Aggregator

CVE-2012-5851 | Apple Safari 5.1.7 parser/XSSAuditor.cpp cross site scripting (simple-cross-site-scripting-vector-that / EDB-38024)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in Apple Safari 5.1.7. It has been classified as problematic. This affects an unknown part of the file parser/XSSAuditor.cpp. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2012-5851. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Ransomware 2.0 How AI-Powered Attacks Are Evolving

Cyber Security News
10 months 2 weeks ago

Ransomware attacks have entered a new era of sophistication and danger, with AI-powered ransomware attacks marking a significant evolution beyond encrypting payment files. It incorporates advanced tactics powered by artificial intelligence that make these attacks more devastating, harder to detect, and increasingly difficult to prevent. The Evolution of Ransomware 2.0 Traditional ransomware encrypted files and […]

The post Ransomware 2.0 How AI-Powered Attacks Are Evolving appeared first on Cyber Security News.

CISO Advisory

CVE-2024-57257 | DENEX U-Boot prior 2025.01-rc1 SquashFS Symlink Resolution stack-based overflow (EUVD-2025-4761 / Nessus ID 235044)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in DENEX U-Boot. It has been rated as critical. This issue affects some unknown processing of the component SquashFS Symlink Resolution Handler. The manipulation leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2024-57257. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-57262 | Barebox prior 2025.01.0 SquashFS Symlink Resolution integer overflow (EUVD-2025-4759)

Vuldb Updates
10 months 2 weeks ago
A vulnerability has been found in Barebox and classified as critical. This vulnerability affects unknown code of the component SquashFS Symlink Resolution Handler. The manipulation leads to integer overflow. This vulnerability was named CVE-2024-57262. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-50609 | Fluent Bit 3.1.9 opentelemetry_prot.c process_payload_traces_proto_ng null pointer dereference (EUVD-2025-4694 / Nessus ID 216915)

Vuldb Updates
10 months 2 weeks ago
A vulnerability has been found in Fluent Bit 3.1.9 and classified as problematic. Affected by this vulnerability is the function process_payload_traces_proto_ng of the file opentelemetry_prot.c. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2024-50609. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2024-57261 | Barebox prior 2025.01.0 Memory Allocator integer overflow (EUVD-2025-4755)

Vuldb Updates
10 months 2 weeks ago
A vulnerability, which was classified as critical, was found in Barebox. This affects an unknown part of the component Memory Allocator. The manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2024-57261. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2008-1286 | Sun Java Web Console 3.0.3 Access Restriction information disclosure (Nessus ID 31599 / ID 86830)

Vuldb Updates
10 months 2 weeks ago
A vulnerability classified as critical has been found in Sun Java Web Console 3.0.3. This affects an unknown part of the component Access Restriction. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2008-1286. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2008-1368 | Microsoft Internet Explorer 5/6 FTP Client code injection (ID 100128 / BID-28208)

Vuldb Updates
10 months 2 weeks ago
A vulnerability, which was classified as problematic, has been found in Microsoft Internet Explorer 5/6. This issue affects some unknown processing of the component FTP Client. The manipulation leads to code injection. The identification of this vulnerability is CVE-2008-1368. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2008-1309 | RealNetworks RealPlayer 10.0/10.5/11 ActiveX Control rmoc3260.dll resource management (VU#831457 / EDB-5332)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in RealNetworks RealPlayer 10.0/10.5/11. It has been rated as very critical. Affected by this issue is some unknown functionality in the library rmoc3260.dll of the component ActiveX Control. The manipulation leads to improper resource management. This vulnerability is handled as CVE-2008-1309. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2008-1376 | Red Hat Nfs Utils up to 1.0.8 Access Restriction access control (Nessus ID 67695 / ID 115893)

Vuldb Updates
10 months 2 weeks ago
A vulnerability classified as critical has been found in Red Hat Nfs Utils up to 1.0.8. Affected is an unknown function of the component Access Restriction. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2008-1376. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2009-0080 | Microsoft Windows Server 2008 Local Privilege Escalation (MS09-012 / EDB-31667)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in Microsoft Windows Server 2008 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to Local Privilege Escalation. This vulnerability is handled as CVE-2009-0080. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2008-1441 | Microsoft Windows Server 2003/Vista/XP input validation (Nessus ID 33137 / ID 90442)

Vuldb Updates
10 months 2 weeks ago
A vulnerability classified as problematic has been found in Microsoft Windows Server 2003/Vista/XP. Affected is an unknown function. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2008-1441. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad