Lucene search
+L

91 matches found

Lenovo
Lenovo
added 2016/06/20 12:00 a.m.4 views

Fingerprint Validity Driver and Synaptics Fingerprint Driver Information Disclosure - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
CVE
CVE
added 2016/04/11 2:00 p.m.48 views

CVE-2016-2393

Lenovo Fingerprint Manager before 8.01.57 and Lenovo Touch Fingerprint before 1.00.08 expose a privilege-escalation flaw due to weak ACLs on certain services and files, enabling local attackers to bypass checks. Affected software: Fingerprint Manager (<8.01.57) and Touch Fingerprint (

7.8CVSS7.7AI score0.00323EPSS
SaveExploits0References1Affected Software2
OpenVAS
OpenVAS
added 2015/11/24 12:00 a.m.35 views

Oracle: Security Advisory (ELSA-2015-2393)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.046EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2014/10/31 12:00 a.m.15 views

Ubuntu: Security Advisory (USN-2393-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.5AI score0.39883EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2014/10/31 12:00 a.m.22 views

Ubuntu 14.04 LTS : Wget vulnerability (USN-2393-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2393-1 advisory. HD Moore discovered that Wget contained a path traversal vulnerability when downloading symlinks using FTP. A malicious remote FTP server or a man in the middle...

9.3CVSS7.6AI score0.39883EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:00 a.m.41 views

openSUSE Security Update : wireshark (openSUSE-SU-2012:0657-1)

This update is a maintenance release of Wireshark. It fixes some vulererabilities when dissecting certain protocols. As packages for these protocols may be received over the network, an attacker may trigger infinite or large loops or crashes of the dissector. Wireshark release notes and advisorie...

3.3CVSS7.2AI score0.03976EPSS
SaveExploits3References9
securityvulns
securityvulns
added 2014/05/05 12:00 a.m.81 views

Open-Xchange Security Advisory 2014-04-08

Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Vulnerability type: Information exposure CWE-200 Vulnerable version: 7.4.2 and earlier Vulnerable component: frontend Fixed version: 7.4.2-rev13, 7.4.1-rev11, 7.2.2-rev20 Report confidence: Confirmed Solution status: Fixed by Vendor Vendor...

4.3CVSS0.5AI score0.01087EPSS
SaveExploits3
CVE
CVE
added 2014/04/17 8:00 p.m.55 views

CVE-2014-2393

Open-Xchange AppSuite is affected by CVE-2014-2393, a Drive attachment filename XSS in the composer. Vulnerable in Open-Xchange AppSuite 7.4.1 before rev11 and 7.4.2 before rev13; fixed in 7.4.2-rev13, 7.4.1-rev11, and 7.2.2-rev20 per Open-Xchange advisory. The issue arises from insufficient vali...

4.3CVSS5.7AI score0.0095EPSS
SaveExploits1References1Affected Software1
seebug.org
seebug.org
added 2014/04/11 12:00 a.m.40 views

Open-Xchange AppSuite Drive组件Email附件文件名存储型跨站脚本漏洞

CVE ID:CVE-2014-2393 OX App Suite是一个集成云环境,可以帮助用户在任何设备上管理他们的电子邮件、任务、日程安排、文档等。 由于应用程序没有正确校验Drive组件中的Email附件的文件名,允许远程攻击者利用漏洞注入恶意脚本或HTML代码,当恶意数据被查看时,可获取敏感信息或劫持用户会话。 0 Open-Xchange AppSuite 7.4.2 Open-Xchange AppSuite 7.4.1 OX App Suite 7.4.2-rev13, 7.4.1-rev11, 7.2.2-rev20版本已修复该漏洞,建议用户下载使用:...

4.3CVSS6.6AI score0.0095EPSS
SaveExploits1
CVE
CVE
added 2013/04/17 2:00 p.m.88 views

CVE-2013-2393

CVE-2013-2393 concerns an unspecified vulnerability in the Oracle Outside In Technology component used by Oracle Fusion Middleware versions 8.3.7 and 8.4.0, with impact stated as availability via issues related to Outside In Filters. The connected documents confirm this CVE is associated with Ora...

1.5CVSS5.7AI score0.00313EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
added 2012/07/16 12:00 a.m.32 views

Fedora Update for wireshark FEDORA-2012-10175

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

3.3CVSS6.4AI score0.03976EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2012/07/16 12:00 a.m.32 views

Fedora Update for wireshark FEDORA-2012-10175

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2012-10175 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

3.3CVSS6.2AI score0.03976EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2012/07/11 12:00 a.m.28 views

Fedora 16 : wireshark-1.6.8-1.fc16 (2012-10175)

Update to latest upstream release, fixing few security bugs. CVE-2012-2392: Infinite and large loops in ANSI MAP, ASF, IEEE 802.11, IEEE 802.3, and LTP dissectors. CVE-2012-2393: Memory allocation flaw in the DIAMETER dissector. CVE-2012-2394: Denial of service crash due memory alignment problem ...

3.3CVSS7.2AI score0.03976EPSS
SaveExploits3References7
OpenVAS
OpenVAS
added 2012/07/05 12:00 a.m.31 views

Wireshark Multiple Denial of Service Vulnerabilities (Jul 2012) - Mac OS X

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

3.3CVSS7.2AI score0.0377EPSS
SaveExploits2References6
OpenVAS
OpenVAS
added 2012/07/05 12:00 a.m.24 views

Wireshark Multiple Denial of Service Vulnerabilities (Jul 2012) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

3.3CVSS7.2AI score0.0377EPSS
SaveExploits2References6
OSV
OSV
added 2012/06/30 10:15 a.m.6 views

CVE-2012-2393

epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service application crash via a crafted packet that triggers incorrect...

6.3AI score
SaveExploits0References11
CVE
CVE
added 2012/06/30 10:00 a.m.75 views

CVE-2012-2393

CVE-2012-2393: In Wireshark, the DIAMETER dissector epan/dissectors/packet-diameter.c may allocate memory incorrectly, enabling a remote attacker to crash the application via a crafted Diameter packet. Affected line: Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8. Mitigation: upgrade to fix...

3.3CVSS6.3AI score0.0377EPSS
SaveExploits1References11Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/06/27 12:00 a.m.36 views

SuSE 10 Security Update : wireshark (ZYPP Patch Number 8168)

This version upgrade of wireshark fixes multiple denial of service flaws : - denial of service via memory alignment flaw. CVE-2012-2394 - DIAMETER memory allocation flaw. CVE-2012-2393 - denial of service in multiple dissectors / parsers Additionally, various other non-security bug fixes have bee...

3.3CVSS7.2AI score0.03976EPSS
SaveExploits3References6
Circl
Circl
added 2012/05/24 12:00 a.m.10 views

CVE-2012-2393

creationtimestamp| type| source ---|---|--- 2012-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18918...

3.3CVSS7.1AI score0.0377EPSS
SaveExploits1References1
CVE
CVE
added 2012/02/02 5:00 p.m.75 views

CVE-2011-2393

The CVE-2011-2393 entry concerns the IPv6 Neighbor Discovery implementation in BSD-derived stacks (FreeBSD, NetBSD, and possibly others) where processing of Router Advertisement messages from multiple source addresses can exhaust CPU and cause device hang, constituting a remote denial of service ...

7.8CVSS7.2AI score0.01978EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder