Lucene search
+L

5966 matches found

OSV
OSV
•added 2019/06/18 6:15 p.m.•11 views

DEBIAN-CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS8.3AI score0.00531EPSS
SaveExploits0References1
NVD
NVD
•added 2019/06/18 6:15 p.m.•26 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.2AI score0.00531EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2019/06/18 6:15 p.m.•11 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS6AI score0.00531EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2019/06/18 6:15 p.m.•36 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.4AI score0.00531EPSS
SaveExploits0References2
Prion
Prion
•added 2019/06/18 6:15 p.m.•19 views

Heap overflow

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

4.6CVSS7.4AI score0.00531EPSS
SaveExploits0References6Affected Software2
OSV
OSV
•added 2019/06/18 6:15 p.m.•11 views

UBUNTU-CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.5AI score0.00531EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/06/18 5:34 p.m.•54 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7CVSS7.7AI score0.00531EPSS
SaveExploits0References6
CVE
CVE
•added 2019/06/18 5:34 p.m.•253 views

CVE-2012-6711

CVE-2012-6711 describes a heap-based buffer overflow in GNU Bash prior to 4.3. When wide characters not supported by the current LC_CTYPE locale are printed via the echo builtin, ansicstr() mishandles u32cconv() in lib/sh/strtrans.c, potentially allowing a local attacker to crash a script or exec...

7.8CVSS7.6AI score0.00531EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2019/06/18 5:34 p.m.•88 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.7AI score0.00531EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/18 12:00 a.m.•4 views

CVE-2012-6711: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.6AI score0.00531EPSS
SaveExploits0References2
ThreatPost
ThreatPost
•added 2019/06/14 2:55 p.m.•70 views

Amazon Alexa Secretly Records Children, Lawsuits Allege

A federal lawsuit is alleging that Amazon is recording children who use its Alexa devices, without their consent or knowledge. Alexa is the built-in voice assistant shipped with devices like Amazon Echo, Amazon Dot, Fire TV and some third-party gadgets. “Alexa routinely records and voiceprints...

0.2AI score
SaveExploits0References8
Prion
Prion
•added 2019/06/06 6:29 p.m.•23 views

Stack overflow

TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevate...

9CVSS8.8AI score0.11374EPSS
SaveExploits3References2
NVD
NVD
•added 2019/06/06 6:29 p.m.•41 views

CVE-2019-6989

TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevate...

9CVSS8.9AI score0.11374EPSS
SaveExploits3References2
CVE
CVE
•added 2019/06/06 5:24 p.m.•304 views

CVE-2019-6989

CVE-2019-6989 describes a stack-based buffer overflow in TP-LINK TL-WR940N (and TL-WR941ND) caused by improper bounds checking in ipAddrDispose. The vulnerability can be triggered by specially crafted ICMP echo requests, allowing a remote authenticated attacker to overflow a buffer and execute ar...

9CVSS8.9AI score0.11374EPSS
SaveExploits3References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/06 12:00 a.m.•2 views

CVE-2019-6989: Out-of-bounds Write

TP-Link TL-WR940N is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the ipAddrDispose function. By sending specially crafted ICMP echo request packets, a remote authenticated attacker could overflow a buffer and execute arbitrary code on the system with elevate...

9CVSS6.7AI score0.11374EPSS
SaveExploits3References2
OSV
OSV
•added 2019/05/13 1:29 p.m.•16 views

CVE-2018-12300

Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via the 'state' URL parameter...

6.1CVSS5.7AI score0.03127EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/13 12:00 a.m.•5 views

CVE-2018-12300: URL Redirection to Untrusted Site

Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via the 'state' URL parameter...

6.1CVSS5.8AI score0.03127EPSS
SaveExploits1References2
Veracode
Veracode
•added 2019/05/02 5:35 a.m.•59 views

Remote Command Execution

kernel-rt is vulnerable to remote command execution. The vulnerability exists as a brute-force attack can be used to retrieve a cookie which can be used to execute SysRq commands via ICMP Echo Request packets...

8.1CVSS8.3AI score0.03387EPSS
SaveExploits0References12Affected Software1
ThreatPost
ThreatPost
•added 2019/04/26 5:57 p.m.•190 views

News Wrap: Amazon Echo Privacy, Facebook FTC Fines and Biometrics Regulation

Data privacy has been an outstanding theme this past week, and the Threatpost team discussed the biggest privacy related news. In the news wrap podcast for April 26, the team discussed the backstories behind several reports from the week, including: Facebook potentially facing Federal Trade...

9CVSS7.4AI score0.99962EPSS
SaveExploits29References7
Wired Threat Level
Wired Threat Level
•added 2019/04/11 10:27 p.m.•65 views

How To Make Your Amazon Echo and Google Home as Private as Possible

With news that Amazon lets human employees listen to Alexa recordings, you might want to tighten up your smart assistant ship...

0.9AI score
SaveExploits0
Rows per page
Query Builder