Lucene search
+L

61 matches found

OSV
OSV
added 2022/09/09 2:39 p.m.21 views

CVE-2022-3147 Server-side Denial of Service while processing a specifically crafted JPEG file

Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service...

3.1CVSS6.6AI score
SaveExploits0References4
CVE
CVE
added 2020/02/07 4:25 p.m.62 views

CVE-2017-3147

CVE-2017-3147 entry is rejected/not used and does not represent an active vulnerability.

7.4AI score
SaveExploits0
CVE
CVE
added 2020/01/29 10:10 p.m.84 views

CVE-2020-3147

The CVE-2020-3147 issue is a DoS vulnerability in the Cisco Small Business Switches web UI caused by improper validation of web requests. A remote, unauthenticated attacker can trigger an unexpected device reload, leading to DoS on affected devices. The flaw affects firmware releases prior to 1.3...

8.6CVSS7.7AI score0.0228EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/01/14 5:31 p.m.95 views

CVE-2015-3147

The CVE-2015-3147 issue affects ABRT’s daemon, specifically daemon/abrt-handle-upload.in, where moving reports from /var/spool/abrt-upload can be manipulated via a symbolic link to write to arbitrary files (or cause other impacts) on the system. The vulnerability arises from a symlink attack agai...

6.5CVSS6AI score0.01066EPSS
SaveExploits0References5Affected Software7
Check Point Advisories
Check Point Advisories
added 2019/11/07 12:0 a.m.22 views

Oracle Outside In Excel Information Disclosure (CVE-2018-3147)

An out-of-bounds read vulnerability exists in Oracle Outside-In. The vulnerability is due to improper handling of the OfficeArtRecLen field of a GelFrame record of an Excel document. Successful exploitation could result in information disclosure which could be used to further compromise the targe...

4.3CVSS1.2AI score0.01704EPSS
SaveExploits0
Veracode
Veracode
added 2019/05/02 5:40 a.m.35 views

Symlink Attack

ABRT Automatic Bug Reporting Tool is a tool to help users to detect defects in applications and to create a bug report with all the information needed by a maintainer to fix it. It uses a plug-in system to extend its functionality. It was found that ABRT was vulnerable to multiple race condition...

7.8CVSS6.1AI score0.04776EPSS
SaveExploits5References13Affected Software2
Veracode
Veracode
added 2019/05/02 5:40 a.m.28 views

Sensitive Information Leakage

ABRT Automatic Bug Reporting Tool is a tool to help users to detect defects in applications and to create a bug report with all the information needed by a maintainer to fix it. It uses a plug-in system to extend its functionality. It was found that ABRT was vulnerable to multiple race condition...

7.8CVSS6.1AI score0.04776EPSS
SaveExploits5References12Affected Software2
Circl
Circl
added 2019/04/22 8:30 p.m.14 views

CVE-2011-3147

creationtimestamp| type| source ---|---|--- 2019-04-22 20:30:51+00:00| seen| https://t.me/cibsecurity/3865...

8.6CVSS5AI score0.00734EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/22 4:29 p.m.14 views

CVE-2011-3147

Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem...

8.6CVSS8.5AI score
SaveExploits0References2
CVE
CVE
added 2019/04/22 3:35 p.m.63 views

CVE-2011-3147

CVE-2011-3147 concerns OpenStack Nova: when processing a malicious qcow filesystem, versions of Nova prior to 2012.1 could expose host hypervisor filesystem information to the guest. Multiple sources (e.g., OSV, GHSA advisories, and CVE records) describe the issue as a qcow-related exposure of ho...

8.6CVSS5.9AI score0.00734EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/02/12 12:0 a.m.337 views

Security Updates for Exchange (February 2019)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - Multiple Vulnerabilites with the included libraries from Oracle Outside. CVE-2018-18223, CVE-2018-18224, CVE-2018-3147, CVE-2018-3217, CVE-2018-3218,...

9.3CVSS6.4AI score0.23799EPSS
SaveExploits2References28
CVE
CVE
added 2018/10/17 1:0 a.m.59 views

CVE-2018-3147

CVE-2018-3147 affects the Oracle Outside In Technology component (Outside In Filters) used by Oracle Fusion Middleware. Affected versions are 8.5.3 and 8.5.4. The vulnerability allows an unauthenticated attacker with network access via HTTP to read a subset of Oracle Outside In data; exploitation...

4.3CVSS4.1AI score0.01704EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2017/01/23 9:0 p.m.44 views

CVE-2016-3147

CVE-2016-3147 is a buffer overflow in the Landesk Management Suite collector.exe listener affecting version 10.0.0.271 and earlier. The vulnerability allows a remote attacker to cause a denial of service and potentially execute arbitrary code via a large packet. Connected documents corroborate th...

9.8CVSS9.7AI score0.0574EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/07/08 12:0 a.m.40 views

RHEL 6 : abrt (RHSA-2015:1210)

Updated abrt packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available fo...

7.8CVSS6.2AI score0.04776EPSS
SaveExploits5References13
OpenVAS
OpenVAS
added 2015/07/01 12:0 a.m.28 views

Fedora Update for abrt FEDORA-2015-10193

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.1AI score0.04776EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2015/06/16 12:0 a.m.32 views

CentOS 7 : abrt (CESA-2015:1083)

Updated abrt packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

7.8CVSS6.4AI score0.04776EPSS
SaveExploits5References9
Tenable Nessus
Tenable Nessus
added 2015/06/10 12:0 a.m.42 views

RHEL 7 : abrt (RHSA-2015:1083)

Updated abrt packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

7.8CVSS6.4AI score0.04776EPSS
SaveExploits5References17
Tenable Nessus
Tenable Nessus
added 2015/02/02 12:0 a.m.42 views

Debian DSA-3147-1 : openjdk-6 - security update (POODLE)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, information disclosure or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

10CVSS6.7AI score0.99999EPSS
SaveExploits13References14
OpenVAS
OpenVAS
added 2015/01/29 12:0 a.m.36 views

Debian: Security Advisory (DSA-3147-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.6AI score0.99999EPSS
SaveExploits13References3
Tenable Nessus
Tenable Nessus
added 2014/12/22 12:0 a.m.48 views

Juniper Junos Space < 13.1R1 MySQL Multiple Vulnerabilities (JSA10601)

According to its self-reported version number, the remote Junos Space version is prior to 13.1R1. It is, therefore, affected by multiple vulnerabilities related to the installed MySQL version. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid80193; scriptversion"1.4";...

9CVSS5.6AI score0.05305EPSS
SaveExploits0References12
Rows per page
Query Builder