Lucene search
+L

156 matches found

CVE
CVE
added 2020/05/14 8:9 p.m.51 views

CVE-2020-0097

CVE-2020-0097 affects Android Framework (PackageManagerService.java). A missing condition for system apps permits a local privilege escalation from a User account with no user interaction required. Exploitation status is not detailed in the provided documents. The vulnerability is listed in Andro...

7.8CVSS7.6AI score0.00177EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/05/14 8:9 p.m.27 views

CVE-2020-0097

In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead to local escalation of privilege with User privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

7.9AI score0.00177EPSS
Exploits0References1
Circl
Circl
added 2019/06/18 6:53 a.m.14 views

CVE-2015-0097

creationtimestamp| type| source ---|---|--- 2019-06-18 06:53:33+00:00| published-proof-of-concept| https://t.me/Pen7esting/209 2020-10-09 16:45:56+00:00| seen| MISP/b3670ebe-02cd-42bc-a70a-abbd8349fb0a 2025-08-31 03:13:03+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

9.3CVSS5.7AI score0.40942EPSS
Exploits3References1
OSV
OSV
added 2019/05/17 4:29 p.m.2 views

CVE-2019-0097

Insufficient input validation vulnerability in subsystem for IntelR AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access...

4.9CVSS5.8AI score0.0122EPSS
Exploits0References2
CVE
CVE
added 2019/05/17 3:41 p.m.136 views

CVE-2019-0097

CVE-2019-0097 affects Intel AMT: an insufficient input validation vulnerability in the AMT subsystem prior to version 12.0.35 may allow a privileged user to cause a denial of service over the network. Affected product scope is Intel AMT/CSME with versions before 12.0.35. Remediation per Intel adv...

4.9CVSS5.6AI score0.0122EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/08/17 12:0 a.m.78 views

Photon OS 1.0: Linux PHSA-2018-1.0-0097 (deprecated)

An update of linux packages for PhotonOS has been released. This kernel update fixes vulnerability CVE-2017-5754 which is commonly known as Meltdown vulnerability. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were...

5.6CVSS6.6AI score0.84172EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2018/03/29 12:0 a.m.820 views

Cisco IOS Software Smart Install Remote Code Execution Vulnerability

According to its self-reported version, the IOS is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

10CVSS8.6AI score0.99512EPSS
Exploits2References3
NVD
NVD
added 2017/05/25 5:29 p.m.17 views

CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password...

7.5CVSS7.1AI score0.01209EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2017/05/25 5:29 p.m.34 views

CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password...

7.5CVSS7.1AI score0.01209EPSS
Exploits0References2
CVE
CVE
added 2017/05/25 5:0 p.m.94 views

CVE-2014-0097

The CVE affects Spring Security’s ActiveDirectoryLdapAuthenticator (versions 3.2.0–3.2.1 and 3.1.0–3.1.5). It does not enforce password length, which can allow authentication of a user with an empty password if the directory permits anonymous binds. This is the stated vulnerability and its impact...

7.5CVSS7AI score0.01209EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.12 views

CVE-2016-0097

...

Exploits0
CVE
CVE
added 2017/05/11 2:1 p.m.28 views

CVE-2016-0097

CVE-2016-0097 entry is rejected/not used; not an active vulnerability entry.

6.9AI score
Exploits0
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.10 views

CVE-2013-0097

...

Exploits0
CVE
CVE
added 2017/03/17 12:0 a.m.102 views

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

5.4CVSS5.2AI score0.01394EPSS
Exploits0References3Affected Software7
OpenVAS
OpenVAS
added 2016/03/10 12:0 a.m.33 views

Mageia: Security Advisory (MGASA-2016-0097)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.4AI score0.04889EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2015/10/30 10:18 a.m.19 views

CVE-2006-0097

Stack-based buffer overflow in the createnamedpipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Windows allows attackers to execute arbitrary code via a long 1 arghost or 2 argunixsocket argument, as demonstrated by a long named pipe variable in the host argument to the...

7.5CVSS8.7AI score0.09165EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.32 views

Oracle: Security Advisory (ELSA-2010-0062)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.6CVSS8.1AI score0.09363EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.38 views

Oracle: Security Advisory (ELSA-2014-0097)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.9AI score0.08383EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2015/07/31 12:0 a.m.59 views

F5 Networks BIG-IP : BIND DNSSEC vulnerability (SOL17025)

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP...

4.3CVSS7.2AI score0.09363EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2015/07/30 12:0 a.m.51 views

SOL17025 - BIND DNSSEC vulnerability CVE-2010-0097

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC 1 NSEC and 2 NSEC3 records. CVE-2010-0097...

4.3CVSS6.9AI score0.09363EPSS
Exploits0References4
Rows per page
Query Builder