Italiano
English
Esce oggi il Cybersecurity Act, nuovo strumento normativo europeo che punta a stabilire delle regole per una sicurezza informatica più coesa e comunitaria. Si tratta di un Regolamento che ha lo scopo di creare un quadro europeo ben definito sulla certificazione della sicurezza informatica di...
NOTIZIE
SERVIZI
|
Il servizio offre la possibilità di cercare informazioni, note pubblicamente, relative a vulnerabilità di sicurezza... |
Il servizio raccoglie informazioni relative ad exploit pubblici aggiornati giornalmente attraverso il repository... |
Il servizio offre una piattaforma che consente ai Registrar di verificare eventuali problemi di performance e sicurezza... |
Servizio Rilevazione Malware. Il servizio permette di rilevare comportamenti malevoli in file (ad esempio, eseguibili o... |
ULTIMI CVE
| Published | Description | |
|---|---|---|
| CVE-2019-0234 |
15-07-2019 18:15:12 |
A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did not property sanitize user input and could be exploited to perform Reflected Cross Site Scripting (XSS). The mitigation for this vulnerability is to upgrade to the latest version of Roller, which is now Roller 5.2.3. |
| CVE-2019-6822 |
15-07-2019 17:15:10 |
A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code execution when opening a specially crafted Zelio Soft 2 project file. |
| CVE-2019-6827 |
15-07-2019 17:15:10 |
A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a software crash when data in the mdb database is manipulated. |
| CVE-2018-7838 |
15-07-2019 17:15:10 |
A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service. |
| CVE-2019-6825 |
15-07-2019 17:15:10 |
A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0. |
Pages
ULTIMI EXPLOIT
| Date | Title | Platform | Author |
|---|---|---|---|
|
12-07-2019 |
Xymon 4.3.25 - useradm Command Execution (Metasploit) | multiple | Metasploit |
|
12-07-2019 |
Jenkins Dependency Graph View Plugin 0.13 - Persistent Cross-Site Scripting | java | Ishaq Mohammed |
|
11-07-2019 |
SNMPc Enterprise Edition 9/10 - Mapping Filename Buffer Overflow | windows | mark |
|
11-07-2019 |
Sitecore 9.0 rev 171002 - Persistent Cross-Site Scripting | aspx | Owais Mehtab |
|
10-07-2019 |
Microsoft DirectWrite / AFDKO - Heap-Based Out-of-Bounds Read/Write in OpenType Font Handling Due to Empty ROS Strings | windows | Google Security Research |