Lucene search
+L

100 matches found

CVE
CVE
added 2018/01/10 1:0 a.m.85 views

CVE-2018-0784

CVE-2018-0784 is an elevation of privilege vulnerability in ASP.NET Core 1.0, 1.1, and 2.0 caused by flaws in the ASP.NET Core project templates. It is explicitly distinguished from CVE-2018-0808. The NVD entry attributes a high severity (CVSSv3 base 8.8) and describes privilege escalation withou...

8.8CVSS7.9AI score0.06496EPSS
Exploits0References3Affected Software1
Symantec
Symantec
added 2018/01/09 12:0 a.m.57 views

Microsoft ASP.NET Core CVE-2018-0784 Remote Privilege Escalation Vulnerability

Description Microsoft ASP.NET Core is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft ASP.NET Microsoft ASP.NET Core 2.0 Microsoft Windows 10 version 1703 for 32-bit Systems Recommendations Block...

6.8CVSS8.1AI score0.06496EPSS
Exploits0Affected Software1
OSV
OSV
added 2017/09/08 8:29 p.m.9 views

CVE-2017-0784

A elevation of privilege vulnerability in the Android system nfc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37287958...

8.8CVSS5.8AI score0.00269EPSS
Exploits0References2
NVD
NVD
added 2017/09/08 8:29 p.m.20 views

CVE-2017-0784

A elevation of privilege vulnerability in the Android system nfc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37287958...

8.8CVSS8.4AI score0.00269EPSS
Exploits0References2
CVE
CVE
added 2017/09/08 8:0 p.m.57 views

CVE-2017-0784

CVE-2017-0784 is an elevation of privilege in the Android NFC subsystem. Affected product: Android (versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2). The provided documents identify the issue as an Android NFC privilege escalation but do not specify the root cause, impacted component beyond ...

8.8CVSS8.6AI score0.00269EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2017/08/09 6:0 p.m.53 views

CVE-2015-0784

This CVE affects Novell ZENworks Configuration Management (ZCM). The vulnerability is in Rtrlet.class, where a remote attacker can obtain Session IDs of logged-in users by sending a POST request with the maintenance variable set to ShowLogins. The issue is an information-disclosure flaw; exploita...

7.5CVSS7.3AI score0.0659EPSS
Exploits0References4Affected Software1
Check Point Advisories
Check Point Advisories
added 2016/06/15 12:0 a.m.22 views

Apache OpenMeetings ZIP File Path Traversal (CVE-2016-0784)

A directory traversal vulnerability exists in Apache OpenMeetings in the Import/Export System Backups functionality. The vulnerability is due to missing file path validation on user-uploaded ZIP archives. Successful exploitation allows the attacker to execute arbitrary code under the security...

4CVSS5.5AI score0.56314EPSS
Exploits2
OSV
OSV
added 2016/04/11 2:59 p.m.11 views

CVE-2016-0784

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. dot dot in a ZIP archive entry...

6.5CVSS6.2AI score0.56314EPSS
Exploits2References7
CVE
CVE
added 2016/04/11 2:0 p.m.53 views

CVE-2016-0784

CVE-2016-0784 is a directory traversal vulnerability in Apache OpenMeetings’ Import/Export System Backups. Versions before 3.1.1 are affected and allow remote authenticated administrators to write arbitrary files via crafted ZIP entries that use ".." in the path. Root cause: missing validation of...

6.5CVSS6.3AI score0.56314EPSS
Exploits2References7Affected Software1
Cvelist
Cvelist
added 2016/04/11 2:0 p.m.31 views

CVE-2016-0784

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. dot dot in a ZIP archive entry...

6.4AI score0.56314EPSS
Exploits2References7
Check Point Advisories
Check Point Advisories
added 2015/06/23 12:0 a.m.5 views

Novell ZENworks Configuration Management Session ID Information Disclosure (CVE-2015-0784)

An information disclosure vulnerability exists in Novell ZENworks Configuration Management. The vulnerability is due to exposure of insecure functionality within Rtrlet.class. A remote unauthenticated attacker can leverage this vulnerability to disclosure Session IDs of the logged in users which...

5CVSS2.2AI score0.0659EPSS
Exploits0
Check Point Advisories
Check Point Advisories
added 2014/05/14 12:0 a.m.34 views

Yokogawa CENTUM CS 3000 SCADA Buffer Overflow (CVE-2014-0784)

A remote code execution vulnerability has been reported in Yokogawa CENTUM CS 3000. The vulnerability is due to a stack based buffer overflow when handling specially crafted packets...

8.3CVSS7.6AI score0.36035EPSS
Exploits2
CVE
CVE
added 2014/03/14 10:0 a.m.71 views

CVE-2014-0784

CVE-2014-0784 is a stack-based buffer overflow in BKBCopyD.exe of Yokogawa CENTUM CS 3000 (R3.09.50 and earlier). A crafted TCP packet can trigger the overflow, allowing remote attackers to execute arbitrary code with the CENTUM user’s privileges. Public exploitation is noted (Metasploit-related ...

8.3CVSS8AI score0.36035EPSS
Exploits2References6Affected Software1
Circl
Circl
added 2014/03/12 12:0 a.m.15 views

CVE-2014-0784

creationtimestamp| type| source ---|---|--- 2014-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32210 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/yokogawabkbcopydbof.rb 2025-02-06 03:13:41+00:00|...

8.3CVSS5.7AI score0.36035EPSS
Exploits2References2
Metasploit
Metasploit
added 2014/03/10 2:33 p.m.59 views

Yokogawa CENTUM CS 3000 BKBCopyD.exe Buffer Overflow

This module exploits a stack based buffer overflow in Yokogawa CENTUM CS 3000. The vulnerability exists in the service BKBCopyD.exe when handling specially crafted packets. This module has been tested successfully on Yokogawa CENTUM CS 3000 R3.08.50 over Windows XP SP3. This module requires...

8.3CVSS7.4AI score0.36035EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2013/03/05 12:0 a.m.26 views

Fedora 17 : seamonkey-2.16-1.fc17 (2013-2988)

Update to 2.16 Fix CVE-2013-0765, CVE-2013-0772-0784 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

9.3CVSS8.3AI score0.02745EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/03/01 12:0 a.m.26 views

Ubuntu Update for thunderbird USN-1748-1

Check for the Version of thunderbird OpenVAS Vulnerability Test $Id: gbubuntuUSN17481.nasl 8509 2018-01-24 06:57:46Z teissa $ Ubuntu Update for thunderbird USN-1748-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

10CVSS0.4AI score0.05364EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2013/03/01 12:0 a.m.32 views

Ubuntu: Security Advisory (USN-1748-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS9.7AI score0.05364EPSS
Exploits4References3
Tenable Nessus
Tenable Nessus
added 2013/02/22 12:0 a.m.20 views

Mozilla SeaMonkey < 2.16 Multiple Vulnerabilities

Binary data 801258.prm...

9.3CVSS8.4AI score0.05364EPSS
Exploits4References22
OpenVAS
OpenVAS
added 2013/02/21 12:0 a.m.25 views

Mozilla Firefox Multiple Vulnerabilities -01 Feb13 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvuln01feb13win.nasl 6093 2017-05-10 09:03:18Z teissa $ Mozilla Firefox Multiple Vulnerabilities -01 Feb13 Windows Authors: Thanga Prakash S Copyright: Copyrigh...

10CVSS0.9AI score0.05364EPSS
Exploits4References5
Rows per page
Query Builder