Lucene search
+L

158 matches found

RedHat Linux
RedHat Linux
added 2020/05/19 11:08 p.m.123 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.5CVSS6.5AI score0.0415EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2020/05/03 12:00 a.m.24 views

Debian: Security Advisory (DLA-2199-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.04423EPSS
SaveExploits1References3
OSV
OSV
added 2019/11/13 6:15 p.m.9 views

CVE-2019-2199

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138650665...

6.7CVSS6.7AI score0.00184EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/11/13 5:32 p.m.29 views

CVE-2019-2199

In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138650665...

6.7AI score0.00184EPSS
SaveExploits0References1
CVE
CVE
added 2019/11/13 5:32 p.m.53 views

CVE-2019-2199

CVE-2019-2199 affects Android 10, where in PackageInstallerService.java’s createSessionInternal a permissions bypass could enable local elevation of privilege to System level. No exploitation details are provided beyond that; impact is local and requires no user interaction. The Android Security ...

7.2CVSS6.6AI score0.00184EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/01/22 8:00 p.m.15 views

CVE-2018-2199

...

SaveExploits0
CVE
CVE
added 2019/01/22 8:00 p.m.35 views

CVE-2018-2199

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

7.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/10/15 7:16 p.m.14 views

lastampa.it XSS vulnerability

Vulnerable URL: http://www.lastampa.it/ricerca?search=%22%3E%3Cscript%3Ealert/openbugbounty/%3C%2Fscript%3E=13=8 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2199 VIP website status:| Yes Coordinated Disclosur...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/07/08 2:51 p.m.17 views

zdf.de XSS vulnerability

Vulnerable URL: https://www.zdf.de/suche?attrs==AD=episode==a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3E%3C/title%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 11.07.2017 Latest check for patch:| 11.07.20...

6.3AI score
SaveExploits0
Cvelist
Cvelist
added 2016/02/01 9:00 p.m.34 views

CVE-2016-2199

Multiple cross-site request forgery CSRF vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager MVM before 7.5.10 allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via...

9.4AI score0.0055EPSS
SaveExploits0References1
CVE
CVE
added 2016/02/01 9:00 p.m.63 views

CVE-2016-2199

CVE-2016-2199 describes multiple CSRF vulnerabilities in the McAfee Vulnerability Manager (MVM) Enterprise Manager component, specifically on the Organizations and Remediation management page. The issues allow remote attackers to hijack administrator sessions for requests via unknown vectors, aff...

8.8CVSS9.2AI score0.0055EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/11/30 12:00 a.m.33 views

Oracle Linux 7 : glibc (ELSA-2015-2199)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2199 advisory. - Backport fixes for various security flaws 1209107: - Prevent heap buffer overflow in swscanf CVE-2015-1472, CVE-2015-1473, - Prevent integer overflow...

7.5CVSS7.9AI score0.05808EPSS
SaveExploits4References5
OpenVAS
OpenVAS
added 2015/11/25 12:00 a.m.32 views

Oracle: Security Advisory (ELSA-2015-2199)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.05808EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2015/11/19 12:00 a.m.51 views

RHEL 7 : glibc (RHSA-2015:2199)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2199 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the Name Serv...

7.5CVSS8.2AI score0.05808EPSS
SaveExploits4References20
F5 Networks
F5 Networks
added 2015/04/03 12:00 a.m.90 views

SOL16348 - tftp-hpa vulnerability CVE-2011-2199

Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option. CVE-2011-2199...

7.5CVSS7.7AI score0.05246EPSS
SaveExploits1References3
NVD
NVD
added 2015/03/03 7:59 p.m.31 views

CVE-2015-2199

Multiple SQL injection vulnerabilities in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow 1 remote authenticated users to execute arbitrary SQL commands via the itemid parameter in a wonderpluginaudiosaveitem action to wp-admin/admin-ajax.php or remote administrators to execut...

6.5CVSS8.1AI score0.02582EPSS
SaveExploits2References5
CVE
CVE
added 2015/03/03 7:00 p.m.62 views

CVE-2015-2199

The CVE-2015-2199 issue affects the WonderPlugin Audio Player WordPress plugin (before 2.1). Multiple SQL injection flaws allow remote unauthenticated/authenticated actors to execute arbitrary SQL commands via item[id] in wonderplugin_audio_save_item (AJAX at wp-admin/admin-ajax.php) or via itemi...

6.5CVSS8.3AI score0.02582EPSS
SaveExploits2References5Affected Software1
OpenVAS
OpenVAS
added 2014/12/03 12:00 a.m.63 views

Fedora Update for wordpress FEDORA-2014-15526

Check the version of wordpress SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868539";...

7.5CVSS9AI score0.82702EPSS
SaveExploits17References2
OpenVAS
OpenVAS
added 2014/08/23 12:00 a.m.53 views

Fedora Update for wordpress FEDORA-2014-9270

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9AI score0.24385EPSS
SaveExploits12References2
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:00 a.m.23 views

openSUSE Security Update : tftp (openSUSE-SU-2011:0734-1)

Malicious clients could overflow a buffer in tftpd by specifying a large value for the utimeout option CVE-2011-2199. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tftp-4783. The text...

7.5CVSS5.7AI score0.05246EPSS
SaveExploits0References3
Rows per page
Query Builder