Lucene search
+L

226 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2020/05/01 8:19 a.m.•76 views

Security Bulletin: Vulnerabilities in libcurl and cURL affect Rational DOORS (CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153, CVE-2015-3236)

Summary Vulnerabilities in libcurl and cURL affect Rational DOORS. Vulnerability Details CVEID: CVE-2015-3143 DESCRIPTION: libcurl could allow a remote attacker from within the local network to bypass security restrictions, caused by the re-use of recently authenticated connections. By sending a...

9CVSS0.3AI score0.30467EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•28 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-2410)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.3AI score0.17939EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•28 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-2566)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS8.7AI score0.07337EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/12/19 12:00 a.m.•36 views

EulerOS 2.0 SP3 : curl (EulerOS-SA-2019-2566)

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow...

5CVSS8.1AI score0.07337EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/05/14 12:00 a.m.•55 views

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1518)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Linux kernel built with the KVM visualization support CONFIGKVM, with nested visualizationnVMX feature enablednested=1...

7.8CVSS6.4AI score0.37233EPSS
SaveExploits25References21
Veracode
Veracode
•added 2019/05/02 5:03 a.m.•47 views

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to escalate their privileges on...

7.8CVSS6.5AI score0.37233EPSS
SaveExploits25References22Affected Software1
Veracode
Veracode
•added 2019/05/02 5:03 a.m.•86 views

Information Disclosure

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to escalate their privileges on...

7.8CVSS6.5AI score0.37233EPSS
SaveExploits25References16Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2019/01/31 2:25 a.m.•83 views

Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Management Module

Summary The following curl, glibc, php and OpenSSL vulnerabilities, as well as MD5 "SLOTH" vulnerability on TLS 1.2, affect IBM Flex System Chassis Management Module. Vulnerability Details Summary The following curl, glibc, php and OpenSSL vulnerabilities, as well as MD5 "SLOTH" vulnerability on...

10CVSS7.2AI score0.49885EPSS
SaveExploits21Affected Software1
Vulnrichment
Vulnrichment
•added 2018/10/17 1:00 a.m.•21 views

CVE-2018-3153

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

6AI score0.01542EPSS
SaveExploits0References3
CVE
CVE
•added 2018/10/17 1:00 a.m.•67 views

CVE-2018-3153

CVE-2018-3153 affects Oracle’s PeopleSoft Enterprise PeopleTools, subcomponent PIA Core Technology. Affected versions are 8.55, 8.56 and 8.57. An unauthenticated attacker with network access via HTTP can compromise PeopleSoft Enterprise PeopleTools; attacks require user interaction. Impact includ...

6.1CVSS5.2AI score0.01542EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2018/10/17 1:00 a.m.•34 views

CVE-2018-3153

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

5.7AI score0.01542EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2018/07/10 8:34 a.m.•40 views

Security Bulletin: Vulnerability in cURL component shipped with IBM Rational ClearCase (CVE-2015-3153)

Summary IBM Rational ClearCase is affected by a cURL/libcURL CURLOPTHTTPHEADER information disclosure vulnerability. Vulnerability Details CVEID: CVE-2015-3153 DESCRIPTION: cURL/libcURL could allow a remote attacker to obtain sensitive information, caused by custom HTTP headers with sensitive...

5CVSS0.7AI score0.07337EPSS
SaveExploits0Affected Software1
Circl
Circl
•added 2018/05/29 3:50 p.m.•28 views

CVE-2012-3153

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oraclereportsrce.rb 2025-02-06 03:13:40+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:06+00:00| seen|...

6.4CVSS5.8AI score0.9822EPSS
SaveExploits10References2
Circl
Circl
•added 2017/12/03 11:10 a.m.•18 views

CVE-2014-3153

creationtimestamp| type| source ---|---|--- 2017-12-03 11:10:28+00:00| seen| MISP/5a23a972-e6a0-4a05-b505-4e8f02de0b81 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futexrequeue.rb 2020-10-09 17:11:57+00:00| seen|...

7.8CVSS6.9AI score0.37233EPSS
SaveExploits16References11
CVE
CVE
•added 2017/08/29 8:00 p.m.•97 views

CVE-2017-3153

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating are affected by a Reflected XSS vulnerability in the search functionality (CVE-2017-3153). The connected documents state the issue but do not provide root-cause details, exploit status, or remediation steps. No patch/version fix is speci...

6.1CVSS6AI score0.02215EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2016/12/09 12:00 a.m.•91 views

Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-3153-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3153-1 advisory. Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could...

10CVSS7.4AI score0.11182EPSS
SaveExploits6References18
OpenVAS
OpenVAS
•added 2016/05/07 12:00 a.m.•73 views

Juniper Networks Junos OS Multiple cURL and libcurl Vulnerabilities

Junos OS is prone to multiple vulnerabilities in cURL and libcurl. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"...

9CVSS7AI score0.30467EPSS
SaveExploits1References1
OSV
OSV
•added 2016/04/08 2:59 p.m.•11 views

DEBIAN-CVE-2016-3153

SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the filtrerentites function...

9.8CVSS7.9AI score0.01835EPSS
SaveExploits0References1
OSV
OSV
•added 2016/04/08 2:59 p.m.•16 views

CVE-2016-3153

SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the filtrerentites function...

9.8CVSS9.8AI score
SaveExploits0References3
OSV
OSV
•added 2016/04/08 2:59 p.m.•9 views

UBUNTU-CVE-2016-3153

SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the filtrerentites function...

9.8CVSS7.6AI score0.01835EPSS
SaveExploits0References3
Rows per page
Query Builder