Lucene search
+L

63 matches found

CVE
CVE
added 2022/05/24 3:30 p.m.78 views

CVE-2021-4229

CVE-2021-4229 affects ua-parser-js versions 0.7.29, 0.8.0, and 1.0.0, with a reported critical issue involving a crypto mining backdoor in the component. The identified fix is to upgrade to 0.7.30, 0.8.1, or 1.0.1. Connected documents provide this concrete detail about affected versions and remed...

8.8CVSS6.7AI score0.01419EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/05/24 3:30 p.m.5 views

CVE-2021-4229 ua-parser-js Crypto Mining backdoor

A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is recommended to upgrade the affected component...

5CVSS8.8AI score0.01419EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/05/24 3:30 p.m.36 views

CVE-2021-4229 ua-parser-js Crypto Mining backdoor

A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is recommended to upgrade the affected component...

5CVSS8.8AI score0.01419EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2022/05/24 3:30 p.m.60 views

CVE-2021-4229

A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is recommended to upgrade the affected component...

8.8CVSS8.7AI score0.01419EPSS
SaveExploits0
CVE
CVE
added 2020/06/05 12:55 p.m.105 views

CVE-2020-4229

CVE-2020-4229 affects IBM Worklight/MobileFoundation (8.0.0.0). The root cause is improper invalidation of the session cookie on logout, enabling possible unauthorized access to a user’s session. The IBM Security bulletin confirms the vulnerability and lists a fix for IBM MobileFirst Platform Fou...

7.5CVSS7.1AI score0.0085EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/06/18 12:00 a.m.43 views

Debian DSA-4229-1 : strongswan - security update

Two vulnerabilities were discovered in strongSwan, an IKE/IPsec suite. - CVE-2018-5388 The stroke plugin did not verify the message length when reading from its control socket. This vulnerability could lead to denial of service. On Debian write access to the socket requires root permission on...

7.5CVSS6.8AI score0.06201EPSS
SaveExploits0References8
CVE
CVE
added 2018/06/08 6:00 p.m.84 views

CVE-2018-4229

CVE-2018-4229 (Apple macOS) : Affects macOS prior to 10.13.5, involving the Grand Central Dispatch component. The issue allows a sandbox protection bypass via misparsing of entitlement plists. Apple’s security update for macOS High Sierra 10.13.5 addresses this, so upgrading to macOS 10.13.5 (Sec...

10CVSS6.7AI score0.02058EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2018/06/04 12:00 a.m.80 views

Apple Mac OS X Security Updates (HT208849)-01

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.87348EPSS
SaveExploits30References1
CVE
CVE
added 2018/03/16 2:04 p.m.22 views

CVE-2017-4229

CVE-2017-4229 entry is rejected and not an active vulnerability entry.

7.3AI score
SaveExploits0
NVD
NVD
added 2018/02/08 6:29 p.m.21 views

CVE-2017-17418

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPolicy Get method requests. The issue results from...

9.8CVSS9.7AI score0.0386EPSS
SaveExploits0References1
Prion
Prion
added 2018/02/08 6:29 p.m.20 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPolicy Get method requests. The issue results from...

7.5CVSS9.7AI score0.0386EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2018/02/08 6:00 p.m.54 views

CVE-2017-17418

CVE-2017-17418 affects Quest NetVault Backup 11.3.0.12. The vulnerability arises from improper validation of a user-supplied string in NVBUPolicy Get method, leading to SQL injection and the potential to execute code in the underlying database context. Authentication is not required. Multiple con...

9.8CVSS9.7AI score0.0386EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/02/08 6:00 p.m.39 views

CVE-2017-17418

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPolicy Get method requests. The issue results from...

9.7AI score0.0386EPSS
SaveExploits0References1
Circl
Circl
added 2016/08/29 12:00 a.m.14 views

CVE-2016-4229

creationtimestamp| type| source ---|---|--- 2016-08-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40310 2025-08-31 03:01:29+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

9.3CVSS8.6AI score0.32465EPSS
SaveExploits2References1
ALT Linux
ALT Linux
added 2016/07/20 12:00 a.m.39 views

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt64

3:11-alt64 built July 20, 2016 Sergey V Turchin in task 167192 July 20, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182,...

9.3CVSS7.4AI score0.36456EPSS
SaveExploits33
Tenable Nessus
Tenable Nessus
added 2016/07/14 12:00 a.m.38 views

openSUSE Security Update : flash-player (openSUSE-2016-866)

Adobe Flash Player was updated to 11.2.202.632 to fix many security issues tracked under the upstream advisory APSB16-25, allowing remote attackers to execute arbitrary code when delivering specially crafted Flash content. The following vulnerabilities were fixed : - CVE-2016-4172: memory...

9.3CVSS7.9AI score0.36456EPSS
SaveExploits33References53
RedHat Linux
RedHat Linux
added 2016/07/13 6:22 p.m.46 views

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...

9.3CVSS6.7AI score0.36456EPSS
SaveExploits33References3
RedhatCVE
RedhatCVE
added 2016/07/13 8:26 a.m.30 views

CVE-2016-4229

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174,...

9.3CVSS7.8AI score0.33134EPSS
SaveExploits14References2
NVD
NVD
added 2016/07/13 2:00 a.m.17 views

CVE-2016-4229

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174,...

9.3CVSS9.1AI score0.32465EPSS
SaveExploits2References10
CVE
CVE
added 2016/07/13 1:00 a.m.114 views

CVE-2016-4229

CVE-2016-4229 is a use-after-free in Adobe Flash Player (Windows/macOS: before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux: before 11.2.202.632) enabling arbitrary code execution via unspecified vectors. The vulnerability is distinct from CVE-2016-4173/4174/4222/4226/4227/4228/4230/4231/424...

9.3CVSS9AI score0.32465EPSS
SaveExploits2References10Affected Software1
Rows per page
Query Builder