7.5CVSS
6.5AI Score
0.056EPSS
7.5CVSS
7.5AI Score
0.074EPSS
openSUSE Security Update : the Linux Kernel (openSUSE-2020-801)
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which...
7.8CVSS
8.6AI Score
0.008EPSS
Beijing Shenzhou Green Alliance Technology Co., Ltd. is a company whose business scope includes technology development, technology consulting, technology services; computer system services and so on. A command execution vulnerability exists in the Green Alliance Operations and Maintenance Security....
7.9AI Score
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
Hi, actually we have sent the bug report to [email protected] on 27th March 2023 and on 10th April 2023. Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability Summary: | Product | Grav CMS | | ----------------------- |...
8.8CVSS
8.6AI Score
EPSS
Malicious input can provoke XSS when preserving comments
Impact There is a potential for a mutation XSS (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the preserveComments directive must be enabled in your policy file. As a result, certain crafty inputs can result in elements in....
6.1CVSS
6AI Score
0.0004EPSS
Stable Channel Update for ChromeOS / ChromeOS Flex
The Stable channel is being updated to OS version: 15699.58.0 Browser version: 121.0.6167.159 for most ChromeOS devices. If you find new issues, please let us know one of the following ways File a bug Visit our ChromeOS communities General: Chromebook Help Community Beta Specific: ChromeOS Beta...
9.8CVSS
7.7AI Score
EPSS
Huawei EulerOS: Security Advisory for openssl1.1.0f (EulerOS-SA-2019-2254)
The remote host is missing an update for the Huawei...
4.7CVSS
6AI Score
0.015EPSS
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2020-1274)
The remote host is missing an update for the Huawei...
4.7CVSS
6AI Score
0.015EPSS
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Affected products and versions are as follows: WRC-X1800GS-B v1.17 and...
6.8CVSS
7.1AI Score
0.0004EPSS
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2019-2264)
The remote host is missing an update for the Huawei...
4.7CVSS
6AI Score
0.015EPSS
Wordfence Intelligence Weekly WordPress Vulnerability Report (March 25, 2024 to March 31, 2024)
Did you know we're running a Bug Bounty Extravaganza again? Earn over 6x our usual bounty rates, up to $10,000, for all vulnerabilities submitted through May 27th, 2024 when you opt to have Wordfence handle responsible disclosure! Last week, there were 405 vulnerabilities disclosed in 320...
10CVSS
9.7AI Score
EPSS
Huawei EulerOS: Security Advisory for openssl110h (EulerOS-SA-2019-2218)
The remote host is missing an update for the Huawei...
5.9CVSS
6.5AI Score
0.015EPSS
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Hi, actually we have sent the bug report to [email protected] on 27th March 2023 and on 10th April 2023. Grav Server-side Template Injection (SSTI) via Insufficient Validation in filterFilter Summary: | Product | Grav CMS | |...
8.8CVSS
8.3AI Score
EPSS
Huawei EulerOS: Security Advisory for compat-openssl10 (EulerOS-SA-2019-2098)
The remote host is missing an update for the Huawei...
4.7CVSS
6.1AI Score
0.015EPSS
Huawei EulerOS: Security Advisory for openssl110f (EulerOS-SA-2019-2430)
The remote host is missing an update for the Huawei...
5.9CVSS
6.6AI Score
0.015EPSS
Description The plugin is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.4 via the 'ma_debu' parameter. This makes it possible for unauthenticated attackers to extract sensitive data including post author emails and names if...
7.5CVSS
6.5AI Score
0.001EPSS
The firmware update package for the wireless card is not properly signed and can be...
5.7CVSS
5.7AI Score
0.0004EPSS
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2019-2216)
The remote host is missing an update for the Huawei...
4.7CVSS
6.1AI Score
0.015EPSS
Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China
The U.S. Department of Justice (DoJ) announced the indictment of a 38-year-old Chinese national and a California resident for allegedly stealing proprietary information from Google while covertly working for two China-based tech companies. Linwei Ding (aka Leon Ding), a former Google engineer who.....
6.8AI Score
An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access...
5.7AI Score
0.0004EPSS
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2019-2464)
The remote host is missing an update for the Huawei...
4.7CVSS
6.1AI Score
0.015EPSS
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2020-1221)
The remote host is missing an update for the Huawei...
4.7CVSS
6.1AI Score
0.015EPSS
Beijing Yisaitong Technology Development Co., Ltd. is an enterprise mainly engaged in science and technology promotion and application service industry. A command execution vulnerability exists in the Yisetong Electronic Document Security Management System, which can be exploited by an attacker to....
7.5AI Score
Huawei EulerOS: Security Advisory for compat-openssl10 (EulerOS-SA-2020-1061)
The remote host is missing an update for the Huawei...
4.7CVSS
6.1AI Score
0.015EPSS
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Account Footprinting.This issue affects inSCADA: before...
9.8CVSS
9.6AI Score
0.002EPSS
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Account Footprinting.This issue affects inSCADA: before...
9.8CVSS
9.3AI Score
0.002EPSS
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2020-1063)
The remote host is missing an update for the Huawei...
5.3CVSS
6.2AI Score
0.015EPSS
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2019-2097)
The remote host is missing an update for the Huawei...
5.3CVSS
6.2AI Score
0.015EPSS
6.4AI Score
0.001EPSS
Command Injection Vulnerability in DIR-822+ V1.0.2 of AUO Electronic Equipment (Shanghai) Co.
DIR-822 is a wireless router from D-Link, a Chinese company. A command injection vulnerability exists in the AUO Electronic Devices (Shanghai) Co. DIR-822+ version V1.0.2, which stems from the SetStaticRouteSettings function failing to correctly filter constructor command special characters,...
9.8CVSS
7.7AI Score
0.001EPSS
When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory to cause execution of malicious...
7.8CVSS
7.5AI Score
0.001EPSS
Shanghai Old Cadre app is a senior activity software specially created for some party members and old cadres in Shanghai. Shanghai Zhongyun Digital Win Cloud Computing Technology Co. Shanghai Old Cadre App has a logic flaw vulnerability that can be exploited by attackers to cause SMS...
7AI Score
SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2020:3372-1)
This update for ucode-intel fixes the following issues : Updated Intel CPU Microcode to 20201110 official release. CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446) CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594) CVE-2020-8696:...
5.5CVSS
6.5AI Score
0.0005EPSS
SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3457-1)
This update for ucode-intel fixes the following issues : Updated Intel CPU Microcode to 20201110 official release. CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) INTEL-SA-00389 (bsc#1170446) CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594) ...
5.5CVSS
6.5AI Score
0.0005EPSS
SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2020:3373-1)
This update for ucode-intel fixes the following issues : Updated Intel CPU Microcode to 20201110 official release. CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446) CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594) CVE-2020-8696:...
5.5CVSS
6.5AI Score
0.0005EPSS
Beijing Yisaitong Technology Development Co., Ltd. is an enterprise mainly engaged in science and technology promotion and application service industry. A SQL injection vulnerability exists in the Yisetong electronic document security management system, which can be exploited by attackers to...
7.6AI Score
An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web...
8.8CVSS
7.5AI Score
0.001EPSS
Open redirect vulnerability in Access analysis CGI An-Analyzer released in 2023 December 31 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary websites and conduct phishing attacks via a specially crafted...
6.1CVSS
6.2AI Score
0.001EPSS
SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2020:3514-1)
This update for ucode-intel fixes the following issues : Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971) Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms. CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) INTEL-SA-00389...
5.5CVSS
6.5AI Score
0.0005EPSS
Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2016-1061)
The remote host is missing an update for the Huawei...
7.5CVSS
8.8AI Score
0.009EPSS
4.7CVSS
6.1AI Score
0.015EPSS
U.S. Charges Iranian Hacker, Offers $10 Million Reward for Capture
The U.S. Department of Justice (DoJ) on Friday unsealed an indictment against an Iranian national for his alleged involvement in a multi-year cyber-enabled campaign designed to compromise U.S. governmental and private entities. More than a dozen entities are said to have been targeted, including...
6.8AI Score
New Leak Shows Business Side of China’s APT Menace
A new data leak that appears to have come from one of China's top private cybersecurity firms provides a rare glimpse into the commercial side of China's many state-sponsored hacking groups. Experts say the leak illustrates how Chinese government agencies increasingly are contracting out foreign...
7.1AI Score
8.8CVSS
8.4AI Score
0.001EPSS
5.5CVSS
6.2AI Score
0.0005EPSS
5.5CVSS
6.2AI Score
0.0005EPSS
Signed third party UEFI bootloaders are vulnerable to Secure Boot bypass
Overview A security feature bypass vulnerability exists in signed 3rd party UEFI bootloaders that allows bypass of the UEFI Secure Boot feature. An attacker who successfully exploits this vulnerability can bypass the UEFI Secure Boot feature and execute unsigned code during the boot process....
6.7CVSS
7.2AI Score
0.001EPSS
8.8CVSS
8.4AI Score
0.001EPSS
5.5CVSS
6.2AI Score
0.0005EPSS