125 matches found
CVE-2019-2208
CVE-2019-2208 affects Android components (Android 8.1 and 9) with a flaw in V8 JIT code during PromiseBuiltinsAssembler::NewPromiseCapability, causing an out-of-bounds read. This can lead to remote information disclosure without user interaction or privileges. The connected records confirm the is...
EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2019-2208)
According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libsndfile version 1.0.28, an error in the 'aiffreadchanmap' function aiff.c can be exploited to cause an out-of-bounds read memory access...
CVE-2018-2208
CVE-2018-2208 is rejected/not used; this ID does not represent an active vulnerability entry.
CVE-2015-2208
creationtimestamp| type| source ---|---|--- 2017-07-11 02:04:41+00:00| published-proof-of-concept| https://t.me/HackingPublicoficial/162 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmoadminexec.rb 2023-12-18...
CVE-2017-2208
Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory...
CVE-2017-2208
CVE-2017-2208 is an untrusted search path vulnerability in the Installer of the Electronic tendering and bid opening system (available before 12 June 2017). The root cause is an insecure search path that allows a specially crafted executable in an unspecified directory to be executed, enabling ar...
MongoDB phpMoAdmin Unauthenticated Remote Code Execution (CVE-2015-2208)
A remote code execution vulnerability exists in MongoDB administration tool for PHP. The vulnerability is due to insufficient validation of user supplied input when processing HTTP requests. A remote authenticated attacker could exploit this vulnerability by sending a malicious request...
Symantec Antivirus Engine ASPack Remote Memory Corruption (CVE-2016-2208)
A Memory Corruption vulnerability exist in the Symantec Antivirus Engine in ASPack early version. This vulnerability is due to incorrect parsing of executables packed by ASPack early version...
CVE-2016-2208
CVE-2016-2208 affects Symantec Antivirus Engine (AVE) kernel component in AVE 20151.1 before 20151.1.1.4. The issue arises when parsing malformed PE header files, enabling remote attackers to execute arbitrary code or cause a memory access violation and system crash. Several advisories and assess...
Symantec Antivirus Engine 20151.1.0.32 Malformed PE Header Parser Memory Access Violation (SYM16-008)
The version of Symantec Antivirus Engine AVE installed on the remote host is 20151.1.0.32. It is, therefore, affected by a remote code execution vulnerability due to improper parsing of malformed portable-executable PE header files and executables packed with early versions of Aspack. A remote...
CVE-2016-2208
creationtimestamp| type| source ---|---|--- 2016-05-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39835 2016-05-17 19:53:44+00:00| seen| https://t.me/informationsecuritychannel/1271 2025-08-31 03:01:31+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31...
Symantec Antivirus Engine Malformed PE Header Parser Memory Access Violation
SUMMARY Symantec's Anti-Virus Engine AVE was susceptible to memory access violation due to a flaw when parsing a specifically-crafted PE header file in the kernel. The most common symptom of a successful attack would result in a system crash. AFFECTED PRODUCTS Symantec Anti Virus Engine --- CVE |...
CVE-2011-2208
Integer signedness error in the osfgetdomainname function in arch/alpha/kernel/osfsys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call...
Gentoo Security Advisory GLSA 201309-19
Gentoo Linux Local Security Checks GLSA 201309-19 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2015-2208
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter...
CVE-2015-2208
The CVE-2015-2208 issue affects phpMoAdmin 1.1.2, where the saveObject function (moadmin.php) is vulnerable to remote code execution via shell metacharacters in the object parameter. This is a server-side RCE vulnerability exposed in the PHP-based MongoDB GUI tool, allowing an attacker to craft a...
PHPMoAdmin 1.1.2 Remote Code Execution Exploit
This Metasploit module exploits an arbitrary PHP command execution vulnerability due to a dangerous use of eval in PHPMoAdmin. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4...
PHPMoAdmin 1.1.2 Remote Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'PHPMoAdmin 1.1.2 Remote Code Execution', 'Description' = %q This module exploits an arbitrary PHP command execution vulnerability du...
PHPMoAdmin 1.1.2 Remote Code Execution
This module exploits an arbitrary PHP command execution vulnerability due to a dangerous use of eval in PHPMoAdmin. Module Options msf use exploit/multi/http/phpmoadmin/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedexec show options ...show and set...