Lucene search
+L

111 matches found

Symantec
Symantec
added 2019/06/11 12:00 a.m.131 views

Microsoft Windows JET Database Engine CVE-2019-0906 Remote Code Execution Vulnerability

Description Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...

0.7AI score0.05616EPSS
SaveExploits0Affected Software3
OSV
OSV
added 2018/11/16 6:29 p.m.9 views

CVE-2018-15693

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass via insecure direct object reference...

6.4CVSS5.8AI score0.00758EPSS
SaveExploits1References1
NVD
NVD
added 2018/11/16 6:29 p.m.18 views

CVE-2018-15693

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass via insecure direct object reference...

6.4CVSS6.4AI score0.00758EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/11/16 6:00 p.m.25 views

CVE-2018-15692

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions...

6.4AI score0.0078EPSS
SaveExploits0References1
CVE
CVE
added 2017/11/13 5:00 p.m.95 views

CVE-2017-0906

The CVE-2017-0906 SSRF flaw affects the Recurly Client Python Library prior to versions 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, and 2.6.2 in the Resource.get method. Root cause: server-side request forgery could allow an attacker to access API keys or other sensitive resources. Impact: potent...

9.8CVSS9.3AI score0.02327EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2017/04/14 12:00 a.m.55 views

CentOS Update for httpd CESA-2017:0906 centos7

Check the version of httpd SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882692";...

7.5CVSS6.2AI score0.46832EPSS
SaveExploits4References2
Virtuozzo
Virtuozzo
added 2017/04/13 12:00 a.m.23 views

Virtuozzo Linux Errata and Security Advisory 2017:0906 Moderate

Upstream security update. Follow RHSA-2017-0906 for details...

7.1AI score
SaveExploits0
OSV
OSV
added 2016/07/06 2:59 p.m.9 views

CVE-2016-0906

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

8.8CVSS5.8AI score0.0157EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2016/07/06 2:00 p.m.26 views

CVE-2016-0906

The web-restore interface in Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation...

8.2AI score0.0157EPSS
SaveExploits0References2
CVE
CVE
added 2016/07/06 2:00 p.m.53 views

CVE-2016-0906

The CVE-2016-0906 entry describes a vulnerability in EMC Avamar’s web-restore interface present in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) up to versions 7.2.1. An authenticated remote user can read or delete directories via Linux backup-restore operations, indicating improper ac...

8.8CVSS8AI score0.0157EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2015/04/15 10:00 a.m.63 views

CVE-2015-0906

CVE-2015-0906 affects Lhaplus, a file compression/decompression tool. A directory traversal vulnerability exists due to an issue in processing file names, allowing a crafted archive to write arbitrary files on the system. Impact is practical file overwrite or creation during decompression for ver...

5.8CVSS6.9AI score0.0153EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2014/05/26 1:00 a.m.62 views

CVE-2014-0906

The CVE-2014-0906 issue affects IBM Sametime Meeting Server (versions 8.x up to 8.5.2.1 and 9.x up to 9.0.0.1). The vulnerability is that the server does not validate whether a session cookie is current, enabling remote attackers to perform user-search actions by using a cookie that is expired or...

4.3CVSS6.7AI score0.01373EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:00 a.m.45 views

Oracle Linux 3 / 4 : php (ELSA-2007-0076)

From Red Hat Security Advisory 2007:0076 : Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language...

10CVSS6.8AI score0.11752EPSS
SaveExploits6References11
OpenVAS
OpenVAS
added 2013/03/11 12:00 a.m.36 views

Google Chrome Multiple Vulnerabilities-02 March 2013 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02mar13lin.nasl 6079 2017-05-08 09:03:33Z teissa $ Google Chrome Multiple Vulnerabilities-02 March 2013 Linux Authors: Thanga Prakash S Copyright: Copyright c...

7.5CVSS0.8AI score0.01336EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2013/03/11 12:00 a.m.25 views

Google Chrome Multiple Vulnerabilities-02 March 2013 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02mar13win.nasl 6074 2017-05-05 09:03:14Z teissa $ Google Chrome Multiple Vulnerabilities-02 March 2013 Windows Authors: Thanga Prakash S Copyright: Copyright ...

7.5CVSS0.6AI score0.01336EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2013/03/07 12:00 a.m.28 views

FreeBSD : chromium -- multiple vulnerabilities (40d5ab37-85f2-11e2-b528-00262d5ed8ee)

Google Chrome Releases reports : 176882 High CVE-2013-0902: Use-after-free in frame loader. Credit to Chamal de Silva. 176252 High CVE-2013-0903: Use-after-free in browser navigation handling. Credit to 'chromium.khalil'. 172926 172331 High CVE-2013-0904: Memory corruption in Web Audio. Credit to...

7.5CVSS5.3AI score0.01336EPSS
SaveExploits2References12
Tenable Nessus
Tenable Nessus
added 2013/03/06 12:00 a.m.25 views

Google Chrome < 25.0.1364.152 Multiple Vulnerabilities

Binary data 800923.prm...

7.5CVSS6.8AI score0.01336EPSS
SaveExploits2References11
UbuntuCve
UbuntuCve
added 2013/03/05 9:55 p.m.26 views

CVE-2013-0906

The IndexedDB implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

7.5CVSS5.9AI score0.01081EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2013/03/05 12:00 a.m.29 views

Google Chrome < 25.0.1364.152 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 25.0.1364.152. It is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist related to the frame loader, browser navigation handling and SVG animation. CVE-2013-0902, CVE-2013-0903,...

7.5CVSS5.9AI score0.01336EPSS
SaveExploits2References11
CVE
CVE
added 2013/03/04 10:00 p.m.76 views

CVE-2013-0906

CVE-2013-0906 affects Google Chrome’s IndexedDB implementation. The vulnerability enables memory corruption (and potential other impact) via unknown vectors in Chrome versions prior to 25.0.1364.152. Public sources within the connected documents indicate this CVE is part of a set of Chrome/Chromi...

7.5CVSS7.1AI score0.01081EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder