Lucene search
+L
NcscMost viewed

4353 matches found

NCSC
NCSC
•added 2021/05/26 12:00 a.m.•7 views

Vulnerabilities fixed in Google Chrome

Google has fixed vulnerabilities in Chrome. The vulnerabilities potentially enable a remote malicious person to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Accessing...

8.8CVSS7.6AI score0.16611EPSS
SaveExploits19
NCSC
NCSC
•added 2021/05/25 12:00 a.m.•7 views

Vulnerabilities fixed in Apple Safari

Apple has fixed vulnerabilities in Safari. The vulnerabilities potentially enable an unauthenticated remote malicious person to able to launch attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Circumvention of security measure Remote code...

8.8CVSS8.7AI score0.0741EPSS
SaveExploits2
NCSC
NCSC
•added 2021/05/21 12:00 a.m.•7 views

Vulnerability fixed in Apache Cassandra

A vulnerability has been found in Apache Cassandra. The vulnerability allows a local malicious person to obtain to obtain sensitive information. Apache categorizes this vulnerability according to the CVSSv3 method with a score of 5.9. Apache has released updates to fix the vulnerability. More...

5.9CVSS6.2AI score0.02951EPSS
SaveExploits0
NCSC
NCSC
•added 2021/05/21 12:00 a.m.•7 views

Vulnerability fixed in Confluence

A vulnerability has been fixed in JIRA. The vulnerability allows a local malicious agent the ability to execute arbitrary code execute under application privileges. JIRA has released updates to fix the vulnerability. More information can be found on the page below:...

8.8CVSS8.5AI score0.77232EPSS
SaveExploits1
NCSC
NCSC
•added 2021/05/19 12:00 a.m.•7 views

Hiding vulnerabilities in python3

Vulnerabilities have been fixed in python3. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights -= Red Hat =- Red Hat has made updates available...

9.8CVSS6.8AI score0.35963EPSS
SaveExploits3
NCSC
NCSC
•added 2021/05/14 12:00 a.m.•7 views

Vulnerability fixed in Graphviz

Graphviz developers have fixed a vulnerability. A malicious party could exploit the vulnerability to execute arbitrary code with the rights of the calling process. The malicious party needs to submit a rogue file to Graphviz to do this. to Graphviz. If Graphviz is used in a web environment, this...

7.8CVSS7AI score0.02614EPSS
SaveExploits1
NCSC
NCSC
•added 2021/05/14 12:00 a.m.•7 views

Vulnerabilities fixed in AWStats

Vulnerabilities have been fixed in AWStats. An unauthenticated malicious party could exploit the vulnerabilities to perform a path traversal attack that could gain access to arbitrary files. In doing so, the vulnerabilities can only exploited only to read key/value pairs that can be parsed by...

9.8CVSS7.1AI score0.04352EPSS
SaveExploits1
NCSC
NCSC
•added 2021/05/14 12:00 a.m.•7 views

Vulnerabilities fixed in Wordpress

Wordpress has fixed two vulnerabilities in the standard included PHPMailer module. A remote malicious party can exploit the exploit the vulnerabilities to execute arbitrary code under the application's permissions, potentially gaining access gain access to sensitive information within the scope o...

9.8CVSS7.3AI score0.03095EPSS
SaveExploits0
NCSC
NCSC
•added 2021/05/12 12:00 a.m.•7 views

Vulnerabilities fixed in Xerox WorkCentre

Vulnerabilities have been fixed in Xerox WorkCentre. The vulnerabilities allow a remote malicious person to execute arbitrary code. There are no known CVE numbers for these vulnerabilities. Xerox has released updates to fix the vulnerabilities. More information can be found on the page below:...

6.8AI score
SaveExploits0
NCSC
NCSC
•added 2021/05/11 12:00 a.m.•7 views

Vulnerabilities fixed in Google Chrome for desktop

Vulnerabilities have been fixed in Google Chrome for desktop. The vulnerabilities allow a malicious party to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Access to system data As usual, Google makes few...

8.8CVSS6.5AI score0.02517EPSS
SaveExploits14
NCSC
NCSC
•added 2021/05/11 12:00 a.m.•7 views

Vulnerabilities fixed in Squid

Vulnerabilities have been fixed in Squid. The vulnerabilities allow a remote malicious person to perform attacks that lead to a denial-of-service. The developers of Squid categorize these vulnerabilities according to the CVSSv3 method with a highest score of 8.8. The developers of Squid have...

7.5CVSS6.8AI score0.95785EPSS
SaveExploits5
NCSC
NCSC
•added 2021/05/06 12:00 a.m.•7 views

Vulnerabilities fixed in libxml2

Several vulnerabilities have been fixed in libxml2. A malicious party could potentially exploit the vulnerabilities to cause a Denial-of-Service in an application that uses of this library by submitting a rogue XML file for processing. submit. -= SUSE =- SUSE has made updates available to fix the...

8.8CVSS8.7AI score0.0828EPSS
SaveExploits1
NCSC
NCSC
•added 2021/05/06 12:00 a.m.•7 views

Vulnerabilities fixed in Redis

Two vulnerabilities have been fixed in Redis. A malicious person could potentially exploit the vulnerability to cause a denial-of-service cause or potentially execute arbitrary code with the privileges of the application. Redis has released updates to fix the vulnerabilities. For more information...

8.8CVSS8AI score0.04191EPSS
SaveExploits0
NCSC
NCSC
•added 2021/05/03 12:00 a.m.•7 views

Vulnerabilities fixed in Sophos UTM

Several vulnerabilities have been fixed in Sophos UTM. A malicious party could potentially exploit these vulnerabilities to cause a Denial-of-Service or execute arbitrary code with the application's permissions. Sophos has released updates to fix the vulnerabilities in UTM 9.706. For more...

7.5CVSS9AI score0.07051EPSS
SaveExploits4
NCSC
NCSC
•added 2021/04/29 12:00 a.m.•7 views

Vulnerabilities fixed in BIND

ISC has fixed vulnerabilities in BIND. The vulnerabilities can be be exploited by a remote malicious person to cause a denial-of-service or, in limited circumstances, executing arbitrary code under the privileges of named. Execution of arbitrary code is not possible with the default configuration...

9.8CVSS9.8AI score0.82367EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/28 12:00 a.m.•7 views

Vulnerabilities fixed in the Linux kernel

Fedora has fixed vulnerabilities in the Linux kernel and associated tooling. A malicious person could exploit them to cause a denial-of-service, or gain access to information in kernel memory. -= Fedora =- Fedora has made updates available for Fedora 32 and 33. You can install these updates using...

7CVSS7.6AI score0.01071EPSS
SaveExploits1
NCSC
NCSC
•added 2021/04/26 12:00 a.m.•7 views

Vulnerability fixed in OpenVPN

A vulnerability has been fixed in OpenVPN. A malicious party could exploit the vulnerability to bypass authentication on an OpenVPN server configured to use "deferred authentication." Also, the malicious party can gain access gain access to information about the VPN settings. See the page below f...

7.5CVSS7.1AI score0.04908EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/21 12:00 a.m.•7 views

Vulnerabilities fixed in Oracle JD Edwards

Vulnerabilities have been fixed in Oracle JD Edwards. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...

8.1CVSS7.2AI score0.99215EPSS
SaveExploits16
NCSC
NCSC
•added 2021/04/20 12:00 a.m.•7 views

Vulnerability fixed in IBM WebSphere Application Server

IBM has fixed a vulnerability in WebSphere Application Server. It involves an XML External Entity Injection XXE vulnerability. An unauthenticated remote malicious person could potentially exploit the vulnerability to gain access to sensitive data. In addition, the vulnerability could be exploited...

8.2CVSS7.1AI score0.02563EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/09 12:00 a.m.•7 views

Vulnerability fixed in WebSphere Application Server

IBM has fixed a vulnerability in WebSphere Application Server. The vulnerability allows a remote malicious person to execute arbitrary code. IBM has released updates to fix the vulnerability. For more information, see: https://www.ibm.com/support/pages/node/6441433...

7.5CVSS6.8AI score0.03026EPSS
SaveExploits3
NCSC
NCSC
•added 2021/04/09 12:00 a.m.•7 views

Vulnerability fixed in dnsmasq

A vulnerability has been fixed in dnsmasq.The vulnerability allows a malicious party the ability to perform a DNS Cache Poisoning attack execute on a dnsmasq server. dnsmasq has released updates to fix the vulnerability. For more information, see:...

4.3CVSS6.9AI score0.02294EPSS
SaveExploits1
NCSC
NCSC
•added 2021/04/08 12:00 a.m.•7 views

Vulnerability fixed in WebSphere Application Server

IBM has fixed a vulnerability in WebSphere Application Server. The vulnerability allows a remote malicious person to execute arbitrary code. IBM has released updates to fix the vulnerability. More information can be found on the page below: https://www.ibm.com/support/pages/node/6441063...

6.5CVSS6.8AI score0.01298EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/08 12:00 a.m.•7 views

Vulnerabilities fixed in SUSE kernel

Vulnerabilities have been fixed in SUSE kernel. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Accessing sensitive data Access to system data Increased user privileges Live...

7.8CVSS8.5AI score0.02433EPSS
SaveExploits5
NCSC
NCSC
•added 2021/04/07 12:00 a.m.•7 views

Vulnerabilities fixed in xen

Vulnerabilities have been fixed in xen. The vulnerabilities allow a malicious party the ability to launch a Denial-of-Service on the host system. The malicious party is able to obtain system data. -= SUSE =- SUSE has made updates available to fix the vulnerabilities in SUSE 12 and 15. fixes in SU...

5.5CVSS7.1AI score0.00314EPSS
SaveExploits0
NCSC
NCSC
•added 2021/04/07 12:00 a.m.•7 views

Vulnerabilities fixed in MediaWiki

Vulnerabilities have been fixed in MediaWiki. One vulnerability makes it impossible for a blocked user to reset the security token reset. This is problematic when the security token falls into wrong hands. The other two vulnerabilities involve a so-called Cross-Site Scripting XSS. MediaWiki has...

6.1CVSS6AI score0.0173EPSS
SaveExploits3
NCSC
NCSC
•added 2021/04/01 12:00 a.m.•7 views

Vulnerabilities fixed in cURL

Vulnerabilities have been fixed in cURL.The vulnerabilities allow a remote malicious person the ability to obtain sensitive information obtain. To do so, the malicious party must induce the victim to visit a server under the control of the malicious party. -= Debian =- Debian has made updates to...

5.3CVSS6.9AI score0.05301EPSS
SaveExploits2
NCSC
NCSC
•added 2021/04/01 12:00 a.m.•7 views

Vulnerabilities fixed in GitLab

Several vulnerabilities have been fixed in GitLab Community Edition CE and Enterprise Edition EE. The vulnerabilities allow a remote unauthenticated malicious person potentially able to perform attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF Cross-Site...

6.7AI score
SaveExploits0
NCSC
NCSC
•added 2021/03/31 12:00 a.m.•7 views

Vulnerabilities fixed in Zimbra

Vulnerabilities have been fixed in Zimbra. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Circumvention of security measure. Remote code execution Administrator/Root privileges Access to system data Zimbra has released updates to...

9.8CVSS7.8AI score0.65005EPSS
SaveExploits11
NCSC
NCSC
•added 2021/03/29 12:00 a.m.•7 views

Vulnerability fixed in SpamAssassin

The Apache SpamAssassin Project has fixed a vulnerability in SpamAssassin. The vulnerability is in the way rule configuration files are processed. When SpamAssassin is configured to use rule configuration files from an untrusted external source, this source could potentially exploit the...

10CVSS7.7AI score0.06132EPSS
SaveExploits0
NCSC
NCSC
•added 2021/03/24 12:00 a.m.•7 views

Vulnerabilities fixed in Mozilla Firefox, Firefox ESR and Thunderbird

Vulnerabilities have been fixed in Firefox, Firefox ESR and Thunderbird. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User Rights Spoofing Accessing...

8.8CVSS7.4AI score0.01506EPSS
SaveExploits0
NCSC
NCSC
•added 2021/03/17 12:00 a.m.•7 views

Vulnerabilities fixed in Red Hat kernel

Vulnerabilities have been fixed in the kernel of Red Hat Enterprise Linux 7. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS. Manipulation of data Circumvention of security measure Remote code execution User...

8.1CVSS7.3AI score0.06692EPSS
SaveExploits6
NCSC
NCSC
•added 2021/03/15 12:00 a.m.•7 views

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. A malicious person could potentially exploit the vulnerabilities to cause a denial-of-service cause or execute arbitrary code with the privileges of the logged in user. As usual, Google is disclosing little information regarding the details of the...

8.8CVSS7.7AI score0.26723EPSS
SaveExploits3
NCSC
NCSC
•added 2021/03/11 12:00 a.m.•7 views

Vulnerabilities fixed in Red Hat OpenShift Virtualization

Red Hat has released updates to address multiple vulnerabilities fixes in OpenShift Virtualization. A malicious party could vulnerabilities potentially exploit them to cause a denial-of-service cause. Red Hat has released updates to fix the vulnerabilities in OpenShift Virtualization. For more...

7.5CVSS6.9AI score0.20521EPSS
SaveExploits6
NCSC
NCSC
•added 2021/03/10 12:00 a.m.•7 views

Vulnerability fixed in Squid

Squid's developers have fixed a vulnerability. A authenticated user can exploit the vulnerability via an HTTP-Request Smuggling attack to still gain access gain access to services and websites that should be shielded. Squid has released updates to fix the vulnerability in Squid v 4.14 and 5.0.5...

8.6CVSS7AI score0.08161EPSS
SaveExploits0
NCSC
NCSC
•added 2021/03/05 12:00 a.m.•7 views

Vulnerability fixed in Xerox products

A vulnerability has been fixed in Xerox Phaser, WorkCentre and VersaLink. The vulnerability allows a malicious person to execute arbitrary code under the user's privileges. Xerox did not release any substantive details about this vulnerability. No CVE attribute has been assigned to this...

7.2AI score
SaveExploits0
NCSC
NCSC
•added 2021/03/04 12:00 a.m.•7 views

Vulnerability fixed in wpa_supplicant

A vulnerability has been fixed in wpasupplicant when it is configured for P2P Wi-Fi Direct support. A malicious person within Wi-Fi range could potentially exploit it to cause a denial-of-service or execute arbitrary execute arbitrary code with root privileges. w1.fi has released updates to fix t...

7.5CVSS7.5AI score0.01228EPSS
SaveExploits0
NCSC
NCSC
•added 2021/03/03 12:00 a.m.•7 views

Vulnerability fixed in NetApp Active IQ Unified Manager and Snap Creator Framework

NetApp has fixed a vulnerability in JQuery as used in Active IQ Unified Manager and Snap Creator Framework, among others. The vulnerabilities allow an unauthenticated malicious person to to access sensitive data or manipulate data. NetApp has released updates to fix the vulnerabilities in Active ...

6.1CVSS6.5AI score0.06273EPSS
SaveExploits4
NCSC
NCSC
•added 2021/03/03 12:00 a.m.•7 views

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive data As usual, Google...

8.8CVSS7.2AI score0.26723EPSS
SaveExploits24
NCSC
NCSC
•added 2021/02/23 12:00 a.m.•7 views

Vulnerabilities fixed in Ruby on Rails

Vulnerabilities have been fixed in Ruby on Rails. The vulnerabilities allow a malicious party to cause a denial-of-service cause and redirect a user to a rogue web page. The Ruby on Rails developers have released updates to fix the vulnerabilities. More information can be found on the pages below...

7.5CVSS6.6AI score0.87301EPSS
SaveExploits2
NCSC
NCSC
•added 2021/02/22 12:00 a.m.•7 views

Vulnerabilities fixed in Python

Vulnerabilities have been fixed in Python. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Python developers have indicated that the vulnerability with...

9.8CVSS6.3AI score0.35963EPSS
SaveExploits2
NCSC
NCSC
•added 2021/02/19 12:00 a.m.•7 views

Vulnerability fixed in IBM WebSphere Application Server

IBM WebSphere Application Server can let an attacker remotely access folders access folders. An attacker can send a specially crafted URL request with "dot-dot" strings /../ to send arbitrary files on the system. IBM has released updates to fix the vulnerability. For more information, see:...

7.8CVSS6.8AI score0.04097EPSS
SaveExploits0
NCSC
NCSC
•added 2021/02/18 12:00 a.m.•7 views

Vulnerabilities fixed in Red Hat OpenShift Container Platform

Red Hat has fixed multiple vulnerabilities in OpenShift Container Platform. The vulnerabilities are in the applications Jenkins and Ant, and allow an unauthenticated remote malicious person to remote may be able to launch attacks that result in the following categories of damage: Cross-Site...

8CVSS8.3AI score0.08016EPSS
SaveExploits0
NCSC
NCSC
•added 2021/02/17 12:00 a.m.•7 views

Vulnerability fixed in Foxit Reader and Foxit PhantomPDF

Foxit has fixed vulnerabilities in Foxit Reader and Foxit PhantomPDF. A malicious party could potentially exploit it to cause a denial-of-service or execute arbitrary execute arbitrary code with the privileges of the logged-in user. Foxit has released updates to fix the vulnerabilities. For more...

7.8CVSS7.7AI score0.03554EPSS
SaveExploits0
NCSC
NCSC
•added 2021/02/17 12:00 a.m.•7 views

Multiple vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. A malicious person could potentially exploit the vulnerabilities to cause a denial-of-service cause or execute arbitrary code with the privileges of the logged in user. As usual, Google is disclosing little information regarding the details of the...

9.6CVSS7.7AI score0.09458EPSS
SaveExploits8
NCSC
NCSC
•added 2021/02/15 12:00 a.m.•7 views

Vulnerability fixed in Apache Subversion (SVN)

Apache has fixed a vulnerability in Subversion SVN. The vulnerability allows an unauthenticated remote malicious person capable of causing a denial-of-service. Apache categorizes this vulnerability according to the CVSSv3 method with a score of 7.5. Apache has released updates to fix the...

7.5CVSS6.8AI score0.40075EPSS
SaveExploits1
NCSC
NCSC
•added 2021/02/12 12:00 a.m.•7 views

Vulnerabilities fixed in PostgreSQL

Several vulnerabilities have been fixed in PostgreSQL. A malicious person with limited privileges could potentially exploit them to gain access to data stored in a PostgreSQL database. Developers have released updates to fix the vulnerabilities fixes in PostgreSQL 13.2, 12.6, 11.11, 10.16, 9.6.21...

4.3CVSS7.1AI score0.01466EPSS
SaveExploits2
NCSC
NCSC
•added 2021/02/12 12:00 a.m.•7 views

Vulnerabilities fixed in GitLab

Several vulnerabilities have been fixed in GitLab. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Accessing sensitive data Accessing system data No CVE numbers have yet been...

7AI score
SaveExploits0
NCSC
NCSC
•added 2021/02/11 12:00 a.m.•7 views

Vulnerability fixed in IBM WebSphere Application Server

IBM WebSphere Application Server is vulnerable to an XML External Entity Injection XXE attack when processing XML data. An external attacker can exploit this security vulnerability to obtain obtain sensitive information. IBM has released updates to fix the vulnerability. For more information, see...

8.2CVSS7AI score0.05162EPSS
SaveExploits0
NCSC
NCSC
•added 2021/02/10 12:00 a.m.•7 views

Vulnerability fixed in the Ubuntu kernel

A vulnerability has been fixed in Ubuntu's kernel. The vulnerability allows a local malicious person to run programs run as administrator, execute arbitrary code as root or cause a denial-of-service. Canonical has released updates to fix the vulnerability. fix. More information can be found on th...

7CVSS7.9AI score0.01589EPSS
SaveExploits2
NCSC
NCSC
•added 2021/02/10 12:00 a.m.•7 views

Vulnerabilities fixed in Xerox WorkCentre

Xerox has fixed several vulnerabilities in WorkCentre. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service or to perform a Cross-Site Scripting XSS attack. The latter can lead to the execution of arbitrary script code in the browser used to visit the application is...

6.8AI score
SaveExploits0
Total number of security vulnerabilities4353