Lucene search
+L
NcscMost viewed

4298 matches found

NCSC
NCSC
•added 2023/08/09 12:00 a.m.•6 views

Vulnerability fixed in AMD processors

A vulnerability has been fixed in the microcode of AMD processors. The vulnerability has been named "Inception" and enables a local, authenticated malicious person to manipulate the operation of the Predictive Algorithms, which could circumvent measures in place to prevent unauthorized instructio...

4.7CVSS6.7AI score0.07302EPSS
SaveExploits1
NCSC
NCSC
•added 2023/08/09 12:00 a.m.•6 views

Vulnerability fixed in Intel processors

A vulnerability has been fixed in the microcode of several Intel processors1. The vulnerability has been named "Downfall" and allows a local, authenticated malicious person to manipulate the operation of memory optimization. This allows the malicious party to gain access to memory locations...

6.5CVSS6.4AI score0.03022EPSS
SaveExploits1
NCSC
NCSC
•added 2023/07/27 12:00 a.m.•6 views

Vulnerabilities fixed in Paessler PRTG

Paessler has fixed vulnerabilities in PRTG Network Monitoring. An authenticated malicious party could exploit the vulnerabilities to bypass a security measure, or perform a Cross-Site-Request-Forgery CSRF, and thereby potentially execute arbitrary execute arbitrary code and gain access to sensiti...

7.6AI score
SaveExploits0
NCSC
NCSC
•added 2023/07/13 12:00 a.m.•6 views

Vulnerability fixed in Ghostscript

Artifex has fixed a vulnerability in Ghostscript. A malicious party could exploit the vulnerability to be able to execute arbitrary be able to execute arbitrary commands with permissions from the Ghostscript process. To do this, the malicious party must trick the victim into opening a rogue file...

7.8CVSS7.2AI score0.03236EPSS
SaveExploits4
NCSC
NCSC
•added 2023/07/10 12:00 a.m.•6 views

Vulnerabilities fixed in IBM DB2

IBM has fixed vulnerabilities in DB2. A malicious party can exploit the exploit the vulnerabilities to execute arbitrary code with privileges of the application, or to grant itself locally elevated privileges granted. IBM has released updates to fix the vulnerabilities in DB2. For more informatio...

8.8CVSS7.8AI score0.01641EPSS
SaveExploits0
NCSC
NCSC
•added 2023/07/04 12:00 a.m.•6 views

Vulnerabilities fixed in IBM Integration Bus

IBM has fixed vulnerabilities in Integration Bus. A malicious party could exploit the vulnerabilities to execute arbitrary code execute application privileges, or to access gain access to system data. IBM has released updates to fix the vulnerabilities in Integration Bus 10.1.0.1 Interim fix. For...

9.8CVSS7.4AI score0.04306EPSS
SaveExploits0
NCSC
NCSC
•added 2023/06/22 12:00 a.m.•6 views

Vulnerabilities fixed in Node.js

Vulnerabilities have been fixed in Node.js. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Denial-of-Service DoS. Manipulation of data Circumvention of security measure Increased user privileges Node.js has released updates...

7.7CVSS7.7AI score0.03906EPSS
SaveExploits1
NCSC
NCSC
•added 2023/05/19 12:00 a.m.•6 views

Vulnerability fixed in CUPS

OpenPrinting has fixed a vulnerability in CUPS. A malicious person with access to the print server, and the ability to create printers, could exploit the vulnerability to execute arbitrary code with print server privileges. OpenPrinting has released updates to fix the vulnerability fix in CUPS. F...

8.8CVSS7.3AI score0.03697EPSS
SaveExploits1
NCSC
NCSC
•added 2023/04/28 12:00 a.m.•6 views

Vulnerability fixed in IBM Websphere Application Server

IBM has fixed a vulnerability in the management interface of Websphere Application Server. A malicious person with access to this interface could exploit the vulnerability to launch a Cross-Site Scripting XSS attack. Such an attack can lead to execution of arbitrary code in the context of the...

6.1CVSS6.6AI score0.00399EPSS
SaveExploits0
NCSC
NCSC
•added 2023/04/20 12:00 a.m.•6 views

Vulnerability fixed in Schneider Electric PowerLogic

Schneider Electric has fixed a vulnerability in PowerLogic HDPM6000. A malicious party could exploit the vulnerability to cause a denial-of-service DoS, or possibly to execute arbitrary execute arbitrary code on the vulnerable system, by sending specially prepared Ethernet packets. To send the...

9.8CVSS7.8AI score0.01118EPSS
SaveExploits0
NCSC
NCSC
•added 2023/04/12 12:00 a.m.•6 views

Vulnerabilities fixed in Mozilla Firefox and Thunderbird

Mozilla has fixed vulnerabilities in Firefox and Thunderbird. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure. Remote code execution User rights Spoofi...

9.8CVSS7.6AI score0.00974EPSS
SaveExploits0
NCSC
NCSC
•added 2023/04/06 12:00 a.m.•6 views

Vulnerabilities fixed in IBM QRadar SIEM

IBM fixed vulnerabilities in subcomponents of QRadar SIEM: Data Synchronization App, Use Case Manager app, QRadar Assistant app, Data Synchronization app and Wincollect agent. A malicious party can exploit the vulnerabilities to cause a denial-of-service, to gain access to sensitive data, or to...

9.8CVSS9.6AI score0.0552EPSS
SaveExploits8
NCSC
NCSC
•added 2023/03/13 12:00 a.m.•6 views

Vulnerabilities fixed in Redis

Redis has fixed two vulnerabilities. A malicious party can exploit the exploit the vulnerabilities to cause a denial-of-service. Because Redis is widely used as a message broker to support of information exchange processes, the consequence of a Denial-of-Service on the Redis service cannot be...

6.5CVSS7AI score0.60532EPSS
SaveExploits0
NCSC
NCSC
•added 2023/02/23 12:00 a.m.•6 views

Vulnerabilities fixed in Foxit PDF Reader and Foxit PDF Editor

Foxit has fixed several vulnerabilities in PDF reader and PDF Editor. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or potentially execute arbitrary code execute arbitrary code with the victim's privileges. The malicious party must trick the deceive the victim...

7.8AI score
SaveExploits0
NCSC
NCSC
•added 2023/02/23 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome and Chromium

Google has fixed several vulnerabilities in Chrome. A remote malicious person can exploit the vulnerabilities to perform execute attacks that can lead to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data To exploit the...

8.8CVSS9.7AI score0.00668EPSS
SaveExploits0
NCSC
NCSC
•added 2023/02/09 12:00 a.m.•6 views

Vulnerabilities fixed in IBM DB2

IBM has fixed vulnerabilities in DB2. A malicious person could exploit the vulnerabilities to cause a denial-of-service, or to gain access to sensitive data. IBM has released updates to fix the vulnerabilities in DB2 10.5, 11.1 and 11.5. For more information and the related FixPacks, see:...

7.5CVSS6.8AI score0.00739EPSS
SaveExploits0
NCSC
NCSC
•added 2023/02/03 12:00 a.m.•6 views

Vulnerability fixed in Trend Micro Apex One

A vulnerability has been fixed in Trend Micro Apex One. A unauthenticated remote malicious person can exploit the vulnerability exploit it to cause a denial-of-service DoS. Trend Micro has released updates to fix the vulnerability. fix. For more information, see:...

9.1CVSS6.8AI score0.59585EPSS
SaveExploits0
NCSC
NCSC
•added 2023/01/11 12:00 a.m.•6 views

Vulnerabilities fixed in Microsoft Exchange Server

Microsoft has fixed vulnerabilities in Exchange Server. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Accessing sensitive data. Impersonating another user spoofing Obtaining elevated privileges The vulnerability...

8CVSS6.2AI score0.01595EPSS
SaveExploits0
NCSC
NCSC
•added 2022/12/22 12:00 a.m.•6 views

Vulnerabilities fixed in Mattermost

Unspecified vulnerabilities have been fixed in MatterMost. Mattermost has not released any substantive information released, but estimates the severity of the vulnerabilities as MEDIUM. The grading of this security advisory is accordingly accordingly. MatterMost indicates in accordance with their...

6.8AI score
SaveExploits0
NCSC
NCSC
•added 2022/12/15 12:00 a.m.•6 views

Vulnerabilities fixed in X.Org X Server

Vulnerabilities have been fixed in X.Org X Server. The vulnerabilities potentially enable a malicious party to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Increased user privileges Misuse of the...

8.8CVSS8AI score0.02685EPSS
SaveExploits0
NCSC
NCSC
•added 2022/12/08 12:00 a.m.•6 views

Vulnerability fixed in Cacti

Vulnerabilities have been fixed in Cacti. The vulnerabilities allow a malicious party to access system data and to execute arbitrary code under the user's privileges. An unauthenticated malicious party can gain access to the remoteagent.php file. By bypassing the authentication of this file...

9.8CVSS7.8AI score0.99826EPSS
SaveExploits48
NCSC
NCSC
•added 2022/11/28 12:00 a.m.•6 views

Vulnerability fixed in Erlang OTP

Erlang developers have fixed a vulnerability in Erlang OTP. A malicious party could exploit the vulnerability to gain access to sensitive data, when using Erlang SSL in combination with client authentication. Erlang has released updates to fix the vulnerability in OTP 25.1; for more information,...

9.8CVSS8.7AI score0.01221EPSS
SaveExploits0
NCSC
NCSC
•added 2022/11/25 12:00 a.m.•6 views

Vulnerability fixed in Exim

A vulnerability has been fixed in Exim. A malicious person at remote user could potentially exploit the vulnerability to cause a Denial-of-Service DoS attack. The way regular expressions are processed in configuration files processed can lead to a crash under certain circumstances. To do so, the...

7.5CVSS6.5AI score0.03971EPSS
SaveExploits0
NCSC
NCSC
•added 2022/11/17 12:00 a.m.•6 views

Vulnerabilities fixed in F5 products

Vulnerabilities have been fixed in F5 products. The vulnerability with reference CVE-2022-41622 allows a remote malicious person to remote user to perform a cross-site request forgery attack. execute. A malicious party could use this vulnerability to cause a user with elevated privileges to perfo...

8.8CVSS7AI score0.9234EPSS
SaveExploits7
NCSC
NCSC
•added 2022/11/17 12:00 a.m.•6 views

Vulnerability fixed in Bitbucket Server and Data Center

A vulnerability has been fixed in Bitbucket Server and Data Center. The vulnerability allows a malicious person to execute arbitrary code by manipulating environment variables manipulating environment variables within the application. This requires the malicious person to be able to modify his...

9.8CVSS7.3AI score0.98076EPSS
SaveExploits3
NCSC
NCSC
•added 2022/11/16 12:00 a.m.•6 views

Vulnerabilities fixed in Firefox, Firefox ESR and Thunderbird

Vulnerabilities have been fixed in Firefox, Firefox ESR and Thunderbird. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User Rights Spoofing Accessing...

9.8CVSS8.6AI score0.01768EPSS
SaveExploits0
NCSC
NCSC
•added 2022/11/16 12:00 a.m.•6 views

Vulnerability fixed in Sophos UTM

A vulnerability has been fixed in Sophos UTM. The vulnerability allows an authenticated remote malicious person to perform an SQL injection to execute, potentially obtaining sensitive data. obtain. The vulnerability is located in the quarantine manager of the email component of Sophos UTM. Sophos...

6.8AI score
SaveExploits0
NCSC
NCSC
•added 2022/11/16 12:00 a.m.•6 views

Vulnerability fixed in Node.js

A vulnerability has been fixed in nodejs. The vulnerability allows a remote malicious person to execute arbitrary code. execute. This is caused by the inspect parameter and the allowing incorrect octal IP addresses, leading to DNS rebinding. Node.js has released updates to fix the vulnerability i...

8.1CVSS7.3AI score0.14024EPSS
SaveExploits0
NCSC
NCSC
•added 2022/11/14 12:00 a.m.•6 views

Vulnerabilities fixed in PHP

Vulnerabilities have been fixed in PHP. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to system data PHP developers have released updates to...

9.8CVSS7.4AI score0.49336EPSS
SaveExploits6
NCSC
NCSC
•added 2022/11/09 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious party to cause a denial-of-service DoS cause or execute arbitrary code under the privileges of the user. To do this, the malicious party must induce the victim to visit a malicious web page to visit. As usual,...

9.6CVSS9.6AI score0.00847EPSS
SaveExploits0
NCSC
NCSC
•added 2022/10/12 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious person to perform a denial-of-service DoS and execute arbitrary code under the user's privileges to execute. To do this, the malicious party must induce the victim to visit a malicious web page to visit. As...

8.8CVSS7.8AI score0.00819EPSS
SaveExploits0
NCSC
NCSC
•added 2022/09/30 12:00 a.m.•6 views

Vulnerability found in Zimbra Collaboration

A vulnerability has been fixed in Zimbra Collaboration Suite ZCS. The vulnerability allows a malicious party to launch attacks execute attacks that result in the following categories of damage: Manipulation of data. Bypassing authentication Remote code execution Administrator/Root privileges The...

9.8CVSS7.5AI score0.95478EPSS
SaveExploits7
NCSC
NCSC
•added 2022/09/28 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Google vulnerabilities fixed in Google Chrome. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights As usual, Google has published few details about...

8.8CVSS7.5AI score0.00702EPSS
SaveExploits6
NCSC
NCSC
•added 2022/09/26 12:00 a.m.•6 views

Vulnerabilities fixed in Node.js

Vulnerabilities have been fixed in Node.js. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Manipulation of data Spoofing Access to sensitive data Node.js developers have released updates to address the vulnerabilities. More...

9.1CVSS6.5AI score0.68796EPSS
SaveExploits5
NCSC
NCSC
•added 2022/09/21 12:00 a.m.•6 views

Vulnerabilities fixed in BIND

ISC has fixed several vulnerabilities in BIND. A remote malicious party could potentially exploit the vulnerabilities to cause a denial-of-service. ISC has released updates to fix the vulnerabilities in BIND. For more information, see: https://kb.isc.org/docs/cve-2022-2795...

8.2CVSS8.1AI score0.02647EPSS
SaveExploits0
NCSC
NCSC
•added 2022/09/15 12:00 a.m.•6 views

Vulnerability found in Microsoft Teams

Researchers from security firm Vectra have found a vulnerability found in the Microsoft Teams user application. The vulnerability allows a malicious party to obtain obtain authentication tokens from users and thereby perform actions with the victim's privileges. The vulnerability has not been...

6.8AI score
SaveExploits0
NCSC
NCSC
•added 2022/09/13 12:00 a.m.•6 views

Vulnerability fixed in Microsoft Defender

Microsoft has fixed a vulnerability in Defender Endpoint for macOS. A local, authenticated malicious party can exploit the exploit the vulnerability to grant itself elevated privileges and thus execute code with SYSTEM/root privileges. Microsoft has made updates available that fix the described...

7.8CVSS6.9AI score0.00482EPSS
SaveExploits0
NCSC
NCSC
•added 2022/09/13 12:00 a.m.•6 views

Vulnerability fixed in IBM WebSphere Application Server

IBM has fixed a vulnerability in WebSphere Application Server. An authenticated malicious person could exploit the vulnerability potentially exploit it to perform a cross-site scripting attack. Through such an attack, the malicious party could execute code in the browser of the victim and thus be...

5.4CVSS6.6AI score0.00452EPSS
SaveExploits0
NCSC
NCSC
•added 2022/08/31 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in Google Chrome. The vulnerabilities allow a malicious person to perform attacks execute attacks in the context of the browser that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User righ...

8.8CVSS7.5AI score0.24738EPSS
SaveExploits1
NCSC
NCSC
•added 2022/08/29 12:00 a.m.•6 views

Vulnerability fixed in GnuTLS

A vulnerability has been fixed in GnuTLS. An unauthenticated remote malicious party could potentially exploit the vulnerability to cause a denial-of-service or execute arbitrary code execute with the application's privileges. The vulnerability was found in the PKCS 7 authentication code. In doing...

7.5CVSS9AI score0.01863EPSS
SaveExploits0
NCSC
NCSC
•added 2022/08/04 12:00 a.m.•6 views

Vulnerabilities fixed in Red Hat JBoss

Vulnerabilities have been fixed in Red Hat JBoss. The vulnerabilities allow a malicious party to launch attacks that potentially lead to the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Access to system data Red Hat has released updates to address the...

9.8CVSS9.3AI score0.1223EPSS
SaveExploits2
NCSC
NCSC
•added 2022/08/04 12:00 a.m.•6 views

Vulnerabilities fixed in Cisco WebEx Meetings

Vulnerabilities have been fixed in Cisco WebEx Meetings. The vulnerabilities are located in the Cisco WebEx Meetings Web Interface and allow a remote malicious party to launch a cross-site scripting attack or to inject legitimate-looking iframes inject. Cisco has released updates to fix the...

6.5CVSS6.5AI score0.00512EPSS
SaveExploits0
NCSC
NCSC
•added 2022/08/03 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to system data Google has released...

8.8CVSS7.2AI score0.00923EPSS
SaveExploits3
NCSC
NCSC
•added 2022/08/02 12:00 a.m.•6 views

Vulnerabilities fixed in Net-SNMP

Vulnerabilities have been fixed in Net-SNMP. The vulnerabilities allow an authenticated malicious party to cause a denial-of-service or potentially execute arbitrary code execute arbitrary code with the privileges under which Net-SNMP is running. This requires malicious network traffic must be se...

8.8CVSS7.6AI score0.01299EPSS
SaveExploits0
NCSC
NCSC
•added 2022/07/27 12:00 a.m.•6 views

Vulnerabilities fixed in LibreOffice

The Document Foundation has fixed three vulnerabilities in LibreOffice. An unauthenticated remote malicious person could potentially exploit the vulnerabilities potentially exploit them to execute arbitrary macro code in the user's context, or to gain access to user passwords in the local passwor...

8.8CVSS7.6AI score0.0135EPSS
SaveExploits0
NCSC
NCSC
•added 2022/07/27 12:00 a.m.•6 views

Vulnerabilities fixed in Samba

The developers of Samba have fixed several vulnerabilities in Samba. A malicious party could potentially exploit them to reset passwords outside of established processes, access system data or possibly execute commands within the scope of the Samba server. To be abused, the malicious party must...

8.8CVSS7.8AI score0.01227EPSS
SaveExploits0
NCSC
NCSC
•added 2022/07/26 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Several vulnerabilities have been fixed in Google Chrome. A malicious party could potentially exploit the vulnerabilities to execute arbitrary code within the context of the browser, or to gain access to sensitive data within the context of the browser. To do this, the malicious party must entice...

8.8CVSS7.5AI score0.17864EPSS
SaveExploits0
NCSC
NCSC
•added 2022/07/20 12:00 a.m.•6 views

Vulnerability fixed in Oracle Siebel CRM

Oracle has fixed a vulnerability in Siebel CRM. The vulnerability allows an unauthenticated malicious person within a local network to perform a denial-of-service DoS. execute. It is good practice not to have such products publicly to be publicly accessible...

5.5CVSS6.2AI score0.03054EPSS
SaveExploits0
NCSC
NCSC
•added 2022/07/20 12:00 a.m.•6 views

Vulnerabilities fixed in Oracle Java SE

Oracle has fixed vulnerabilities in the following Java SE products: GraalVM Enterprise Edition Java SE The vulnerabilities potentially enable a malicious party to execute attacks that lead to data manipulation and access to sensitive data. With the exception of CVE-2022-25647, all vulnerabilities...

7.7CVSS9.2AI score0.81039EPSS
SaveExploits2
NCSC
NCSC
•added 2022/07/05 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in Google Chrome. A malicious party could potentially exploit the vulnerabilities to cause a denial-of-service, or execute code in the scope of the application. Google indicates that the vulnerability with attribute CVE-2022-2294 has been has had limited active...

8.8CVSS7.3AI score0.70461EPSS
SaveExploits0
Total number of security vulnerabilities4298