Aggregator
CVE-2000-0449 | Omnis Studio 2.4 Database Field Encryption missing encryption (EDB-19967 / BID-1255)
8 months ago
A vulnerability classified as critical has been found in Omnis Studio 2.4. This affects an unknown part of the component Database Field Encryption Handler. The manipulation leads to missing encryption of sensitive data.
This vulnerability is uniquely identified as CVE-2000-0449. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.
vuldb.com
Clop ransomware is now extorting 66 Cleo data-theft victims
8 months ago
The Clop ransomware gang started to extort victims of its Cleo data theft attacks and announ
Too Much 'Trust,' Not Enough 'Verify'
8 months ago
"Zero trust" doesn't mean "zero testing."
Rob Sloan, Sam Curry
X0Frankenstein Claims to have Leaked the Data of eeeezy
8 months ago
X0Frankenstein Claims to have Leaked the Data of eeeezy
Dark Web Informer - Cyber Threat Intelligence
国际空间站再次躲避风云一号C星碎片
8 months ago
上个月国际空间站在六天内两次点燃推进器,执行机动,躲避卫星碎片。其中之一来自 2007 年风云一号C星的残片。2007 年的反卫星导弹测试产生了大量碎片,其中 3,500 块碎片仍然对轨道上的飞行器构成了碰撞威胁。自 2020 年以来,国际空间站执行了 15 次躲避太空碎片的机动。目前国际空间站有 4 名美国宇航员和 3 名俄罗斯宇航员,最新的规避机动是在美国太空军发出警告之后进行的,太空军跟踪了逾 47,200 个在轨物体,每天发出约 23 次碰撞警告,而五年前每天只有 6 次。
El Dorado
8 months ago
cohenido
CVE-2017-0070 | Microsoft Edge 38.14393.0.0 Scripting Engine access control (MS17-007 / EDB-41623)
8 months ago
A vulnerability was found in Microsoft Edge 38.14393.0.0. It has been rated as critical. This issue affects some unknown processing of the component Scripting Engine. The manipulation leads to improper access controls.
The identification of this vulnerability is CVE-2017-0070. The attack may be initiated remotely. Furthermore, there is an exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2017-0071 | Microsoft Edge Scripting Engine memory corruption (MS17-007 / Nessus ID 97730)
8 months ago
A vulnerability classified as critical has been found in Microsoft Edge. Affected is an unknown function of the component Scripting Engine. The manipulation leads to memory corruption.
This vulnerability is traded as CVE-2017-0071. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2017-0072 | Microsoft Windows Uniscribe data processing (MS17-011 / EDB-41654)
8 months ago
A vulnerability was found in Microsoft Windows 7 SP1/Server 2008 R2 SP1/Server 2008 SP2/Vista SP2 and classified as critical. Affected by this issue is some unknown functionality of the component Uniscribe. The manipulation leads to data processing error.
This vulnerability is handled as CVE-2017-0072. The attack may be launched remotely. Furthermore, there is an exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2017-0067 | Microsoft Edge Scripting Engine memory corruption (MS17-007 / Nessus ID 97730)
8 months ago
A vulnerability was found in Microsoft Edge and classified as critical. Affected by this issue is some unknown functionality of the component Scripting Engine. The manipulation leads to memory corruption.
This vulnerability is handled as CVE-2017-0067. The attack may be launched remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2017-0068 | Microsoft Edge information disclosure (MS17-007 / Nessus ID 97730)
8 months ago
A vulnerability was found in Microsoft Edge. It has been classified as problematic. This affects an unknown part. The manipulation leads to information disclosure.
This vulnerability is uniquely identified as CVE-2017-0068. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2017-0069 | Microsoft Edge input validation (MS17-007 / Nessus ID 97730)
8 months ago
A vulnerability was found in Microsoft Edge. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to improper input validation.
This vulnerability was named CVE-2017-0069. The attack can be initiated remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2017-0066 | Microsoft Edge Security Feature access control (MS17-007 / Nessus ID 97730)
8 months ago
A vulnerability has been found in Microsoft Edge and classified as critical. Affected by this vulnerability is an unknown functionality of the component Security Feature. The manipulation leads to improper access controls.
This vulnerability is known as CVE-2017-0066. The attack can be launched remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
Adobe security advisory (AV24–729)
8 months ago
Canadian Centre for Cyber Security
CVE-2004-0989 | libxml2 DNS Reply xmlNanoFTPConnect memory corruption (EDB-24704 / Nessus ID 38061)
8 months ago
A vulnerability classified as critical was found in libxml2. Affected by this vulnerability is the function xmlNanoFTPConnect of the component DNS Reply Handler. The manipulation leads to memory corruption.
This vulnerability is known as CVE-2004-0989. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
These are the cybersecurity stories we were jealous of in 2024
8 months ago
Since 2018, along with colleagues first at VICE Motherboard, and now at TechCrunch, I have been pub
CVE-2013-5566 | Cisco NX-OS up to 4.1.x memory corruption (Alert 31663 / Nessus ID 78557)
8 months ago
A vulnerability classified as problematic has been found in Cisco NX-OS up to 4.1.x. This affects an unknown part. The manipulation leads to memory corruption.
This vulnerability is uniquely identified as CVE-2013-5566. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2013-5560 | Cisco ASA up to 9.1.3 IPv6 Network Address Translation IPv6 Packet input validation (ID 43396 / XFDB-88652)
8 months ago
A vulnerability was found in Cisco ASA up to 9.1.3. It has been rated as critical. Affected by this issue is some unknown functionality of the component IPv6 Network Address Translation Handler. The manipulation as part of IPv6 Packet leads to improper input validation.
This vulnerability is handled as CVE-2013-5560. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2013-5557 | Cisco ASA 9.1(.2) Proxy Content Rewriter code (CSCug91577 / ID 43473)
8 months ago
A vulnerability was found in Cisco ASA 9.1(.2). It has been declared as problematic. This vulnerability affects unknown code of the component Proxy Content Rewriter. The manipulation leads to code.
This vulnerability was named CVE-2013-5557. The attack can be initiated remotely. There is no exploit available.
vuldb.com