Lucene search
+L

247 matches found

NVD
NVD
added 2019/11/22 7:15 p.m.30 views

CVE-2014-6310

Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...

9.8CVSS9.9AI score0.04706EPSS
SaveExploits0References4
Prion
Prion
added 2019/11/22 7:15 p.m.30 views

Buffer overflow

Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...

7.5CVSS8.5AI score0.04706EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2019/11/22 7:15 p.m.43 views

CVE-2014-6310

Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...

9.8CVSS7.5AI score0.04706EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2019/11/22 6:07 p.m.46 views

CVE-2014-6310

Buffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code via the 'select' function...

9.8CVSS10AI score0.04706EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2019/10/31 8:15 p.m.25 views

CVE-2013-2024

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0...

9CVSS7.1AI score0.04523EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2019/10/31 7:57 p.m.63 views

CVE-2013-2024

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0...

9CVSS8.1AI score0.04523EPSS
SaveExploits0
CVE
CVE
added 2019/10/31 7:57 p.m.102 views

CVE-2013-2024

In Chicken, CVE-2013-2024 describes an OS command injection vulnerability in the qs procedure from the utils module, affecting versions before 4.9.0. The root cause is unsafely handling or composing OS commands within that path, enabling an attacker to execute arbitrary commands on the host. The ...

9CVSS8.9AI score0.04523EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2019/10/31 7:57 p.m.52 views

CVE-2013-2024

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0...

8.9AI score0.04523EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2019/10/05 12:00 a.m.10 views

PT-2019-4446 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel version 4.9.0 Description: The issue concerns a relative paths injection in directory entry lists within the Linux kernel CIFS implementation. It is caused by incorrect restriction of the directory path name with limited access...

10CVSS7.4AI score0.98745EPSS
SaveExploits151References1413
OpenVAS
OpenVAS
added 2019/06/11 12:00 a.m.103 views

phpMyAdmin < 4.9.0 CSRF Vulnerability (PMASA-2019-4) - Windows

phpMyAdmin is prone to a CSRF vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin"; if descripti...

6.5CVSS8AI score0.19184EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2019/06/11 12:00 a.m.47 views

phpMyAdmin < 4.9.0 CSRF Vulnerability (PMASA-2019-4) - Linux

phpMyAdmin is prone to a CSRF vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin"; if descripti...

6.5CVSS8AI score0.19184EPSS
SaveExploits4References1
Debian CVE
Debian CVE
added 2019/06/05 4:27 a.m.161 views

CVE-2019-12616

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken tag pointing at the victim's phpMyAdmin database, and the attacker can potential...

6.5CVSS8AI score0.19184EPSS
SaveExploits4
Positive Technologies
Positive Technologies
added 2019/01/03 12:00 a.m.11 views

PT-2019-10741 · Telegram · Telegram Android

Name of the Vulnerable Software and Affected Versions: Telegram Android messaging application version 4.9.0 Description: An information disclosure issue exists in the "Secret Chats" functionality, which allows users to delete chat traces. However, a bug leaves behind photos taken and shared in...

5.5CVSS4.4AI score0.00428EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2018/12/20 3:29 p.m.33 views

CVE-2018-1000838

autopsy version = 4.9.0 contains a XML External Entity XXE vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted CaseMetadata...

10CVSS7.2AI score0.02502EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2018/12/20 3:00 p.m.51 views

CVE-2018-1000838

autopsy version = 4.9.0 contains a XML External Entity XXE vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted CaseMetadata...

10CVSS8.5AI score0.02502EPSS
SaveExploits0
Cvelist
Cvelist
added 2018/12/20 3:00 p.m.37 views

CVE-2018-1000838

autopsy version = 4.9.0 contains a XML External Entity XXE vulnerability in CaseMetadata XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via Specially crafted CaseMetadata...

9.4AI score0.02502EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/11/28 2:00 p.m.48 views

CVE-2018-16857

Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords to restrict brute forcing of passwords in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been...

7.4CVSS6.8AI score0.02301EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2018/11/27 12:00 a.m.34 views

CVE-2018-16857

Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords to restrict brute forcing of passwords in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been...

7.4CVSS6.8AI score0.02301EPSS
SaveExploits0References2
zdt
zdt
added 2018/08/30 12:00 a.m.66 views

Linux/MIPS64 - execve(/bin/sh) Shellcode (48 bytes)

/ Title: Linux/MIPS64 - execve/bin/sh Shellcode 48 bytes Author: Antonio execve/bin/sh shellcode for MIPS64 tested on MIPS Malta - Linux debian-mips64el 4.9.0-3-5kc-malta 48 bytes gcc -fno-stack-protector -z execstack main.c -o main -g adp, SLAE - 1326, 2018. / include include / .text .global sta...

0.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2018/07/10 12:00 a.m.35 views

Node.js 'path' Module Regular Expression DoS Vulnerability - Windows

Node.js is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js";...

7.5CVSS7.4AI score0.03409EPSS
SaveExploits0References1
Rows per page
Query Builder