Lucene search
+L
NcscMost viewed

4298 matches found

NCSC
NCSC
•added 2021/03/31 12:00 a.m.•6 views

Vulnerabilities fixed in Zimbra

Vulnerabilities have been fixed in Zimbra. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Circumvention of security measure. Remote code execution Administrator/Root privileges Access to system data Zimbra has released updates to...

9.8CVSS7.8AI score0.65005EPSS
SaveExploits11
NCSC
NCSC
•added 2021/03/29 12:00 a.m.•6 views

Vulnerability fixed in Apple iOS and iPadOS

A vulnerability has been fixed in Apple iOS and Apple iPadOS. The vulnerability is located in the WebKit component and is referred to as Universal Cross-site Scripting UXSS. The vulnerability allows an unauthorized remote malicious person to execute arbitrary code under browser privileges. The...

6.1CVSS6.5AI score0.07082EPSS
SaveExploits0
NCSC
NCSC
•added 2021/03/29 12:00 a.m.•6 views

Vulnerability fixed in SpamAssassin

The Apache SpamAssassin Project has fixed a vulnerability in SpamAssassin. The vulnerability is in the way rule configuration files are processed. When SpamAssassin is configured to use rule configuration files from an untrusted external source, this source could potentially exploit the...

10CVSS7.7AI score0.06132EPSS
SaveExploits0
NCSC
NCSC
•added 2021/03/24 12:00 a.m.•6 views

Vulnerabilities fixed in Mozilla Firefox, Firefox ESR and Thunderbird

Vulnerabilities have been fixed in Firefox, Firefox ESR and Thunderbird. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User Rights Spoofing Accessing...

8.8CVSS7.4AI score0.01404EPSS
SaveExploits0
NCSC
NCSC
•added 2021/03/15 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. A malicious person could potentially exploit the vulnerabilities to cause a denial-of-service cause or execute arbitrary code with the privileges of the logged in user. As usual, Google is disclosing little information regarding the details of the...

8.8CVSS7.7AI score0.26525EPSS
SaveExploits3
NCSC
NCSC
•added 2021/03/12 12:00 a.m.•6 views

Vulnerabilities fixed in NetBSD

The developers of NetBSD have fixed a number of vulnerabilities fixed in NetBSD's IP stack. Because packet IDs are not randomly are not randomly generated by default, a malicious party can predict the IP traffic. predict, allowing the malicious party to launch a man-in-the-middle attack to obtain...

6.8AI score
SaveExploits0
NCSC
NCSC
•added 2021/03/11 12:00 a.m.•6 views

Vulnerabilities fixed in Red Hat OpenShift Virtualization

Red Hat has released updates to address multiple vulnerabilities fixes in OpenShift Virtualization. A malicious party could vulnerabilities potentially exploit them to cause a denial-of-service cause. Red Hat has released updates to fix the vulnerabilities in OpenShift Virtualization. For more...

7.5CVSS6.9AI score0.20521EPSS
SaveExploits6
NCSC
NCSC
•added 2021/03/10 12:00 a.m.•6 views

Vulnerability fixed in GNU git

GNU has fixed a vulnerability in git. A malicious person could exploit the vulnerability to create a rogue repository from which scripts are automatically executed upon check out. This allows the malicious party to execute arbitrary code with permissions of git on the vulnerable system. GNU has...

8CVSS7.7AI score0.88644EPSS
SaveExploits5
NCSC
NCSC
•added 2021/03/09 12:00 a.m.•6 views

Vulnerabilities fixed in Glibc

Vulnerabilities have been fixed in Glibc. The vulnerabilities allow an unauthenticated remote malicious agent the ability to launch a Denial-of-Service attack, possibly resulting in the execution of arbitrary code as a result. -= Ubuntu =- Canonical has made updates available for Ubuntu 16.04 LTS...

7.5CVSS7.8AI score0.0408EPSS
SaveExploits1
NCSC
NCSC
•added 2021/03/05 12:00 a.m.•6 views

Vulnerability fixed in Xerox products

A vulnerability has been fixed in Xerox Phaser, WorkCentre and VersaLink. The vulnerability allows a malicious person to execute arbitrary code under the user's privileges. Xerox did not release any substantive details about this vulnerability. No CVE attribute has been assigned to this...

7.2AI score
SaveExploits0
NCSC
NCSC
•added 2021/03/03 12:00 a.m.•6 views

Vulnerability fixed in NetApp Active IQ Unified Manager and Snap Creator Framework

NetApp has fixed a vulnerability in JQuery as used in Active IQ Unified Manager and Snap Creator Framework, among others. The vulnerabilities allow an unauthenticated malicious person to to access sensitive data or manipulate data. NetApp has released updates to fix the vulnerabilities in Active ...

6.1CVSS6.5AI score0.06273EPSS
SaveExploits4
NCSC
NCSC
•added 2021/02/23 12:00 a.m.•6 views

Vulnerabilities fixed in Ruby on Rails

Vulnerabilities have been fixed in Ruby on Rails. The vulnerabilities allow a malicious party to cause a denial-of-service cause and redirect a user to a rogue web page. The Ruby on Rails developers have released updates to fix the vulnerabilities. More information can be found on the pages below...

7.5CVSS6.6AI score0.87301EPSS
SaveExploits2
NCSC
NCSC
•added 2021/02/23 12:00 a.m.•6 views

Vulnerability fixed in OpenLDAP

A vulnerability has been fixed in OpenLDAP. The vulnerability allows an unauthenticated remote malicious party to cause a denial-of-service attack. The developers of OpenLDAP have released updates to fix the vulnerability. More information can be found at the page below:...

7.5CVSS6.8AI score0.64147EPSS
SaveExploits1
NCSC
NCSC
•added 2021/02/19 12:00 a.m.•6 views

Vulnerability fixed in IBM WebSphere Application Server

IBM WebSphere Application Server can let an attacker remotely access folders access folders. An attacker can send a specially crafted URL request with "dot-dot" strings /../ to send arbitrary files on the system. IBM has released updates to fix the vulnerability. For more information, see:...

7.8CVSS6.8AI score0.03696EPSS
SaveExploits0
NCSC
NCSC
•added 2021/02/18 12:00 a.m.•6 views

Vulnerabilities fixed in Red Hat OpenShift Container Platform

Red Hat has fixed multiple vulnerabilities in OpenShift Container Platform. The vulnerabilities are in the applications Jenkins and Ant, and allow an unauthenticated remote malicious person to remote may be able to launch attacks that result in the following categories of damage: Cross-Site...

8CVSS8.3AI score0.08235EPSS
SaveExploits0
NCSC
NCSC
•added 2021/02/18 12:00 a.m.•6 views

Vulnerabilities fixed in PHP

Several vulnerabilities have been fixed in PHP. The vulnerabilities potentially enable an unauthenticated remote malicious person to able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Spoofing Access to sensitive data -= Debian =- Debian has made updat...

7.5CVSS7.1AI score0.05029EPSS
SaveExploits3
NCSC
NCSC
•added 2021/02/17 12:00 a.m.•6 views

Vulnerabilities fixed in XEN

The developers of XEN have fixed a number of vulnerabilities. A malicious party could potentially exploit the vulnerabilities to cause a denial-of-service on the guest system and possibly even the entire virtualization environment. Also, a malicious person could possibly gain access to sensitive...

7.8CVSS8.5AI score0.00544EPSS
SaveExploits0
NCSC
NCSC
•added 2021/02/17 12:00 a.m.•6 views

Multiple vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. A malicious person could potentially exploit the vulnerabilities to cause a denial-of-service cause or execute arbitrary code with the privileges of the logged in user. As usual, Google is disclosing little information regarding the details of the...

9.6CVSS7.7AI score0.09458EPSS
SaveExploits8
NCSC
NCSC
•added 2021/02/15 12:00 a.m.•6 views

Vulnerability fixed in Apache Subversion (SVN)

Apache has fixed a vulnerability in Subversion SVN. The vulnerability allows an unauthenticated remote malicious person capable of causing a denial-of-service. Apache categorizes this vulnerability according to the CVSSv3 method with a score of 7.5. Apache has released updates to fix the...

7.5CVSS6.8AI score0.40075EPSS
SaveExploits1
NCSC
NCSC
•added 2021/02/12 12:00 a.m.•6 views

Vulnerabilities fixed in GitLab

Several vulnerabilities have been fixed in GitLab. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Accessing sensitive data Accessing system data No CVE numbers have yet been...

7AI score
SaveExploits0
NCSC
NCSC
•added 2021/02/12 12:00 a.m.•6 views

Vulnerabilities fixed in PostgreSQL

Several vulnerabilities have been fixed in PostgreSQL. A malicious person with limited privileges could potentially exploit them to gain access to data stored in a PostgreSQL database. Developers have released updates to fix the vulnerabilities fixes in PostgreSQL 13.2, 12.6, 11.11, 10.16, 9.6.21...

4.3CVSS7.1AI score0.01466EPSS
SaveExploits2
NCSC
NCSC
•added 2021/02/11 12:00 a.m.•6 views

Vulnerability fixed in IBM WebSphere Application Server

IBM WebSphere Application Server is vulnerable to an XML External Entity Injection XXE attack when processing XML data. An external attacker can exploit this security vulnerability to obtain obtain sensitive information. IBM has released updates to fix the vulnerability. For more information, see...

8.2CVSS7AI score0.05162EPSS
SaveExploits0
NCSC
NCSC
•added 2021/02/10 12:00 a.m.•6 views

Vulnerabilities fixed in Xerox WorkCentre

Xerox has fixed several vulnerabilities in WorkCentre. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service or to perform a Cross-Site Scripting XSS attack. The latter can lead to the execution of arbitrary script code in the browser used to visit the application is...

6.8AI score
SaveExploits0
NCSC
NCSC
•added 2021/02/09 12:00 a.m.•6 views

Vulnerabilities fixed in NetApp Active IQ

NetApp has fixed several vulnerabilities in Active IQ. The vulnerabilities allow an unauthenticated remote malicious person to remote may be able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data NetApp has...

9.8CVSS8.6AI score0.18383EPSS
SaveExploits1
NCSC
NCSC
•added 2021/02/09 12:00 a.m.•6 views

Vulnerabilities fixed in Docker

Vulnerabilities have been fixed in Docker. A local malicious person can, by exploiting the vulnerability with attribute CVE-2021-21284, gain root privileges from the container on the vulnerable system. To exploit this vulnerability, the Docker daemon must be configured with the --userns-remap...

6.8CVSS8.9AI score0.03287EPSS
SaveExploits0
NCSC
NCSC
•added 2021/02/08 12:00 a.m.•6 views

Vulnerability fixed in Mozilla Firefox

Mozilla has fixed a vulnerability in Firefox and Firefox ESR. A remote malicious party could potentially exploit it to cause a denial-of-service or execute arbitrary execute arbitrary code with the application's permissions. For now, there are few substantive details about the vulnerability...

7.5AI score
SaveExploits0
NCSC
NCSC
•added 2021/02/01 12:00 a.m.•6 views

Vulnerability fixed in Libgcrypt

A vulnerability has been fixed in Libgcrypt. The vulnerability allows a remote malicious person to execute arbitrary code execute under the user's privileges. The developers of GnuPG have released updates to fix the vulnerability. More information can be found at the page below:...

7AI score
SaveExploits0
NCSC
NCSC
•added 2021/01/27 12:00 a.m.•6 views

Vulnerability fixed in Linux kernel

A vulnerability has been fixed in the Linux kernel. A malicious party can exploit the vulnerability to obtain sensitive information via a "path traversal" attack that allows security measures can be bypassed. The vulnerability can only be exploited when the target system provides a file system to...

6.5CVSS7.7AI score0.02417EPSS
SaveExploits0
NCSC
NCSC
•added 2021/01/21 12:00 a.m.•6 views

Vulnerability fixed in IBM Integration Bus

A vulnerability has been fixed in IBM Integration Bus. The vulnerability allows a remote malicious party to cause a Denial-of-Service or execute arbitrary code under the user's privileges. IBM has released updates to fix the vulnerability. More information can be found on the page below:...

8.1CVSS7.8AI score0.09503EPSS
SaveExploits0
NCSC
NCSC
•added 2021/01/19 12:00 a.m.•6 views

DNSpooq vulnerabilities fixed in dnsmasq

The developers of dnsmasq have fixed vulnerabilities in the dnsmasq application. Dnsmasq is widely used open source software for caching and forwarding DNS traffic. Although the DNS functionality is widely supported, dnsmasq is designed specifically for modest networks. Dnsmasq is commonly found,...

8.3CVSS7.2AI score0.86692EPSS
SaveExploits2
NCSC
NCSC
•added 2021/01/15 12:00 a.m.•6 views

Vulnerability fixed in Ubuntu kernel

Canonical has fixed a vulnerability in the Ubuntu kernel. The vulnerability allows an authenticated remote malicious party to opportunity to obtain sensitive information and to manipulate data manipulate. -= Ubuntu =- Canonical has made updates available for Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS...

8.1CVSS7.9AI score0.06309EPSS
SaveExploits0
NCSC
NCSC
•added 2021/01/12 12:00 a.m.•6 views

Vulnerability fixed in Cacti

A vulnerability has been fixed in Cacti. The vulnerability allows a remote malicious person the ability to launch an SQL-Injection attack execute. Cacti has released updates to fix the vulnerability. More information can be found on the page below: https://github.com/Cacti/cacti/issues/4022...

8.8CVSS6.7AI score0.04599EPSS
SaveExploits1
NCSC
NCSC
•added 2021/01/12 12:00 a.m.•6 views

Vulnerability fixed in Microsoft Malware Protection Engine

Microsoft has fixed a vulnerability in Microsoft System Center Operations Manager. A remote malicious party could potentially exploit the vulnerability potentially exploit it to execute arbitrary code with user privileges or to access gain access to, and manipulate, sensitive information. Microso...

7.8CVSS6.5AI score0.39392EPSS
SaveExploits0
NCSC
NCSC
•added 2021/01/12 12:00 a.m.•6 views

Vulnerability fixed in Microsoft SQL server

There is a vulnerability in Microsoft SQL Server. A authenticated malicious party can send data over a network to an affected SQL Server when it is configured to running an Extended Event session. SQL Server: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact...

8.8CVSS6.8AI score0.06153EPSS
SaveExploits0
NCSC
NCSC
•added 2021/01/12 12:00 a.m.•6 views

Vulnerability fixed in Microsoft Edge

There is a vulnerability in Microsoft Edge. The vulnerability allows a malicious party to execute arbitrary execute arbitrary code with user privileges. The vulnerability arises by improper handling of objects in memory. Microsoft has made updates available that fix the described vulnerabilities...

7.6CVSS7.3AI score0.01916EPSS
SaveExploits0
NCSC
NCSC
•added 2021/01/11 12:00 a.m.•6 views

Vulnerabilities fixed in Oracle Linux

Vulnerabilities have been fixed in Oracle Linux. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Access to system data Increased user privileges Oracle has released updates to fix the vulnerabilities. More...

9.8CVSS7.6AI score0.0776EPSS
SaveExploits8
NCSC
NCSC
•added 2021/01/08 12:00 a.m.•6 views

Vulnerabilities fixed in Ghostscript

Vulnerabilities have been fixed in Ghostscript. The vulnerabilities allow a malicious party to cause a denial-of-service cause and to execute arbitrary code under the privileges of the user. -= Ubuntu =- Canonical has made updates available for Ubuntu 16.04 LTS and 18.04 LTS to fix the...

8.8CVSS7.7AI score0.04973EPSS
SaveExploits4
NCSC
NCSC
•added 2021/01/07 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure As usual, Google reveals little information regarding the details of the...

9.6CVSS6.5AI score0.03095EPSS
SaveExploits0
NCSC
NCSC
•added 2021/01/05 12:00 a.m.•6 views

Fixed an issue in Citrix ADC and Citrix Gateway

Citrix has fixed an issue in ADC and Gateway which can lead to denial-of-service attacks. A malicious party could potentially potentially misuse DTLS to cause a Denial-of-Service. Abuse can only occur when DTLS is enabled. Citrix reports that limited scale attacks are currently being reported whi...

6.2AI score
SaveExploits0
NCSC
NCSC
•added 2020/12/15 12:00 a.m.•6 views

Vulnerabilities fixed in X11 server

Vulnerabilities have been fixed in X11 server. The vulnerabilities potentially allow a malicious party to access system data and to gain elevated privileges gain. -= Oracle =- Oracle has made updates available for Oracle Linux 7. You can install these updates using the command 'yum'. More...

7.8CVSS7AI score0.00393EPSS
SaveExploits0
NCSC
NCSC
•added 2020/12/10 12:00 a.m.•6 views

Vulnerability fixed in Adobe Acrobat and Reader

Adobe has fixed a vulnerability in Adobe Acrobat and Reader. The vulnerability allows a malicious party to obtain sensitive obtain information from the victim's context. Adobe has released updates to fix the vulnerability. More information can be found on the page below:...

7.1CVSS6.4AI score0.07882EPSS
SaveExploits0
NCSC
NCSC
•added 2020/12/08 12:00 a.m.•6 views

Vulnerabilities fixed in HP-UX PHP

Vulnerabilities have been fixed in HP-UX PHP. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Accessing sensitive data HP categorizes these vulnerabilities according to the...

9.1CVSS7.1AI score0.08888EPSS
SaveExploits13
NCSC
NCSC
•added 2020/12/03 12:00 a.m.•6 views

Vulnerability fixed in Thunderbird

When reading status codes from the SMTP server, Thunderbird an integer to a position on the stack that is is intended to contain only one byte. Depending on the processor architecture and the stack layout, this leads to corruption of the stack that could potentially be abused. Mozilla has release...

9.3CVSS6.7AI score0.01222EPSS
SaveExploits0
NCSC
NCSC
•added 2020/12/02 12:00 a.m.•6 views

Vulnerabilities fixed in NetApp products

Several NetApp products contain FasterXML jackson-databind. FasterXML jackson-databind versions 2.x prior to 2.9.10.4 are susceptible to vulnerabilities that, when successfully exploited, can lead to disclosure of sensitive information, addition or modification of data, or denial of service DoS...

8.1CVSS6.6AI score0.0578EPSS
SaveExploits0
NCSC
NCSC
•added 2020/12/01 12:00 a.m.•6 views

Vulnerabilities fixed in MariaDB

Vulnerabilities have been fixed in MariaDB. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Access to system data The vulnerabilities marked CVE-2020-13249 and CVE-2020-15180 have CVSSv3...

9CVSS9.2AI score0.05539EPSS
SaveExploits0
NCSC
NCSC
•added 2020/11/26 12:00 a.m.•6 views

Vulnerability fixed in Drupal

A vulnerability has been fixed in Drupal. A malicious party could potentially exploit the vulnerability to execute arbitrary PHP code execute under the application's permissions. To do so, the malicious party needs to upload a rogue .tar, .tar.gz, .bz2, or .tlz file uploaded to the Drupal server...

7.8CVSS7.5AI score0.84554EPSS
SaveExploits5
NCSC
NCSC
•added 2020/11/25 12:00 a.m.•6 views

Vulnerabilities fixed in PHPMyAdmin

Ubuntu has fixed several vulnerabilities in the phpmyadmin package. The vulnerabilities allow an unauthenticated malicious party potentially able to launch attacks that lead to the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS SQL Injection Access to...

9.8CVSS6.7AI score0.67081EPSS
SaveExploits11
NCSC
NCSC
•added 2020/11/25 12:00 a.m.•6 views

Vulnerabilities fixed in libexif

Several vulnerabilities have been fixed in libexif. A malicious party could potentially exploit the vulnerabilities to cause a denial-of-service or execute arbitrary code with the application's permissions. To do this, the malicious party must use the vulnerable application to have rogue image da...

9.8CVSS8AI score0.04262EPSS
SaveExploits0
NCSC
NCSC
•added 2020/11/16 12:00 a.m.•6 views

Vulnerabilities fixed in PostgreSQL

Several vulnerabilities have been fixed in PostgreSQL. A local malicious person with limited privileges within the vulnerable PostgreSQL database, could potentially exploit the vulnerabilities to within the database or on the local system to execute arbitrary code execute arbitrary code with root...

8.8CVSS7.7AI score0.4644EPSS
SaveExploits0
NCSC
NCSC
•added 2020/11/06 12:00 a.m.•6 views

Vulnerabilities fixed in Salt

Vulnerabilities have been fixed in Salt. Salt is used used in VMware vRealize Operations Manager and RSA NetWitness. Exploiting the vulnerabilities allows an unauthenticated malicious person to execute willful code with permissions of the application. To do this, the malicious party must have...

9.8CVSS7.5AI score0.99585EPSS
SaveExploits4
Total number of security vulnerabilities4298