Lucene search
+L

5679 matches found

Tenable Nessus
Tenable Nessus
added 2018/05/02 12:00 a.m.241 views

EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1118)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the...

9.8CVSS8.2AI score0.11905EPSS
SaveExploits3References10
Tenable Nessus
Tenable Nessus
added 2018/05/02 12:00 a.m.28 views

EulerOS 2.0 SP1 : firefox (EulerOS-SA-2018-1117)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the...

9.8CVSS8.1AI score0.11905EPSS
SaveExploits3References9
OSV
OSV
added 2018/04/24 7:29 p.m.13 views

CVE-2016-9038

An exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of Invincea-X 6.1.3-24058. A specially crafted input buffer and race condition can result in kernel memory corruption, which could result in privilege escalation. An attacker needs to execute a special...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2018/04/24 7:00 p.m.48 views

CVE-2016-9038

An exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of Invincea-X 6.1.3-24058. A specially crafted input buffer and race condition can result in kernel memory corruption, which could result in privilege escalation. An attacker needs to execute a special...

7.8CVSS7.7AI score0.00311EPSS
SaveExploits2References2
CVE
CVE
added 2018/04/24 7:00 p.m.73 views

CVE-2016-9038

CVE-2016-9038 : A double-fetch race condition exists in the Invincea-X (Dell Protected Workspace) SboxDrv.sys driver (version 6.1.3-24058). The vulnerability stems from reading a user-supplied pointer to a driver-version buffer twice: first via ProbeForWrite and then again during memcpy, using in...

7.8CVSS7.6AI score0.00311EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
added 2018/04/24 12:00 a.m.16 views

PT-2018-5057 · Invincea · Invincea-X

Name of the Vulnerable Software and Affected Versions: Invincea-X version 6.1.3-24058 Description: A double fetch vulnerability exists in the SboxDrv.sys driver functionality. This issue can be triggered by a specially crafted input buffer and a race condition, resulting in kernel memory...

7.8CVSS7.5AI score0.00311EPSS
SaveExploits2References3
CNVD
CNVD
added 2018/04/23 12:00 a.m.8 views

Multiple Apple products WebKit homology policy bypass vulnerability (CNVD-2018-09811)

Apple iOS, iCloud for Windows, iTunes for Windows, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser included with the Mac OS X and iOS operating systems. WebKit is an open source web...

6.5CVSS8.4AI score0.03017EPSS
SaveExploits0References1
NVD
NVD
added 2018/04/18 7:29 p.m.21 views

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

5.7CVSS5.6AI score0.01045EPSS
SaveExploits0References1
Prion
Prion
added 2018/04/18 7:29 p.m.34 views

Directory traversal

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

3.5CVSS5.6AI score0.01045EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/04/18 7:29 p.m.10 views

UBUNTU-CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

5.7CVSS6.1AI score0.01045EPSS
SaveExploits0References2
OSV
OSV
added 2018/04/18 7:29 p.m.11 views

DEBIAN-CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

5.7CVSS6.9AI score0.01045EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2018/04/18 7:29 p.m.61 views

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

5.7CVSS6.1AI score0.01045EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/04/18 7:00 p.m.55 views

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

5.6AI score0.01045EPSS
SaveExploits0References1
CVE
CVE
added 2018/04/18 7:00 p.m.66 views

CVE-2018-1000161

CVE-2018-1000161 affects nmap versions 6.49BETA6 through 7.60 (including SVN r37147). The vulnerability is a Directory Traversal in the NSE script http-fetch that can cause file overwrite when the script is executed by a user, exploitable when a victim runs the NSE http-fetch against a malicious ...

5.7CVSS5.6AI score0.01045EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2018/04/18 7:00 p.m.89 views

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

5.7CVSS5.6AI score0.01045EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2018/04/18 9:24 a.m.36 views

CVE-2018-6091

Service Workers can intercept any request made by an or tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

8.8CVSS4.8AI score0.02139EPSS
SaveExploits0References2
OSV
OSV
added 2018/04/15 1:33 p.m.24 views

MGASA-2018-0202 Updated firefox packages fix security vulnerability

Memory safety bugs fixed in Firefox ESR 52.7 CVE-2018-5125. Buffer overflow manipulating SVG animatedPathSegList CVE-2018-5127. Out-of-bounds write with malformed IPC messages CVE-2018-5129. Mismatched RTP payload type can trigger memory corruption CVE-2018-5130. Fetch API improperly returns cach...

9.8CVSS8.7AI score0.07923EPSS
SaveExploits3References6
Mageia
Mageia
added 2018/04/15 1:33 p.m.60 views

Updated firefox packages fix security vulnerability

Memory safety bugs fixed in Firefox ESR 52.7 CVE-2018-5125. Buffer overflow manipulating SVG animatedPathSegList CVE-2018-5127. Out-of-bounds write with malformed IPC messages CVE-2018-5129. Mismatched RTP payload type can trigger memory corruption CVE-2018-5130. Fetch API improperly returns cach...

9.8CVSS1.4AI score0.07923EPSS
SaveExploits3References5
OSV
OSV
added 2018/04/10 8:27 a.m.25 views

SUSE-SU-2018:0907-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 bsc1085130: - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds writ...

9.8CVSS8.8AI score0.11905EPSS
SaveExploits3References14
RedhatCVE
RedhatCVE
added 2018/04/09 12:49 a.m.40 views

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

5.7CVSS3.6AI score0.01045EPSS
SaveExploits0References1
Rows per page
Query Builder