Lucene search
+L

75 matches found

OpenVAS
OpenVAS
added 2016/05/03 12:00 a.m.102 views

Oracle WebLogic Server Multiple Unspecified Vulnerabilities (cpujul2014, cpuapr2016)

Oracle WebLogic Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS6.9AI score0.62924EPSS
SaveExploits8References2
RedhatCVE
RedhatCVE
added 2015/10/30 9:54 a.m.25 views

CVE-2007-4255

Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msqlconnect function...

7.5CVSS8.4AI score0.09333EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2015/10/06 12:00 a.m.73 views

Oracle: Security Advisory (ELSA-2011-0017)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.9CVSS7.4AI score0.02939EPSS
SaveExploits22References2
NVD
NVD
added 2015/07/10 12:59 a.m.17 views

CVE-2015-4255

Cross-site request forgery CSRF vulnerability on Cisco TelePresence IP Gateway devices with software 2.03.34 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90734...

6.8CVSS7.3AI score0.00996EPSS
SaveExploits0References2
CVE
CVE
added 2015/07/10 12:00 a.m.58 views

CVE-2015-4255

The CVE-2015-4255 issue concerns Cisco TelePresence IP Gateway devices. The vulnerability is a cross-site request forgery (CSRF) flaw in the Cisco TelePresence IP Gateway Series, due to insufficient CSRF protections, allowing an unauthenticated, remote attacker to hijack a user’s authenticated ac...

6.8CVSS7.5AI score0.00996EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2014/07/17 10:00 a.m.75 views

CVE-2014-4255

CVE-2014-4255 affects Oracle WebLogic Server (Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0). The vulnerability is described as unspecified and related to WLS - Security and Policy, with partial impacts to confidentiality, integrity, and availability. Connected IBM advisory notes an IBM O...

6.8CVSS8.2AI score0.03215EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2013/10/11 10:55 p.m.17 views

CVE-2013-4255

The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a 1 PREEMPT, 2 SUSPEND, 3 CONTINUE, 4 WANTVACATE, or 5 KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of...

6AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2013/10/11 10:00 p.m.63 views

CVE-2013-4255

The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a 1 PREEMPT, 2 SUSPEND, 3 CONTINUE, 4 WANTVACATE, or 5 KILL policy that evaluate to an Unconfigured, Undefined, or Error state, which allows remote authenticated users to cause a denial of...

3.5CVSS6.1AI score0.0164EPSS
SaveExploits0
CVE
CVE
added 2013/10/11 10:00 p.m.78 views

CVE-2013-4255

HTCondor vulnerability CVE-2013-4255 affects policy evaluation in Condor (7.5.4, 8.0.0 and earlier). If a job defines a policy attribute in CONTINUE, KILL, PREEMPT, SUSPEND, or related policies that evaluates to UNDEFINED/ERROR/Unconfigured, a remote authenticated user could cause condor_startd t...

3.5CVSS6.3AI score0.0164EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2012/08/13 6:00 p.m.69 views

CVE-2012-4255

CVE-2012-4255 affects MySQLDumper 1.24.4. A remote attacker can obtain sensitive information by requesting learn/cubemail/refresh_dblist.php, which reveals the installation path in an error message. This is documented across multiple sources (NVD, Red Hat, CVE lists). The connected documents prov...

4.3CVSS6.3AI score0.01329EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2012/08/13 6:00 p.m.34 views

CVE-2012-4255

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refreshdblist.php, which reveals the installation path in an error message...

6.1AI score0.01329EPSS
SaveExploits1References3
securityvulns
securityvulns
added 2011/12/05 12:00 a.m.50 views

ZDI-11-336 : RealNetworks RealPlayer Invalid Codec Name Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-336 : RealNetworks RealPlayer Invalid Codec Name Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-336 November 28, 2011 - -- CVE ID: CVE-2011-4255 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected...

10CVSS0.5AI score0.04105EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2011/11/29 12:00 a.m.45 views

RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Windows)

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnnov11win.nasl 7052 2017-09-04 11:50:51Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 Windows Authors: Madhuri D Copyright: Copyright c...

10CVSS0.7AI score0.04255EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2011/11/29 12:00 a.m.46 views

RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Mac OS X)

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnnov11macosx.nasl 7024 2017-08-30 11:51:43Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 Mac OS X Authors: Madhuri D Copyright: Copyright...

10CVSS1.2AI score0.04255EPSS
SaveExploits0References2
CVE
CVE
added 2011/11/24 11:00 a.m.72 views

CVE-2011-4255

CVE-2011-4255 affects RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703. A vulnerability in processing an invalid codec name could allow remote code execution. The advisory indicates exploitation requires user interaction (visiting a malicious page or opening a crafted f...

10CVSS7.7AI score0.04105EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2011/10/14 12:00 a.m.110 views

VMSA-2011-0012 : VMware ESXi and ESX updates to third-party libraries and ESX Service Console

a. ESX third-party update for Service Console kernel This update takes the console OS kernel package to kernel-2.6.18-238.9.1 which resolves multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2010-1083, CVE-2010-2492, CVE-2010-2798,...

8.1CVSS6.7AI score0.17009EPSS
SaveExploits61References62
VMware
VMware
added 2011/10/10 12:00 a.m.108 views

VMSA-2011-0012:VMware ESXi and ESX updates to third party libraries and ESX Service Console

VMSA-2011-0012.3 VMware ESX third party updates for Service Console packages glibc and dhcp VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0012.3 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console packages glibc and dhcp VMware Security...

8.1CVSS8AI score0.17009EPSS
SaveExploits61References3Affected Software2
CVE
CVE
added 2011/01/25 12:00 a.m.76 views

CVE-2010-4255

CVE-2010-4255 affects Xen 4.0.1 and earlier on x86_64 PV; fixup_page_fault in arch/x86/traps.c may call handle_gdt_ldt_mapping_fault without verifying kernel mode, allowing a guest OS user to trigger host OS denial of service (BUG_ON). MiracleLinux/VMware/Linux advisories include this CVE among f...

6.1CVSS5.2AI score0.00768EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2009/12/10 1:00 a.m.53 views

CVE-2009-4255

The CVE-2009-4255 entry documents a Cross-site scripting (XSS) vulnerability in the You!Hostit! Joomla! template 1.0.1. The flaw arises in the created_by_alias parameter in index.php, allowing remote attackers to inject arbitrary web script or HTML. Impact and specifics are limited to the describ...

4.3CVSS5.8AI score0.01062EPSS
SaveExploits1References3Affected Software1
seebug.org
seebug.org
added 2008/12/13 12:00 a.m.43 views

MS Visual Basic ActiveX Controls mscomct2.ocx Buffer Overflow PoC

No description provided by source. !/usr/bin/perl Microsoft Visual Basic ActiveX Controls mscomct2.ocx Animation Object Buffer Overflow CVE-2008-4255 PoC You'll need Debugging Tools for Windows http://www.microsoft.com/whdc/devtools/debugging/default.mspx /JA Come to FRHACK! www.frhack.org print...

9.3CVSS0.7AI score0.53703EPSS
SaveExploits7
Rows per page
Query Builder