Lucene search
+L

111 matches found

Circl
Circl
added 2020/06/10 10:55 p.m.7 views

CVE-2020-0116

creationtimestamp| type| source ---|---|--- 2020-06-10 22:55:31+00:00| seen| https://t.me/cibsecurity/12659...

5.5CVSS6.3AI score0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2020/06/10 5:12 p.m.63 views

CVE-2020-0116

CVE-2020-0116 is a local information-disclosure issue in Android 10’s System area stemming from a permissions bypass in LocationAccessPolicy.checkSystemLocationAccess, which could bypass user profile isolation and disclose data without extra execution privileges. Affected product: Android (Androi...

5.5CVSS5.1AI score0.00175EPSS
SaveExploits0References1Affected Software1
Intel
Intel
added 2019/05/22 12:0 a.m.30 views

Intel® Graphics Driver for Windows* 2019.1 QSR Advisory

Summary: Multiple potential security vulnerabilities in Intel® Graphics Driver for Windows may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-0113 Description: Insufficient bounds checking in IntelR...

5.5CVSS5.2AI score0.00343EPSS
SaveExploits0
CVE
CVE
added 2019/05/17 3:41 p.m.99 views

CVE-2019-0116

CVE-2019-0116 describes an out-of-bounds read in the KMD module of Intel Graphics Driver for Windows, before versions 10.18.14.5067 (15.36.x.5067) and 10.18.10.5069 (15.33.x.5069). A privileged user could cause a denial of service via local access. Affected products include Intel Graphics Driver ...

4.4CVSS4.6AI score0.00343EPSS
SaveExploits0References2Affected Software1
Lenovo
Lenovo
added 2019/05/14 12:21 p.m.33 views

Intel Graphics Driver for Windows Vulnerabilities - Lenovo Support US

No description provided...

5.5CVSS4.8AI score0.00343EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/18 1:25 a.m.50 views

Security Bulletin: IBM Platform Symphony (CVE-2014-0094, CVE-2014-0112, CVE-2014-0113, CVE-2014-0116)

Summary Several security vulnerabilities have been reported against Apache Struts 2 through May 2014. IBM Platform Symphony’s GUI uses Struts 2 as a framework for Java web applications. A version of the package that is vulnerable to these issues is included in several past versions of IBM Platfor...

7.5CVSS0.8AI score0.99614EPSS
SaveExploits9Affected Software2
CVE
CVE
added 2018/02/08 7:0 a.m.62 views

CVE-2018-0116

CVE-2018-0116 describes an authentication bypass in Cisco Policy Suite’s RADIUS module. An unauthenticated, remote attacker could be authorized as a subscriber without a valid password, provided a valid username is used, due to incorrect RADIUS user credential validation. Affected are Cisco Polic...

7.2CVSS7AI score0.0106EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2018/01/23 5:51 a.m.141 views

Important: Red Hat Security Advisory: rh-eclipse46-jackson-databind security update

An update for rh-eclipse46-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7.2AI score0.49727EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2017/12/14 12:0 a.m.38 views

Oracle Mysql Security Updates (jan2012-366304) 01 - Linux

Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS7AI score0.03155EPSS
SaveExploits0References11
Circl
Circl
added 2017/03/20 12:0 a.m.12 views

CVE-2017-0116

creationtimestamp| type| source ---|---|--- 2017-03-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41655...

4.3CVSS6.8AI score0.22471EPSS
SaveExploits2References1
OSV
OSV
added 2017/03/17 12:59 a.m.5 views

CVE-2017-0123

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

4.3CVSS5.8AI score0.22471EPSS
SaveExploits2References4
Prion
Prion
added 2017/03/17 12:59 a.m.29 views

Information disclosure

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a...

4.3CVSS4.3AI score0.42124EPSS
SaveExploits4References4Affected Software3
Prion
Prion
added 2017/03/17 12:59 a.m.35 views

Information disclosure

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Information Disclosure Vulnerability." CVE-2017-0085, CVE-2017-0091, CVE-2017-0092,...

4.3CVSS4.3AI score0.42124EPSS
SaveExploits4References4Affected Software1
CVE
CVE
added 2017/03/17 12:0 a.m.112 views

CVE-2017-0116

CVE-2017-0116 is an Uniscribe Information Disclosure vulnerability affecting Microsoft Windows with the Uniscribe component (usp10.dll) used via DrawText/UI paths. The flaw, described as a memory disclosure in Uniscribe when handling TrueType/OpenType font data from untrusted sources, is triggere...

4.3CVSS4.5AI score0.22471EPSS
SaveExploits2References4Affected Software3
Tenable Nessus
Tenable Nessus
added 2017/03/14 12:0 a.m.220 views

MS17-011: Security Update for Microsoft Uniscribe (4013076)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in Windows Uniscribe due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these to execut...

9.3CVSS6.9AI score0.57338EPSS
SaveExploits22References30
OpenVAS
OpenVAS
added 2016/03/31 12:0 a.m.52 views

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.4AI score0.10946EPSS
SaveExploits4References20
CVE
CVE
added 2016/03/09 11:0 a.m.69 views

CVE-2016-0116

CVE-2016-0116 concerns a memory corruption vulnerability in Microsoft Edge exploitable via a crafted web site. The connected CNVD entries corroborate a remote memory corruption flaw in Edge that could allow arbitrary code execution in the context of the current user. The CNVD descriptions identif...

7.6CVSS7.7AI score0.10238EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2015/06/28 10:0 p.m.49 views

CVE-2015-0116

CVE-2015-0116 affects IBM Leads versions including 7.x, 8.1.0 up to 8.1.0.14, 8.2, 8.5.0 up to 8.5.0.7.3, 8.6.0 up to 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 up to 9.1.0.6.1, and 9.1.1 up to 9.1.1.0.2. The issue is a CSRF risk caused by improper restriction of link additions, enabling remote auth...

3.5CVSS6.4AI score0.00832EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/05/08 12:0 a.m.56 views

MySQL Enterprise Monitor 3.0.x < 3.0.11 Multiple Vulnerabilities

According to its self-reported version, the MySQL Enterprise Monitor running on the remote host is affected by multiple vulnerabilities : - A flaw exists within 'MultipartStream.java' in Apache Commons FileUpload when parsing malformed Content-Type headers. A remote attacker, using a crafted...

7.5CVSS7.7AI score0.99614EPSS
SaveExploits17References8
Tenable Nessus
Tenable Nessus
added 2014/10/10 12:0 a.m.34 views

F5 Networks BIG-IP : Multiple MySQL vulnerabilities (K14410)

For BIG-IP systems using the MySQL database, the following MySQL vulnerabilities may allow local users to gain knowledge of sensitive information, manipulate certain data, or cause a Denial of Service DoS:CVE-2011-2262 CVE-2012-0075 CVE-2012-0087 CVE-2012-0101 CVE-2012-0102 CVE-2012-0112...

5.5CVSS5.2AI score0.03309EPSS
SaveExploits0References28
Rows per page
Query Builder