|
Il servizio raccoglie informazioni relative ad exploit pubblici aggiornati giornalmente attraverso il repository... |
Il servizio analizza gruppi di email file (formato .eml) per identificare le email indesiderate (SPAM). Il servizio... |
Un’ontologia rappresenta una risorsa per organizzare la conoscenza di un dominio in maniera più dettagliata attraverso... |
Servizio Rilevazione Malware. Il servizio permette di rilevare comportamenti malevoli in file (ad esempio, eseguibili o... |
| Published | Description | |
|---|---|---|
| CVE-2019-6497 |
20-01-2019 15:29:01 |
Hotels_Server through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter. |
| CVE-2019-6496 |
20-01-2019 15:29:00 |
The ThreadX-based firmware on Marvell Avastar Wi-Fi devices allows remote attackers to execute arbitrary code or cause a denial of service (block pool overflow) via malformed Wi-Fi packets during identification of available Wi-Fi networks. Exploitation of the Wi-Fi device can lead to exploitation of the host application processor in some cases, but this depends on several factors including host OS hardening and the availability of DMA. |
| CVE-2018-18908 |
20-01-2019 15:29:00 |
The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP. This makes the data submitted in these requests prone to Man in The Middle (MiTM) attacks, whereby an attacker would be able to obtain the data sent in these requests. Some of the requests contain potentially sensitive information that could be useful to an attacker, such as the victim's Sky username. |
| CVE-2019-3773 |
18-01-2019 17:29:01 |
Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources. |
| CVE-2019-3774 |
18-01-2019 17:29:01 |
Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from untrusted sources. |
| Date | Title | Platform | Author |
|---|---|---|---|
|
14-01-2019 |
Craigs Classified Ads CMS Theme 1.0.2 - SQL Injection | php | Ihsan Sencan |
|
14-01-2019 |
Microsoft Windows 10 - DSSVC MoveFileInheritSecurity Privilege Escalation | windows | Google Security Research |
|
14-01-2019 |
i-doit CMDB 1.12 - SQL Injection | php | Ihsan Sencan |
|
14-01-2019 |
xorg-x11-server < 1.20.3 - Local Privilege Escalation (Solaris 11 inittab) | solaris | Marco Ivaldi |
|
14-01-2019 |
Across DR-810 ROM-0 - Backup File Disclosure | hardware | SajjadBnd |
Italiano
English