Lucene search
+L

122 matches found

Prion
Prion
added 2020/04/27 3:15 p.m.18 views

Out-of-bounds

Huawei Honor V10 smartphones with versions earlier than 10.0.0.156C00E156R2P4 has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information...

5.8CVSS6.9AI score0.00605EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/04/27 2:48 p.m.51 views

CVE-2020-1804

Huawei Honor V10 devices with firmware older than 10.0.0.156 (C00E156R2P4) have three out-of-bounds read vulnerabilities in a driver that does not sufficiently validate certain input parameters, causing information disclosure or service abnormal behavior. Affected CVEs are CVE-2020-1804, CVE-2020...

7.1CVSS6.9AI score0.00605EPSS
SaveExploits0References1Affected Software1
Check Point Advisories
Check Point Advisories
added 2019/06/23 12:0 a.m.95 views

Packet Sanity (CVE-1999-0193; CVE-1999-0675; CVE-2000-0221; CVE-2002-1071; CVE-2003-1029; CVE-2004-0247; CVE-2004-1109; CVE-2007-1804; CVE-2007-3026; CVE-2008-7127; CVE-2010-1185; CVE-2011-0975; CVE-2012-6638; CVE-2014-3000)

...

10CVSS1.8AI score0.15218EPSS
SaveExploits17
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.12 views

GE ST-1804 RSTi Slice, 4 Points Detection

Binary data 755581.prm...

7.3AI score
SaveExploits0
CVE
CVE
added 2019/05/03 4:25 p.m.99 views

CVE-2019-1804

CVE-2019-1804 affects Cisco Nexus 9000 Series fabric switches running NX-OS in ACI Mode. The root cause is a default SSH key pair present on devices, enabling an unauthenticated, remote attacker to gain root privileges by connecting over IPv6 with the extracted keys. Impact is full system comprom...

10CVSS9.4AI score0.0348EPSS
SaveExploits0References1Affected Software1
Circl
Circl
added 2019/05/02 4:49 p.m.14 views

CVE-2019-1804

creationtimestamp| type| source ---|---|--- 2019-05-02 16:49:17+00:00| seen| https://t.me/informationsecuritychannel/27114 2019-05-03 07:59:24+00:00| seen| https://t.me/informationsecuritychannel/27144 2024-10-04 22:53:50+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2...

10CVSS8.7AI score0.0348EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2019/05/02 3:24 p.m.76 views

Cisco Warns of Critical Nexus 9000 Data Center Flaw

A critical vulnerability in Cisco’s software-defined networking SDN software could allow an unauthenticated, remote attacker to connect to a vulnerable data-center switch and take it over, with the privileges of the root user. The bug CVE-2019-1804, which has a CVSS severity rating of 9.8 out of...

10CVSS0.9AI score0.0348EPSS
SaveExploits0References7
Veracode
Veracode
added 2019/05/02 5:18 a.m.31 views

Null Pointer Dereference

The libXfont package provides the X.Org libXfont runtime library. X.Org is an open source implementation of the X Window System. An integer overflow flaw was found in the way libXfont processed certain Glyph Bitmap Distribution Format BDF fonts. A malicious, local user could use this flaw to cras...

8.5CVSS5.3AI score0.04963EPSS
SaveExploits0References18Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/18 1:29 a.m.31 views

Security Bulletin: Vulnerabilities in libXfont affect PowerKVM (CVE-2015-1802, CVE-2015-1803, CVE-2015-1804)

Summary PowerKVM is affected by three vulnerabilities in libXfont. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-1802 DESCRIPTION: X.Org libXfont could allow a local attacker to gain elevated privileges on the system, caused by an error in bdfReadProperties in the...

8.5CVSS2.6AI score0.04963EPSS
SaveExploits0Affected Software1
Openbugbounty
Openbugbounty
added 2017/01/10 3:35 a.m.10 views

alexa.com XSS vulnerability

Vulnerable URL: http://www.alexa.com/find-similar-sites?" Details: Description| Value ---|--- Patched:| Yes, at 17.01.2017 Latest check for patch:| 17.01.2017 21:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1804 VIP website status:| Yes Coordinated...

6.3AI score
SaveExploits0
OSV
OSV
added 2016/05/20 10:59 a.m.3 views

CVE-2016-1804

The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

7.8CVSS6.1AI score0.01714EPSS
SaveExploits0References5
CVE
CVE
added 2016/05/20 10:0 a.m.58 views

CVE-2016-1804

CVE-2016-1804 affects Apple OS X El Capitan prior to 10.11.5. The Multi-Touch subsystem allows a crafted app to execute arbitrary code in a privileged context or cause a denial of service via memory corruption. The provided documents do not specify patched versions or remediation steps. If presen...

9.3CVSS7.6AI score0.01714EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2016/05/20 10:0 a.m.29 views

CVE-2016-1804

The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

8.1AI score0.01714EPSS
SaveExploits0References5
OSV
OSV
added 2016/01/05 3:23 p.m.9 views

SUSE-RU-2016:0031-1 Recommended update for libXfont

This update for libXfont fixes the following issues: - The original fix for CVE-2015-1804 prevented DWIDTH to be negative. However, the spec states that 'DWIDTH ... is a vector indicating the position of the next glyph's origin relative to the origin of this glyph'. Consequently, negative DWIDTH...

8.5CVSS6.1AI score0.04963EPSS
SaveExploits0References3
OSV
OSV
added 2015/12/29 12:56 p.m.9 views

SUSE-RU-2015:2393-1 Recommended update for xorg-x11-libs

This update for xorg-x11-libs fixes the following issues: - The original fix for CVE-2015-1804 prevented DWIDTH to be negative. However, the spec states that 'DWIDTH ... is a vector indicating the position of the next glyph's origin relative to the origin of this glyph'. Consequently, negative...

8.5CVSS6.1AI score0.04963EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2015/12/21 12:0 a.m.28 views

openSUSE Security Update : libXfont (openSUSE-2015-913)

This update for libXfont fixes the following issue : - A negative DWIDTH is legal. This was broken by the security fix for CVE-2015-1804. boo958383. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

8.5CVSS6.9AI score0.04963EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2015/10/15 12:0 a.m.21 views

SUSE: Security Advisory for libXfont (SUSE-SU-2015:0702-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS5.6AI score0.04963EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/10/13 12:0 a.m.27 views

SUSE: Security Advisory for xorg-x11-libs (SUSE-SU-2015:0674-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS5.6AI score0.04963EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.24 views

Oracle: Security Advisory (ELSA-2015-1708)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS4.2AI score0.04963EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/09/23 12:0 a.m.27 views

Amazon Linux AMI : libXfont (ALAS-2015-597)

An integer overflow flaw was found in the way libXfont processed certain Glyph Bitmap Distribution Format BDF fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the privileges of the X.Org server. CVE-2015-1802 An integer...

8.5CVSS6.3AI score0.04963EPSS
SaveExploits0References4
Rows per page
Query Builder