Recent vulnerabilities and exploits

3.3

CVSSv2

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to...

Linux Linux Kernel

4.3

CVSSv2

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with...

Netapp E-series Santricity Os Controller E-series Santricity Storage Manager E-series Santricity Unified Manager E-series Santricity Web Services Proxy Oncommand Workflow Automation Snapmanager Oracle Graalvm Jdk Jre Redhat Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation

4.3

CVSSv2

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with...

Netapp E-series Santricity Storage Manager E-series Santricity Unified Manager E-series Santricity Web Services Proxy Oncommand Workflow Automation Snapmanager Oracle Jdk Jre Debian Debian Linux Redhat Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation

NA

An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary files from the server via Directory Traversal....

5

CVSSv2

Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983....

Google Android2 Github repositories available1 Article available

NA

A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device....

NA

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter....

NA

An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter....

NA

A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page....

NA

A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs. When a guest is running on a host CPU affected by the TAA...

1 2 3 4 5 6 NEXT »