Lucene search
+L

52 matches found

vulnersOsv
vulnersOsv
added 2022/05/13 1:7 a.m.4 views

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.7.0 <=3.9.1), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.7.0 <=3.9.1) +1 more potentially affected by CVE-2017-4973 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.7.0 <=3.9.1)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.7.0, =3.7.0, =3.7.0, =3.7.0, =3.9.1 Source cves: CVE-2017-4973 Source advisory: OSV:GHSA-PGJC-GC7G-P2C6...

8.8CVSS7.2AI score0.01068EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2022/05/13 1:7 a.m.8 views

org.cloudfoundry.identity:cloudfoundry-identity-api (>=3.10.0 <=3.13.0), org.cloudfoundry.identity:cloudfoundry-identity-app (>=3.10.0 <=3.13.0) +1 more potentially affected by CVE-2017-4973 via org.cloudfoundry.identity:cloudfoundry-identity-server (>=3.10.0 <=3.13.0)

org.cloudfoundry.identity:cloudfoundry-identity-server MAVEN version =3.10.0, =3.10.0, =3.10.0, =3.10.0, =3.13.0 Source cves: CVE-2017-4973 Source advisory: OSV:GHSA-PGJC-GC7G-P2C6...

8.8CVSS7.2AI score0.01068EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/10/04 12:0 a.m.42 views

Ubuntu 20.04 LTS : Python vulnerability (USN-4973-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4973-2 advisory. USN-4973-1 fixed this vulnerability previously, but it was re-introduced in python3.8 in focal because of the SRU in LP: 1928057. This update fixes the problem...

9.8CVSS7.4AI score0.06589EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/06/02 12:0 a.m.28 views

Ubuntu: Security Advisory (USN-4973-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.06589EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/06/01 12:0 a.m.53 views

Ubuntu 20.04 LTS : Python vulnerability (USN-4973-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4973-1 advisory. It was discovered that the Python stdlib ipaddress API incorrectly handled octal strings. A remote attacker could possibly use this issue to perform a wide variet...

9.8CVSS7.5AI score0.06589EPSS
Exploits1References2
Cvelist
Cvelist
added 2019/12/30 4:19 p.m.11 views

CVE-2019-4973

...

Exploits0
CVE
CVE
added 2019/12/30 4:19 p.m.27 views

CVE-2019-4973

CVE-2019-4973 entry is explicitly rejected and not used; it does not represent an active vulnerability entry.

7.3AI score
Exploits0
CVE
CVE
added 2018/07/09 7:0 p.m.60 views

CVE-2018-4973

Adobe Acrobat/Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier are affected by an Out-of-bounds read (root cause). Successful exploitation could lead to information disclosure. The connected Nessus entries confirm cross‑platform (Windows/macOS...

7.5CVSS7.8AI score0.11022EPSS
Exploits0References3Affected Software2
OpenVAS
OpenVAS
added 2018/05/15 12:0 a.m.35 views

Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

10CVSS8.3AI score0.86898EPSS
Exploits5References3
OpenVAS
OpenVAS
added 2018/05/15 12:0 a.m.77 views

Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

10CVSS8.3AI score0.86898EPSS
Exploits5References3
UbuntuCve
UbuntuCve
added 2018/02/15 9:29 p.m.28 views

CVE-2011-4973

Authentication bypass vulnerability in modnss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password...

9.8CVSS7.2AI score0.01018EPSS
Exploits0References3
Cvelist
Cvelist
added 2018/02/15 9:0 p.m.36 views

CVE-2011-4973

Authentication bypass vulnerability in modnss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password...

9.5AI score0.01018EPSS
Exploits0References2
CVE
CVE
added 2017/06/13 6:0 a.m.61 views

CVE-2017-4973

Cloud Foundry UAA Privilege Escalation (CVE-2017-4973) affects cf-release prior to v257 and UAA releases before the specified upgrades (2.x before v2.7.4.14, 3.6.x before v3.6.8, 3.9.x before v3.9.10, and other versions before v3.15.0), as well as UAA bosh releases (13.x before v13.12, 24.x befor...

8.8CVSS8.4AI score0.01068EPSS
Exploits0References1Affected Software3
OSV
OSV
added 2017/06/07 8:29 p.m.9 views

CVE-2016-4973

Binaries compiled against targets that use the libssp library in GCC for stack smashing protection SSP might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature...

7.8CVSS7AI score
Exploits0References5
OSV
OSV
added 2017/06/07 8:29 p.m.5 views

UBUNTU-CVE-2016-4973

Binaries compiled against targets that use the libssp library in GCC for stack smashing protection SSP might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature...

7.8CVSS7.3AI score0.00428EPSS
Exploits0References2
CVE
CVE
added 2017/06/07 8:0 p.m.41 views

CVE-2016-4973

CVE-2016-4973 concerns binaries built against targets using GCC’s libssp for stack smashing protection. The root cause is the lack of Object Size Checking in libssp, which may allow local users to trigger buffer overflows. Documented impacts include partial confidentiality, integrity, and availab...

7.8CVSS7.7AI score0.00428EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2015/10/05 10:0 a.m.48 views

CVE-2015-4973

Summary: CVE-2015-4973 is an XSS vulnerability affecting IBM’s Multi-Enterprise Integration Gateway (1.x up to 1.0.0.1) and B2B Advanced Communications (1.0.0.2/1.0.0.3) that allows remote attackers to insert arbitrary script/HTML via a crafted URL. Affected components: IBM Multi-Enterprise Integ...

4.3CVSS5.7AI score0.0095EPSS
Exploits0References2Affected Software1
canvas
canvas
added 2014/09/23 3:55 p.m.50 views

Immunity Canvas: ESET_EPFWNDIS

Name| ESETEpFwNDIS ---|--- CVE| CVE-2014-4973 Exploit Pack| CANVAS Description| EpFwNDIS.sys Trusted Value Vulnerability Notes| Repeatability: Infinite Notes: This module exploits a vulnerability on the ESET Personal Firewall NDIS filter EpFwNdis.sys driver. The Firewall Module Build 1183 2014021...

6.9CVSS0.7AI score0.01309EPSS
Exploits2
CVE
CVE
added 2014/09/23 3:0 p.m.54 views

CVE-2014-4973

The CVE-2014-4973 issue affects the EpFwNdis.sys driver (ESET Personal Firewall NDIS filter) in ESET Smart Security/Endpoint Security 5.0–7.0 (Firewall Module Build 1183, 20140214) and earlier. The vulnerability is a trusted-value condition exploitable via IOCTL 0x830020CC with a crafted input bu...

6.9CVSS6.6AI score0.01309EPSS
Exploits2References2Affected Software1
Exploit DB
Exploit DB
added 2014/02/28 12:0 a.m.18 views

Gold MP4 Player 3.3 - Local Buffer Overflow (SEH)

!/usr/bin/python coding: utf-8 Exploit Title: GoldMP4Player Buffer Overflow SEH Software Link: http://download.cnet.com/GoldMP4Player/3000-21394-10967424.html Version: 3.3 Date: 27.02.2014 Tested on: Windows Win 7 En Howto / Notes: open the URL in filename via File - Open Flash URL\n";...

7.4AI score
Exploits0
Rows per page
Query Builder