Lucene search
+L

202 matches found

Veracode
Veracode
added 2019/05/02 4:42 a.m.31 views

Denial Of Service (DoS)

Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third-party, the Key Distribution Center KDC. An uninitialized pointer use flaw was found in the way the MIT Kerberos KDC handled initial...

9.3CVSS6.1AI score0.04814EPSS
SaveExploits1References7Affected Software1
CNVD
CNVD
added 2018/08/27 12:0 a.m.8 views

Insteon Hub Privilege Access Control Vulnerability

The Insteon Hub is an Insteon central controller product from Insteon USA. This product can remotely control light bulbs, wall switches, air conditioners and more in your home. A privilege access control vulnerability exists in the Insteon Hub using firmware version 1013, which stems from the...

8.6CVSS8.3AI score0.01119EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2018/08/23 12:0 a.m.13 views

PT-2018-16227 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1013 Description: An exploitable issue exists in the firmware upgrade functionality of the Insteon Hub, triggered via PubNub. The device retrieves signed firmware binaries using plain HTTP requests and does not check the...

8.6CVSS7.8AI score0.01119EPSS
SaveExploits2References3
CNVD
CNVD
added 2018/08/07 12:0 a.m.11 views

Insteon Hub Denial of Service Vulnerability

The Insteon Hub is an Insteon central controller product from Insteon USA. This product can remotely control light bulbs, wall switches, air conditioners and more in your home. A denial of service vulnerability exists in the Insteon Hub using firmware version 1013, which stems from the program's...

8.7CVSS7.9AI score0.00512EPSS
SaveExploits2References1
OSV
OSV
added 2018/08/02 7:29 p.m.4 views

CVE-2018-3834

An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the kind of firmware image that is going t...

7.4CVSS5.8AI score0.00512EPSS
SaveExploits2References1
Circl
Circl
added 2018/05/29 3:50 p.m.15 views

CVE-2001-1013

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/apacheuserdirenum.rb 2025-02-06 03:13:37+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:03+00:00| seen|...

5CVSS9AI score0.65563EPSS
SaveExploits4References1
Tenable Nessus
Tenable Nessus
added 2018/05/11 12:0 a.m.47 views

Amazon Linux 2 : zsh (ALAS-2018-1013)

1553531 : Stack-based buffer overflow in exec.c:hashcmd zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd function. A local attacker could exploit this to cause a denial of service.CVE-2018-1071 Stack-based buffer overflow in genmatchesfiles at compctl...

7.8CVSS7.6AI score0.00628EPSS
SaveExploits0References4
Circl
Circl
added 2018/04/17 6:14 a.m.6 views

CVE-2018-1013

creationtimestamp| type| source ---|---|--- 2018-04-17 06:14:43+00:00| seen| https://t.me/antichat/1247 2026-07-26 07:01:52+00:00| seen| https://t.me/KaitNews/7696...

9.3CVSS8.2AI score0.24109EPSS
SaveExploits0References2
Prion
Prion
added 2018/04/12 1:29 a.m.31 views

Remote code execution

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,...

9.3CVSS8.8AI score0.40978EPSS
SaveExploits0References3Affected Software5
Prion
Prion
added 2018/04/12 1:29 a.m.26 views

Remote code execution

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,...

9.3CVSS8.8AI score0.40978EPSS
SaveExploits0References3Affected Software5
CVE
CVE
added 2018/04/12 1:0 a.m.144 views

CVE-2018-1013

CVE-2018-1013 is a remote code execution issue in the Windows font library triggered by specially crafted embedded fonts. Affected OS versions include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (2012/2016, etc.). Root cause is improper handling of embedded fonts by the W...

9.3CVSS7.3AI score0.24109EPSS
SaveExploits0References3Affected Software7
Tenable Nessus
Tenable Nessus
added 2017/07/06 12:0 a.m.39 views

Debian DLA-1013-1 : graphite2 security update

Multiple vulnerabilities have been found in the Graphite font rendering engine which might result in denial of service or the execution of arbitrary code if a malformed font file is processed. For Debian 7 'Wheezy', these problems have been fixed in version 1.3.10-1deb7u1. We recommend that you...

9.8CVSS7.8AI score0.05216EPSS
SaveExploits6References9
Tenable Nessus
Tenable Nessus
added 2016/05/17 12:0 a.m.114 views

openSUSE Security Update : flash-player (openSUSE-2016-585)

This security update for flash-player to 11.2.202.621 fixes the following issues boo979422 : A critical vulnerability CVE-2016-4117 exists in Adobe Flash Player 21.0.0.226 and earlier versions for Windows, Macintosh, Linux, and Chrome OS. Successful exploitation could cause a crash and potentiall...

10CVSS8.1AI score0.94354EPSS
SaveExploits13References27
OpenVAS
OpenVAS
added 2016/05/17 12:0 a.m.24 views

SUSE: Security Advisory for flash-player (SUSE-SU-2016:1305-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.1AI score0.94354EPSS
SaveExploits15References3
Circl
Circl
added 2016/05/06 12:0 a.m.11 views

CVE-2016-1013

creationtimestamp| type| source ---|---|--- 2016-05-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39778...

9.3CVSS6.7AI score0.2281EPSS
SaveExploits3References1
Microsoft CVE
Microsoft CVE
added 2016/04/12 7:0 a.m.48 views

April 2016 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB16-10: CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, and CVE-2016-1019...

10CVSS8.7AI score0.25639EPSS
SaveExploits7
NVD
NVD
added 2016/04/09 1:59 a.m.23 views

CVE-2016-1013

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1016,...

9.3CVSS9AI score0.2281EPSS
SaveExploits3References8
Prion
Prion
added 2016/04/09 1:59 a.m.32 views

Design/Logic Flaw

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016,...

9.3CVSS8.9AI score0.25639EPSS
SaveExploits6References9Affected Software5
Prion
Prion
added 2016/04/09 1:59 a.m.27 views

Design/Logic Flaw

Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than...

9.3CVSS8.9AI score0.25639EPSS
SaveExploits6References8Affected Software5
CVE
CVE
added 2016/04/09 1:0 a.m.84 views

CVE-2016-1013

CVE-2016-1013 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/macOS (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and Linux (before 11.2.202.616) that allows arbitrary code execution via unspecified vectors. The entry notes this is a distinct issue from CVE...

9.3CVSS9.4AI score0.2281EPSS
SaveExploits3References8Affected Software1
Rows per page
Query Builder