Lucene search
+L

176 matches found

OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2013:0456-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.6AI score0.10924EPSS
Exploits2References3
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.11 views

SUSE: Security Advisory (SUSE-SU-2021:0428-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.5AI score0.1885EPSS
Exploits2References6
ATTACKERKB
ATTACKERKB
added 2020/09/17 7:15 p.m.1 views

CVE-2020-0428

In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-123999783...

6.4CVSS5.6AI score0.00108EPSS
Exploits0References2
CVE
CVE
added 2020/09/17 6:42 p.m.48 views

CVE-2020-0428

CVE-2020-0428 describes a race-condition in CamX code that enables a use-after-free vulnerability, leading to local escalation of privilege to SYSTEM level with no user interaction. Affected software is Android kernel camera components (CamX). The NVD entry lists CVSS2 as 4.4 (LOCAL, MEDIUM) and ...

6.4CVSS7.1AI score0.00108EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/09/17 6:42 p.m.26 views

CVE-2020-0428

In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-123999783...

7.4AI score0.00108EPSS
Exploits0References1
Circl
Circl
added 2019/10/29 9:31 p.m.7 views

CVE-2011-0428

creationtimestamp| type| source ---|---|--- 2019-10-29 21:31:11+00:00| seen| https://t.me/cibsecurity/7747...

6.1CVSS7.6AI score0.00839EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2019/10/29 7:15 p.m.18 views

CVE-2011-0428

Cross Site Scripting XSS in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient checking in comments...

6.1CVSS7AI score0.00839EPSS
Exploits0References3
CVE
CVE
added 2019/10/29 5:28 p.m.88 views

CVE-2011-0428

CVE-2011-0428 describes a Cross Site Scripting (XSS) vulnerability in ikiwiki prior to version 3.20110122 due to insufficient input validation in comments. The impact is arbitrary JavaScript execution by remote attackers, enabled by mal‑formed comments. Affected software is ikiwiki; the root caus...

6.1CVSS5.9AI score0.00839EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2019/10/29 5:28 p.m.45 views

CVE-2011-0428

Cross Site Scripting XSS in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient checking in comments...

6.1CVSS6.1AI score0.00839EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2019/05/07 1:26 p.m.36 views

Security Bulletin: Rational Functional Tester 8.x vulnerabilities due to security vulnerabilities in IBM JRE 7 SR3 or earlier, and non-IBM Java 7 (CVE-2013-0809, CVE-2013-1493, CVE-2013-0437, CVE-2012-1541, CVE-2013-0446, CVE-2012-3342, CVE-2013-0428)

Summary Multiple security vulnerabilities exist in the Java Runtime Environments JREs IBM JRE 7.0 Service Release 3 or earlier, and non-IBM Java 7.0 or earlier, that can affect the security of Rational Functional Tester. Fixes are available in IBM JRE 7.0 Service Release 4 and in the latest Java...

10CVSS1.2AI score0.86151EPSS
Exploits10Affected Software1
Veracode
Veracode
added 2019/05/02 5:1 a.m.42 views

Arbitrary Code Execution

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS5.5AI score0.08383EPSS
Exploits3References24Affected Software1
Veracode
Veracode
added 2019/05/02 5:1 a.m.35 views

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS5.5AI score0.08383EPSS
Exploits3References21Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/08/27 12:0 a.m.31 views

Cisco Web Security Appliance Privilege Escalation Vulnerability.

According to its self-reported version, the Cisco Web Security Appliance WSA running on the remote host may be affected by privilege escalation vulnerability. TRUSTED...

7.2CVSS7AI score0.00436EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/25 5:54 a.m.53 views

Security Bulletin: Multiple vulnerabilities in current releases of IBM® SDK, Java™ Technology Edition

Summary Java SE issues disclosed in the Oracle January 2014 Critical Patch Update Vulnerability Details CVE IDs: CVE-2014-0428 CVE-2014-0422 CVE-2013-5907 CVE-2014-0415 CVE-2014-0410 CVE-2013-5889 CVE-2014-0417 CVE-2014-0387 CVE-2014-0424 CVE-2013-5878 CVE-2014-0373 CVE-2014-0375 CVE-2014-0403...

10CVSS0.8AI score0.08383EPSS
Exploits3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 6:59 a.m.52 views

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Real Time

Summary Java SE issues disclosed in the Oracle January 2014 Critical Patch Update Vulnerability Details CVE IDs: CVE-2014-0428 CVE-2014-0422 CVE-2013-5907 CVE-2014-0415 CVE-2014-0410 CVE-2013-5889 CVE-2014-0417 CVE-2014-0387 CVE-2014-0424 CVE-2013-5878 CVE-2014-0373 CVE-2014-0375 CVE-2014-0403...

10CVSS0.6AI score0.08383EPSS
Exploits3Affected Software1
Mageia
Mageia
added 2017/02/11 11:47 p.m.44 views

Updated audacious-plugins packages fix security vulnerability

Chris Evans discovered that incorrect emulation of the SPC700 audio co-processor of the Super Nintendo Entertainment System allows the execution of arbitrary code if a malformed SPC music file is opened CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961. These issues were...

10CVSS3AI score0.04364EPSS
Exploits5References2
Prion
Prion
added 2017/02/08 3:59 p.m.25 views

Privilege escalation

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

9.3CVSS7.4AI score0.00908EPSS
Exploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2017/02/08 3:59 p.m.23 views

CVE-2017-0428

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

9.3CVSS7.4AI score0.00908EPSS
Exploits0References2
CVE
CVE
added 2017/02/08 3:0 p.m.90 views

CVE-2017-0428

CVE-2017-0428 describes an elevation-of-privilege in the NVIDIA GPU driver that could allow a local malicious application to execute arbitrary code in kernel context on Android devices with Kernel-3.10. The Android entry notes an Android ID (A-32401526) and flags the issue as critical due to pote...

9.3CVSS7.2AI score0.00908EPSS
Exploits0References4Affected Software2
Cvelist
Cvelist
added 2017/02/08 3:0 p.m.33 views

CVE-2017-0428

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

7.3AI score0.00908EPSS
Exploits0References4
Rows per page
Query Builder