Lucene search
+L

137 matches found

CVE
CVE
added 2020/06/11 2:43 p.m.51 views

CVE-2020-0168

CVE-2020-0168 affects Android 10, with a vulnerability in the Media Framework where impeg2_fmt_conv_yuv420p_to_yuv420sp_uv in impeg2_format_conv.c can trigger an out-of-bounds write due to a missing bounds check. This can enable remote code execution; exploitation is described as requiring user i...

8.8CVSS9AI score0.00714EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/12/18 9:8 p.m.102 views

CVE-2019-0168

CVE-2019-0168 affects Intel CSME and TXE subsystems (also involving AMT/SPS/DAL) due to insufficient input validation in the subsystem. The issue potentially allows a privileged user to escalate privileges or disclose information via local access. Fixes exist: Intel/partners list updated firmware...

4.4CVSS4.9AI score0.00346EPSS
SaveExploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:0 a.m.23 views

Solaris 10 (x86) : 139391-01

SunOS 5.10x86: lpadmin and ppdmgr patch. Date this patch was last updated by Sun : Dec/12/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

4.9CVSS6.7AI score0.0039EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.7 views

CVE-2005-0168

...

SaveExploits0
CVE
CVE
added 2017/04/12 2:0 p.m.105 views

CVE-2017-0168

CVE-2017-0168 is a vulnerability in the Windows Hyper-V Network Switch where input from a guest OS is not properly validated on hosts running Windows 8.1, Windows Server 2008/2008 R2/2012/2012 R2. The underlying issue is improper input validation in the Hyper-V Network Switch, leading to informat...

6.3CVSS5.8AI score0.05557EPSS
SaveExploits0References3Affected Software3
OpenVAS
OpenVAS
added 2017/04/12 12:0 a.m.97 views

Microsoft Windows Monthly Rollup (KB4015550)

This host is missing a monthly rollup according to Microsoft KB4015550. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.4AI score0.45648EPSS
SaveExploits14References29
OpenVAS
OpenVAS
added 2017/04/12 12:0 a.m.129 views

Microsoft Windows Monthly Rollup (KB4015549)

This host is missing a monthly rollup according to Microsoft security update KB4015549. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS6.8AI score0.99933EPSS
SaveExploits36References20
Microsoft KB
Microsoft KB
added 2017/04/11 7:0 a.m.65 views

Security update for the Hyper-V vulnerability in Windows Server 2008: April 11, 2017

Security update for the Hyper-V vulnerability in Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, see the following Common Vulnerabilities and Exposures CVE. CVE-2017-0163 CVE-2017-0168 CVE-2017-0180 More Information Important If you install a language pack after...

7.6CVSS6.6AI score0.05557EPSS
SaveExploits0
Symantec
Symantec
added 2017/04/11 12:0 a.m.30 views

Microsoft Windows Hyper-V CVE-2017-0168 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 8.1 for x64-based Systems Microsoft Windows Server 2008 R2 for...

6.3CVSS0.5AI score0.05557EPSS
SaveExploits0Affected Software2
Circl
Circl
added 2016/05/17 12:0 a.m.20 views

CVE-2016-0168

creationtimestamp| type| source ---|---|--- 2016-05-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39832 2025-08-31 03:01:28+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

6.5CVSS6.8AI score0.43248EPSS
SaveExploits2References1
Prion
Prion
added 2016/05/11 1:59 a.m.25 views

Information disclosure

GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to obtain sensitive information via a crafted document, aka "Windows Graphics Component...

4.3CVSS5.9AI score0.43248EPSS
SaveExploits4References4Affected Software3
CVE
CVE
added 2016/05/11 1:0 a.m.118 views

CVE-2016-0168

CVE-2016-0168 is a Windows GDI information-disclosure vulnerability affecting multiple Windows versions. Connected data confirms exploitation activity (Exploits listed on Exploit-DB and sightings in CIRCL) but provides no vendor-specific patch or remediation details in the supplied documents. No ...

6.5CVSS5.9AI score0.43248EPSS
SaveExploits2References4Affected Software7
Kaspersky
Kaspersky
added 2016/05/10 12:0 a.m.97 views

KLA11914 Multiple vulnerability in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

9.3CVSS8.9AI score0.93165EPSS
SaveExploits26References45
Check Point Advisories
Check Point Advisories
added 2016/05/10 12:0 a.m.37 views

Microsoft Windows Graphics Component Information Disclosure (MS16-055: CVE-2016-0168)

A Vulnerability was discovered within Internet explorer when handling a spcially crafted EMF file allowing an information disclosure about the user filesystem. The root cause of the vulnerability is related to the CreateColorSpaceW function that tries to build a file path checking of its existanc...

4.3CVSS6.9AI score0.43248EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2016/05/10 12:0 a.m.239 views

MS16-055: Security Update for Microsoft Graphics Component (3156754)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple information disclosure vulnerabilities exist in the Windows Graphics component. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing a user to...

9.3CVSS8.1AI score0.48585EPSS
SaveExploits6References6
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.57 views

Oracle: Security Advisory (ELSA-2013-0168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS7.1AI score0.03614EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.31 views

Oracle: Security Advisory (ELSA-2013-0168)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS7.1AI score0.03614EPSS
SaveExploits3References2
CVE
CVE
added 2015/05/25 2:0 p.m.49 views

CVE-2015-0168

IBM Security SiteProtector System is affected by CVE-2015-0168 (XSS) affecting versions 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2. The vulnerability arises from improper validation that could allow remote authenticated users to inject scripts, potentially stealing cookies b...

3.5CVSS5.2AI score0.00783EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/11/08 12:0 a.m.31 views

RHEL 6 : rhevm 3.1.2 (RHSA-2013:0211)

Updated rhevm packages that fix two security issues and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...

4CVSS5.7AI score0.01919EPSS
SaveExploits0References7
CVE
CVE
added 2014/10/06 2:0 p.m.67 views

CVE-2014-0168

CVE-2014-0168 corresponds to a CSRF vulnerability in Jolokia prior to 1.2.1. The issue allows remote attackers to hijack user authentication and cause execution of MBeans methods via a crafted web page. Affected product: Jolokia (before 1.2.1). Root cause: Cross-site request forgery in the Joloki...

6.8CVSS8.8AI score0.00739EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder