Lucene search
+L
NcscMost viewed

4298 matches found

NCSC
NCSC
•added 2021/08/10 12:00 a.m.•6 views

Vulnerabilities fixed in Oracle Linux microcode

Vulnerabilities have been fixed in the Oracle Linux microcode. The vulnerabilities allow a malicious party to access system data and increased user privileges. -= Oracle =- Oracle has made updates available for Oracle Linux 7 and 8. U can install these updates using the command 'yum'. More...

6.8AI score
SaveExploits0
NCSC
NCSC
•added 2021/08/10 12:00 a.m.•6 views

Vulnerabilities fixed in SUSE kernel

Vulnerabilities have been fixed in SUSE kernel. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Access to system data Increased user privileges -= SUSE =- SUSE has made updates available to fix the vulnerabili...

8.7CVSS8.2AI score0.0066EPSS
SaveExploits3
NCSC
NCSC
•added 2021/08/09 12:00 a.m.•6 views

Vulnerabilities fixed in Ansible

Vulnerabilities have been fixed in Ansible. The vulnerabilities potentially enable an authenticated malicious person to perform attacks that result in the following categories of damage: Remote code execution User Rights Access to sensitive data Access to system data Increased user privileges -=...

7.9CVSS9.5AI score0.0206EPSS
SaveExploits6
NCSC
NCSC
•added 2021/08/03 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in Chrome. The vulnerabilities potentially enable a remote malicious person to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Few technical details ...

8.8CVSS7.8AI score0.0282EPSS
SaveExploits7
NCSC
NCSC
•added 2021/07/30 12:00 a.m.•6 views

Vulnerability fixed in WebSphere Application Server

IBM has fixed a vulnerability in WebSphere Application Server. The vulnerability allows a malicious party to obtain obtain elevated privileges. IBM has released updates to fix the vulnerabilities. More information can be found on the page below: https://www.ibm.com/support/pages/node/6476678...

8.8CVSS6.5AI score0.01105EPSS
SaveExploits0
NCSC
NCSC
•added 2021/07/21 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in Google Chrome. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Google has released updat...

9.6CVSS7.5AI score0.06282EPSS
SaveExploits28
NCSC
NCSC
•added 2021/07/14 12:00 a.m.•6 views

Vulnerabilities fixed in Mozilla Thunderbird

Mozilla has fixed vulnerabilities in Thunderbird. The vulnerabilities allow an unauthenticated remote malicious person to remote may be able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure. Remote code execution User...

8.8CVSS7.8AI score0.03582EPSS
SaveExploits1
NCSC
NCSC
•added 2021/07/13 12:00 a.m.•7 views

Vulnerabilities fixed in Mozilla Firefox

Mozilla has fixed vulnerabilities in Firefox. The vulnerabilities potentially allow an unauthenticated remote malicious person to able to launch attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Mozilla has...

9.8CVSS7.2AI score0.03582EPSS
SaveExploits3
NCSC
NCSC
•added 2021/07/02 12:00 a.m.•6 views

Vulnerabilities fixed in PHP7

PHP developers have fixed two vulnerabilities. The vulnerabilities allow a malicious party to cause a denial-of-service and to bypass a security measure. circumvention. PHP developers have made little information regarding these vulnerabilities publicly. PHP's developers have released updates to...

5.9CVSS6.9AI score0.02091EPSS
SaveExploits2
NCSC
NCSC
•added 2021/07/01 12:00 a.m.•6 views

Vulnerabilities fixed in QEMU

Vulnerabilities have been fixed in QEMU. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to system data -= SUSE =- SUSE has made updates available to fix the...

8.2CVSS7.8AI score0.00463EPSS
SaveExploits0
NCSC
NCSC
•added 2021/07/01 12:00 a.m.•6 views

Vulnerabilities fixed in OpenSUSE kernel

Vulnerabilities have been fixed in the openSUSE kernel. The vulnerabilities allow a malicious person to perform attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Accessing sensitive data Accessing system data -=...

7.8CVSS8.4AI score0.01476EPSS
SaveExploits1
NCSC
NCSC
•added 2021/06/29 12:00 a.m.•6 views

Vulnerabilities fixed in IBM Tivoli Netcool/OMNIbus

Vulnerabilities have been fixed in IBM Tivoli Netcool/OMNIbus. The vulnerabilities allow a malicious person to conduct attacks execute attacks that result in the following categories of damage: Server-Side Request Forgery SSRF. Cross-Site Scripting XSS. Denial-of-Service DoS Remote code execution...

9.8CVSS8.1AI score0.10233EPSS
SaveExploits4
NCSC
NCSC
•added 2021/06/25 12:00 a.m.•6 views

Vulnerability fixed in XStream

A vulnerability has been fixed in XStream. An authenticated malicious party could potentially exploit the vulnerability to execute arbitrary code under application privileges. To do this, a rogue XML file needs to be presented to the application presented. The developers have released updates to...

8.8CVSS8.7AI score0.77232EPSS
SaveExploits1
NCSC
NCSC
•added 2021/06/18 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in Chrome. A unauthenticated remote malicious person could exploit the vulnerabilities potentially exploit them to cause a denial-of-service or execute arbitrary code with the application's permissions. Google indicates that for the vulnerability with attribute...

8.8CVSS7.6AI score0.11747EPSS
SaveExploits0
NCSC
NCSC
•added 2021/06/16 12:00 a.m.•6 views

Vulnerability fixed in IBM Db2

IBM has fixed a vulnerability in Db2. A malicious person at remote user could potentially exploit the vulnerability to cause a Denial-of-Service exploit. To do this, a rogue SELECT statement must be executed on the database. IBM has released updates to fix the vulnerability in Db2 11.1.4FP6 and...

7.5CVSS6.6AI score0.01884EPSS
SaveExploits0
NCSC
NCSC
•added 2021/06/15 12:00 a.m.•6 views

Vulnerabilities fixed in IBM Spectrum Protect Client

Vulnerabilities have been fixed in IBM Spectrum Protect Client. A malicious party could potentially exploit the vulnerability to cause a denial-of-service or execute arbitrary code with the application's permissions. IBM has released updates to fix the vulnerabilities. For more information, see:...

9.8CVSS9.1AI score0.0586EPSS
SaveExploits5
NCSC
NCSC
•added 2021/06/11 12:00 a.m.•6 views

Vulnerability fixed in IBM WebSphere Application Server

A vulnerability has been fixed in IBM WebSphere Application Server. A remote malicious party could, by exploiting this vulnerability to gain elevated privileges within the application server. This vulnerability is only exploitable when using SAML Web Inbound Trust Association Interceptor TAI. IBM...

8.8CVSS7AI score0.00744EPSS
SaveExploits0
NCSC
NCSC
•added 2021/06/10 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in Chrome. The vulnerabilities allow a remote malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User Rights To do this, the malicious party must induce the victim to...

8.8CVSS7.6AI score0.64701EPSS
SaveExploits1
NCSC
NCSC
•added 2021/06/09 12:00 a.m.•6 views

Vulnerabilities fixed in Xen

Vulnerabilities have been fixed in Xen. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS. Access to system data Increased user privileges The vulnerabilities with CVE core core CVE-2021-0089 and CVE-2021-28692...

7.8CVSS8.7AI score0.01019EPSS
SaveExploits0
NCSC
NCSC
•added 2021/06/09 12:00 a.m.•6 views

Vulnerabilities fixed in SUSE kernel

Vulnerabilities have been fixed in the SUSE kernel. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Spoofing Increased user privileges -= SUSE =- SUSE has made updates available to address the...

8.8CVSS7.6AI score0.07604EPSS
SaveExploits6
NCSC
NCSC
•added 2021/06/08 12:00 a.m.•6 views

Vulnerabilities in Siemens SIMATIC NET

Siemens has identified a number of vulnerabilities in the SIMATIC NET CP 443-1 OPC UA Communication Processor for S7 systems. The vulnerabilities are all located in the NTP implementation and enable an unauthenticated malicious person to able to cause a Denial-of-Service, or potentially execute...

9.8CVSS7.6AI score0.17245EPSS
SaveExploits8
NCSC
NCSC
•added 2021/06/08 12:00 a.m.•6 views

Vulnerabilities fixed in Apache

Apache has released version 2.4.48 of the Apache Web server. In this version a number of vulnerabilities have been fixed, which can be exploited by an unauthenticated remote malicious person could be exploited to cause a denial-of-service. A vulnerability has also been fixed, which can be exploit...

9.8CVSS7.8AI score0.68289EPSS
SaveExploits0
NCSC
NCSC
•added 2021/06/04 12:00 a.m.•6 views

Vulnerability fixed in Red Hat Enterprise Linux

Red Hat has fixed a vulnerability in the Public Key Infrastructure PKI Core package. A component of this package writes out the administrator password during installation to a log file that is unjustifiably readable by any local user. A local malicious person with knowledge of the location of thi...

7.8CVSS6.4AI score0.00186EPSS
SaveExploits0
NCSC
NCSC
•added 2021/06/04 12:00 a.m.•6 views

Vulnerability fixed in HPE OneView for VMware vCenter

HPE has fixed a vulnerability in OneView for VMware vCenter. An unauthenticated remote malicious agent could exploit it to perform a Cross-Site Scripting XSS attack. Such an attack could result in the execution of arbitrary script code in the browser used to visit the application visited. HPE has...

6.1CVSS6.7AI score0.00773EPSS
SaveExploits0
NCSC
NCSC
•added 2021/05/28 12:00 a.m.•6 views

Vulnerability fixed in DHCP

A vulnerability has been fixed in DHCP. The vulnerability allows a remote malicious party to cause a denial-of-service. cause. ISC has released updates to fix the vulnerability. More information can be found on the page below: https://kb.isc.org/docs/cve-2021-25217 -= Ubuntu =- Canonical has made...

7.4CVSS6.7AI score0.06118EPSS
SaveExploits1
NCSC
NCSC
•added 2021/05/28 12:00 a.m.•6 views

Vulnerability fixed in cURL

A vulnerability has been fixed in cURL. A malicious person at remote user could potentially exploit the vulnerability to cause a denial-of-service or execute arbitrary code with the application's permissions. To do this, the malicious party needs to entice a victim to execute a cURL request towar...

8.1CVSS9AI score0.60122EPSS
SaveExploits1
NCSC
NCSC
•added 2021/05/27 12:00 a.m.•6 views

Vulnerability fixed in Drupal

A vulnerability has been fixed in Drupal. The vulnerability is located in CKEditor and can be exploited by a malicious person abused to perform a Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser used to visit the application visited...

6.6AI score
SaveExploits0
NCSC
NCSC
•added 2021/05/21 12:00 a.m.•6 views

Vulnerability fixed in Apache Cassandra

A vulnerability has been found in Apache Cassandra. The vulnerability allows a local malicious person to obtain to obtain sensitive information. Apache categorizes this vulnerability according to the CVSSv3 method with a score of 5.9. Apache has released updates to fix the vulnerability. More...

5.9CVSS6.2AI score0.02951EPSS
SaveExploits0
NCSC
NCSC
•added 2021/05/21 12:00 a.m.•6 views

Vulnerability fixed in Confluence

A vulnerability has been fixed in JIRA. The vulnerability allows a local malicious agent the ability to execute arbitrary code execute under application privileges. JIRA has released updates to fix the vulnerability. More information can be found on the page below:...

8.8CVSS8.5AI score0.77232EPSS
SaveExploits1
NCSC
NCSC
•added 2021/05/20 12:00 a.m.•6 views

Vulnerability fixed in Redis

A vulnerability in Redis has been fixed. The vulnerability allows a local malicious agent to cause a denial-of-service cause, potentially executing arbitrary code under rights of the application as a result. Redis developers categorize this vulnerability according to the CVSSv3 method with a scor...

8.8CVSS7AI score0.04028EPSS
SaveExploits0
NCSC
NCSC
•added 2021/05/19 12:00 a.m.•6 views

Hiding vulnerabilities in python3

Vulnerabilities have been fixed in python3. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights -= Red Hat =- Red Hat has made updates available...

9.8CVSS6.8AI score0.35963EPSS
SaveExploits3
NCSC
NCSC
•added 2021/05/14 12:00 a.m.•6 views

Vulnerability fixed in Graphviz

Graphviz developers have fixed a vulnerability. A malicious party could exploit the vulnerability to execute arbitrary code with the rights of the calling process. The malicious party needs to submit a rogue file to Graphviz to do this. to Graphviz. If Graphviz is used in a web environment, this...

7.8CVSS7AI score0.02614EPSS
SaveExploits1
NCSC
NCSC
•added 2021/05/11 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome for desktop

Vulnerabilities have been fixed in Google Chrome for desktop. The vulnerabilities allow a malicious party to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Access to system data As usual, Google makes few...

8.8CVSS6.5AI score0.02517EPSS
SaveExploits14
NCSC
NCSC
•added 2021/05/06 12:00 a.m.•6 views

Vulnerabilities fixed in libxml2

Several vulnerabilities have been fixed in libxml2. A malicious party could potentially exploit the vulnerabilities to cause a Denial-of-Service in an application that uses of this library by submitting a rogue XML file for processing. submit. -= SUSE =- SUSE has made updates available to fix the...

8.8CVSS8.7AI score0.0828EPSS
SaveExploits1
NCSC
NCSC
•added 2021/04/29 12:00 a.m.•6 views

Vulnerabilities fixed in BIND

ISC has fixed vulnerabilities in BIND. The vulnerabilities can be be exploited by a remote malicious person to cause a denial-of-service or, in limited circumstances, executing arbitrary code under the privileges of named. Execution of arbitrary code is not possible with the default configuration...

9.8CVSS9.8AI score0.82367EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/29 12:00 a.m.•6 views

Vulnerability fixed in Drupal

A vulnerability has been fixed in Drupal. The vulnerability allows a malicious person to execute arbitrary code in the context of the browser if it manages to get the user to visit a rogue page to visit a vulnerable Drupal site. Drupal has released updates to fix the vulnerability. For more...

6.1CVSS7.6AI score0.00671EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/28 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights As usual, Google reveals little information...

8.8CVSS7.3AI score0.01601EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/28 12:00 a.m.•6 views

Vulnerability fixed in DB2

IBM has fixed a vulnerability in DB2 including DB2 Connect Server. Because of incorrect file permissions, a local malicious party is able to manipulate arbitrary files and gain access to system data and sensitive data. IBM has released updates to fix the vulnerability in DB2. For more information...

5.1CVSS6.8AI score0.00339EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/26 12:00 a.m.•6 views

Vulnerability fixed in OpenVPN

A vulnerability has been fixed in OpenVPN. A malicious party could exploit the vulnerability to bypass authentication on an OpenVPN server configured to use "deferred authentication." Also, the malicious party can gain access gain access to information about the VPN settings. See the page below f...

7.5CVSS7.1AI score0.04908EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/21 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in the Chrome browser. A unauthenticated remote malicious person could potentially exploit them to execute arbitrary code under the rights of the application or cause a denial-of-service. To do this, the malicious party must induce the victim to visit a malicious...

9.6CVSS7.9AI score0.84173EPSS
SaveExploits1
NCSC
NCSC
•added 2021/04/14 12:00 a.m.•6 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in the Chrome browser. A unauthenticated remote malicious person could potentially exploit them to execute arbitrary code under the rights of the application. To do this, the malicious party needs to victim to visit a rogue Web page. Google has indicated that for...

8.8CVSS7.9AI score0.70435EPSS
SaveExploits6
NCSC
NCSC
•added 2021/04/09 12:00 a.m.•6 views

Vulnerability fixed in dnsmasq

A vulnerability has been fixed in dnsmasq.The vulnerability allows a malicious party the ability to perform a DNS Cache Poisoning attack execute on a dnsmasq server. dnsmasq has released updates to fix the vulnerability. For more information, see:...

4.3CVSS6.9AI score0.02294EPSS
SaveExploits1
NCSC
NCSC
•added 2021/04/08 12:00 a.m.•6 views

Vulnerability fixed in WebSphere Application Server

IBM has fixed a vulnerability in WebSphere Application Server. The vulnerability allows a remote malicious person to execute arbitrary code. IBM has released updates to fix the vulnerability. More information can be found on the page below: https://www.ibm.com/support/pages/node/6441063...

6.5CVSS6.8AI score0.01298EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/08 12:00 a.m.•6 views

Vulnerabilities fixed in SUSE kernel

Vulnerabilities have been fixed in SUSE kernel. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Accessing sensitive data Access to system data Increased user privileges Live...

7.8CVSS8.5AI score0.02433EPSS
SaveExploits5
NCSC
NCSC
•added 2021/04/07 12:00 a.m.•6 views

Vulnerabilities fixed in MediaWiki

Vulnerabilities have been fixed in MediaWiki. One vulnerability makes it impossible for a blocked user to reset the security token reset. This is problematic when the security token falls into wrong hands. The other two vulnerabilities involve a so-called Cross-Site Scripting XSS. MediaWiki has...

6.1CVSS6AI score0.0173EPSS
SaveExploits3
NCSC
NCSC
•added 2021/04/01 12:00 a.m.•6 views

Vulnerabilities fixed in cURL

Vulnerabilities have been fixed in cURL.The vulnerabilities allow a remote malicious person the ability to obtain sensitive information obtain. To do so, the malicious party must induce the victim to visit a server under the control of the malicious party. -= Debian =- Debian has made updates to...

5.3CVSS6.9AI score0.05301EPSS
SaveExploits2
NCSC
NCSC
•added 2021/03/31 12:00 a.m.•6 views

Vulnerabilities fixed in Zimbra

Vulnerabilities have been fixed in Zimbra. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Circumvention of security measure. Remote code execution Administrator/Root privileges Access to system data Zimbra has released updates to...

9.8CVSS7.8AI score0.65005EPSS
SaveExploits11
NCSC
NCSC
•added 2021/03/29 12:00 a.m.•6 views

Vulnerability fixed in Apple iOS and iPadOS

A vulnerability has been fixed in Apple iOS and Apple iPadOS. The vulnerability is located in the WebKit component and is referred to as Universal Cross-site Scripting UXSS. The vulnerability allows an unauthorized remote malicious person to execute arbitrary code under browser privileges. The...

6.1CVSS6.5AI score0.07082EPSS
SaveExploits0
NCSC
NCSC
•added 2021/03/29 12:00 a.m.•6 views

Vulnerability fixed in SpamAssassin

The Apache SpamAssassin Project has fixed a vulnerability in SpamAssassin. The vulnerability is in the way rule configuration files are processed. When SpamAssassin is configured to use rule configuration files from an untrusted external source, this source could potentially exploit the...

10CVSS7.7AI score0.06132EPSS
SaveExploits0
NCSC
NCSC
•added 2021/03/24 12:00 a.m.•6 views

Vulnerabilities fixed in Mozilla Firefox, Firefox ESR and Thunderbird

Vulnerabilities have been fixed in Firefox, Firefox ESR and Thunderbird. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User Rights Spoofing Accessing...

8.8CVSS7.4AI score0.01404EPSS
SaveExploits0
Total number of security vulnerabilities4298