Talos

22 results · Clear filters · Feed

• Medium 5.8
  CVE-2019-5017

  An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the Ready…

  Talos KCodes
  Jun 17, 2019
• Medium 6.5
  CVE-2018-4059

  An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version…

  Talos coTURN coturn coturn Debian Ubuntu
  Mar 21, 2019
• Medium 4.0
  CVE-2018-3970

  An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.A…

  Talos Sophos
  Oct 25, 2018
• Medium 5.4
  CVE-2018-3885

  An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…

  Talos ERPNext
  Sep 12, 2018
• Medium 5.4
  CVE-2018-3883

  An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…

  Talos ERPNext
  Sep 12, 2018
• Medium 5.4
  CVE-2018-3884

  An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…

  Talos ERPNext
  Sep 12, 2018
• Medium 5.3
  CVE-2018-3926

  An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of th…

  Talos Samsung
  Aug 28, 2018
• Medium 5.3
  CVE-2018-3840

  A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67). The vulnerability is pr…

  Talos Pixar Renderman
  Jun 26, 2018
• Medium 5.3
  CVE-2018-3841

  A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69). The vulnerability is pr…

  Talos Pixar Renderman
  Jun 26, 2018
• Medium 5.3
  CVE-2017-12128 EPSS 40%

  An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build…

  Talos Moxa
  May 14, 2018
• Medium 5.7
  CVE-2017-12123

  An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of M…

  Talos Moxa
  May 14, 2018
• Medium 4.4
  CVE-2017-12127

  A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An a…

  Talos Moxa
  May 14, 2018
• Medium 6.5
  CVE-2018-3843 EPSS 22%

  An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with ass…

  Talos Foxit
  Apr 19, 2018
• Medium 5.3
  CVE-2017-12093

  An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Brad…

  Talos Allen Bradley
  Apr 5, 2018
• Medium 4.0
  CVE-2017-12118

  An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e10157…

  Talos CPP-Ethereum
  Jan 19, 2018
• Medium 6.8
  CVE-2017-12116

  An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit …

  Talos CPP-Ethereum
  Jan 19, 2018
• Medium 4.0
  CVE-2017-12113

  An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1…

  Talos CPP-Ethereum
  Jan 19, 2018
• Medium 4.0
  CVE-2017-12114

  An exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's JSON-RPC (commit 4e1015…

  Talos CPP-Ethereum
  Jan 19, 2018
• Medium 4.0
  CVE-2017-12112

  An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e10…

  Talos CPP-Ethereum
  Jan 19, 2018
• Medium 4.0
  CVE-2017-12117

  An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015…

  Talos CPP-Ethereum
  Jan 19, 2018
• Medium 6.8
  CVE-2017-12115

  An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit…

  Talos CPP-Ethereum
  Jan 19, 2018
• Medium 6.1
  CVE-2017-12097

  delayed_job_web Cross-site Scripting vulnerability

  An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web rails gem version 1.4. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the v…

  Talos delayed_job_web rails gem delayed_job_web RubyGems
  Jan 19, 2018