights...

9.8CVSS7.9AI score0.02156EPSS
SaveExploits0
NCSC
NCSC
added 2022/10/13 12:00 a.m.15 views

Vulnerabilities fixed in Bentley View and MicroStation

Vulnerabilities have been fixed in Bentley View and MicroStation. The vulnerabilities allow a malicious party to access system data and to execute arbitrary code under the user's privileges. To do this, the malicious party must trick the victim into running open a rogue SKP, XMT, or FBX file. It ...

7.8CVSS7.5AI score0.00683EPSS
SaveExploits2
NCSC
NCSC
added 2022/10/06 12:00 a.m.15 views

Vulnerabilities fixed in Cisco TelePresence

Cisco has fixed vulnerabilities in Telepresence Video Communication Server and Touch10 systems. A malicious party could exploit the vulnerabilities in the Telepresence VCS exploited to gain access to sensitive information through cause a Cross-Site-Request-Forgery or a Denial-of-Service. cause...

7.4CVSS6.8AI score0.0091EPSS
SaveExploits0
NCSC
NCSC
added 2022/10/04 12:00 a.m.15 views

Vulnerabilities fixed in SUSE Linux Enterprise

Vulnerabilities have been fixed in the Linux kernel as used by SUSE Linux Enterprise. A local, authenticated malicious party can exploit the vulnerabilities to execute arbitrary code, causing a denial-of-service or obtaining elevated privileges. SUSE has made updates available to fix the...

7.8CVSS5.8AI score0.00928EPSS
SaveExploits1
NCSC
NCSC
added 2022/10/03 12:00 a.m.15 views

Vulnerabilities fixed in IBM Tivoli Monitoring

IBM has fixed vulnerabilities in Tivoli Monitoring. The vulnerabilities are in underlying software, such as Java Runtime, zlib and Eclipse and allow a malicious person to cause a denial-of-service, or to gain access to sensitive data. IBM has released updates to fix the vulnerabilities in Tivoli...

7.5CVSS8.1AI score0.51733EPSS
SaveExploits1
NCSC
NCSC
added 2022/09/27 12:00 a.m.15 views

Vulnerability fixed in Grafana

A vulnerability has been fixed in Grafana. The vulnerability allows a remote malicious person to obtain elevated privileges. obtain. Grafana has released updates to fix the vulnerability. More information can be found on the page below: https://github.com/grafana/grafana/security/advisories...

7.6CVSS9.2AI score0.00749EPSS
SaveExploits0
NCSC
NCSC
added 2022/09/26 12:00 a.m.15 views

Vulnerabilities fixed in HPE Integrated Lights-Out (ILO)

Vulnerabilities have been fixed in HPE Integrated Lights-Out ILO. The vulnerabilities allow a malicious party to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Access to system data For all vulnerabilities...

8.8CVSS7.6AI score0.00578EPSS
SaveExploits0
NCSC
NCSC
added 2022/09/09 12:00 a.m.15 views

Vulnerabilities fixed in Aruba ClearPass Policy Manager

Aruba has fixed vulnerabilities in ClearPass Policy Manager CPPM. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Denial-of-Service DoS. Remote code execution Administrator/Roo...

8.8CVSS8.2AI score0.01577EPSS
SaveExploits0
Total number of security vulnerabilities4362