Lucene search
+L

1225 matches found

android
android
added 2016/07/01 12:0 a.m.43 views

CVE-2016-2067

drivers/gpu/msm/kgsl.c in the MSM graphics driver aka GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, mishandles the KGSLMEMFLAGSGPUREADONLY flag, which allows attackers to gain privileges by leveraging...

9.3CVSS8.5AI score0.00679EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2016/06/13 1:0 a.m.44 views

CVE-2016-2061

Integer signedness error in the MSM V4L2 video driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service array overflow and memory corruption via a crafted...

7.5AI score0.01143EPSS
SaveExploits0References3
Prion
Prion
added 2016/05/10 7:59 p.m.32 views

Double free

Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service crash via a crafted Edge Side Includes ESI response...

5CVSS6.8AI score0.23112EPSS
SaveExploits0References16Affected Software3
Prion
Prion
added 2016/05/10 7:59 p.m.24 views

Design/Logic Flaw

clientsiderequest.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service crash via crafted Edge Side Includes ESI responses...

5CVSS6.8AI score0.5392EPSS
SaveExploits1References16Affected Software3
OSV
OSV
added 2016/05/10 12:0 a.m.7 views

UBUNTU-CVE-2016-4556

Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service crash via a crafted Edge Side Includes ESI response...

7.5CVSS7.2AI score0.23112EPSS
SaveExploits0References4
CVE
CVE
added 2016/05/05 9:0 p.m.100 views

CVE-2016-2062

The CVE-2016-2062 issue affects the Adreno GPU driver for the Linux kernel (3.x) as used in Qualcomm QuIC MSM Android contributions. The root cause is an incorrect integer data type in adreno_perfcounter_query_group within drivers/gpu/msm/adreno_perfcounter.c, which can lead to a denial of servic...

7.8CVSS7.8AI score0.00205EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2016/05/02 10:59 a.m.33 views

CVE-2016-2854

The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

7.8CVSS6.8AI score0.0095EPSS
SaveExploits4References4
Kitploit
Kitploit
added 2016/04/25 10:11 p.m.16 views

IPGeoLocation - A tool to retrieve IP Geolocation information

A tool to retrieve IP Geolocation information Powered by ip-api Requirements Python 3.x Features Retrieve IP or Domain Geolocation. Retrieve your own IP Geolocation. Retrieve Geolocation for IPs or Domains loaded from file. Each target in new line. Define your own custom User Agent string. Select...

7.1AI score
SaveExploits0References1
NVD
NVD
added 2016/04/25 2:59 p.m.21 views

CVE-2016-4051

Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data...

8.8CVSS8.5AI score0.1828EPSS
SaveExploits0References17
OSV
OSV
added 2016/04/25 2:59 p.m.4 views

DEBIAN-CVE-2015-8852

Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r carriage return character in conjunction with multiple Content-Length headers in an HTTP...

7.5CVSS7.1AI score0.03524EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2016/04/25 2:59 p.m.30 views

CVE-2015-8852

Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r carriage return character in conjunction with multiple Content-Length headers in an HTTP...

7.5CVSS7.1AI score0.03524EPSS
SaveExploits0References2
Prion
Prion
added 2016/04/25 2:59 p.m.33 views

Buffer overflow

Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data...

6.8CVSS9.6AI score0.1828EPSS
SaveExploits0References17Affected Software3
Cvelist
Cvelist
added 2016/04/25 2:0 p.m.35 views

CVE-2015-8852

Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r carriage return character in conjunction with multiple Content-Length headers in an HTTP...

7.3AI score0.03524EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2016/04/25 2:0 p.m.46 views

CVE-2015-8852

Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r carriage return character in conjunction with multiple Content-Length headers in an HTTP...

7.5CVSS7.6AI score0.03524EPSS
SaveExploits0
Cvelist
Cvelist
added 2016/04/25 2:0 p.m.36 views

CVE-2016-4051

Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by seeding manager reports with crafted data...

9.1AI score0.1828EPSS
SaveExploits0References17
Prion
Prion
added 2016/04/25 12:59 a.m.42 views

Design/Logic Flaw

The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted applicatio...

4.3CVSS7.4AI score0.18171EPSS
SaveExploits2References41Affected Software2
Debian CVE
Debian CVE
added 2016/04/25 12:0 a.m.57 views

CVE-2016-2111

The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted applicatio...

6.3CVSS6.9AI score0.02902EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2016/04/25 12:0 a.m.43 views

CVE-2016-2115

Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacnnp, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream...

5.9CVSS6.8AI score0.10232EPSS
SaveExploits0
NVD
NVD
added 2016/04/11 3:59 p.m.17 views

CVE-2012-6700

The decodesearch function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response...

7.5CVSS7.2AI score0.01967EPSS
SaveExploits0References5
OSV
OSV
added 2016/04/11 3:59 p.m.11 views

CVE-2012-6699

The decodesearch function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service out-of-bounds read via a crafted response...

7.5CVSS7.2AI score
SaveExploits0References5
Rows per page
Query Builder