Lucene search
+L

71 matches found

NVD
NVD
added 2018/07/31 8:29 p.m.21 views

CVE-2018-14280

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.02773EPSS
SaveExploits0References2
CVE
CVE
added 2018/07/31 8:00 p.m.69 views

CVE-2018-14280

Foxit Reader vulnerability CVE-2018-14280 enables remote code execution via the exportAsFDF XFA function. The flaw arises from insufficient validation of user-supplied data, allowing arbitrary file writes to attacker-controlled locations when a user opens a malicious file or visits a malicious pa...

8.8CVSS8.8AI score0.02773EPSS
SaveExploits0References2Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/18 12:07 a.m.50 views

Security Bulletin: Mozilla firefox vulnerability issues on IBM Storwize V7000 Unified system (CVE-2013-5609, CVE-2013-5610, CVE-2013-5611, CVE-2013-5612, CVE-2013-5613, CVE-2013-5614, CVE-2013-5615, CVE-2013-5616, CVE-2013-5618, CVE-2013-5619, CVE-2013-6

Summary IBM Storwize V7000 Unified system is shipped with Mozilla firefox, for which fixes are available for security vulnerabilities. Vulnerability Details CVEID: CVE-2013-5609 CVE-2013-5610 CVE-2013-5611 CVE-2013-5612 CVE-2013-5613 CVE-2013-5614 CVE-2013-5615 CVE-2013-5616 CVE-2013-5618...

10CVSS0.3AI score0.11076EPSS
SaveExploits13Affected Software1
Circl
Circl
added 2018/05/29 3:50 p.m.11 views

CVE-2019-5619

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/aasynclistreply.rb 2025-10-23 21:12:58+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

9.8CVSS9.2AI score0.0472EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2018/02/01 12:00 a.m.48 views

Elastic Logstash 'CVE-2015-5619' Man in the Middle Security Bypass Vulnerability - Linux

Elastic Logstash is prone to a security bypass vulnerability. This VT has been deprecated and merged into the VT VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

5.9CVSS5.9AI score0.01219EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/02/01 12:00 a.m.42 views

Elastic Logstash 'CVE-2015-5619' Man in the Middle Security Bypass Vulnerability

Elastic Logstash is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:logstash";...

5.9CVSS6.2AI score0.01219EPSS
SaveExploits0References2
NVD
NVD
added 2017/08/09 4:29 p.m.31 views

CVE-2015-5619

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack...

5.9CVSS5.5AI score0.01219EPSS
SaveExploits0References5
CVE
CVE
added 2017/08/09 4:00 p.m.59 views

CVE-2015-5619

CVE-2015-5619 affects Logstash 1.4.x (<1.4.5) and 1.5.x (

5.9CVSS5.4AI score0.01219EPSS
SaveExploits0References5Affected Software2
NVD
NVD
added 2017/03/13 6:59 a.m.25 views

CVE-2017-5619

An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself e.g., from the DB instead of the valid password string...

9.8CVSS9.6AI score0.01545EPSS
SaveExploits0References2
CVE
CVE
added 2017/03/13 6:14 a.m.68 views

CVE-2017-5619

CVE-2017-5619 affects Zammad prior to 1.0.4, 1.1.x prior to 1.1.3, and 1.2.x prior to 1.2.1. The vulnerability allows an attacker to authenticate by using a hashed password retrieved from the database instead of a valid password string, effectively bypassing normal authentication. The available c...

9.8CVSS9.5AI score0.01545EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2016/10/25 2:31 p.m.19 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA, a different...

5.5CVSS6.2AI score0.0165EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2016/10/25 2:00 p.m.59 views

CVE-2016-5619

Technical details for CVE-2016-5619 are not publicly available in the provided documents. No affected products, impacts, or remediation specifics are disclosed here. Monitor sources for updates.

8.1CVSS4.8AI score0.0165EPSS
SaveExploits0References3Affected Software1
securityvulns
securityvulns
added 2015/08/23 12:00 a.m.57 views

Logstash vulnerability CVE-2015-5619

Summary: Logstash 1.5.3 and prior versions are vulnerable to a SSL/TLS security issue which allows an attacker to successfully implement a man in the middle attack. This vulnerability is not present in the initial installation of Logstash. This insecurity is exposed when users configure Lumberjac...

4.3CVSS1.9AI score0.01219EPSS
SaveExploits0
OSV
OSV
added 2014/09/29 10:55 p.m.14 views

CVE-2012-5619

The Sleuth Kit TSK 4.0.1 does not properly handle "." dotfile file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide activities it more difficult to conduct forensics activities, as demonstrated by Flame...

6.4AI score
SaveExploits0References7
CVE
CVE
added 2014/09/29 10:00 p.m.62 views

CVE-2012-5619

Summary (CVE-2012-5619) The Sleuth Kit (TSK) 4.0.1 fails to properly handle "." (dotfile) entries on FAT and other non-reserved-name filesystems, enabling local attackers to obscure forensic activity (e.g., Flame’s demonstration). Connected documents corroborate this dotfile handling issue and it...

2.1CVSS5.1AI score0.00353EPSS
SaveExploits0References7Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.94 views

RoundCube Webmail <= 0.2-3 beta Code Execution Vulnerability

No description provided by source. Public Release Date of POC: 2008-12-22 Author: Jacobo Avariento Gimeno Sofistic CVE id: CVE-2008-5619 Bugtraq id: 32799 Severity: Critical Vulnerability reported by: RealMurphy Intro ---- Roundcube Webmail is a browser-based IMAP client that uses chuggnutt.com...

10CVSS0.3AI score0.58637EPSS
SaveExploits15
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:00 a.m.38 views

openSUSE Security Update : seamonkey (openSUSE-SU-2014:0008-1)

This update fixes the following security issues with SeaMonkey : - update to SeaMonkey 2.23 bnc854370 - requires NSPR 4.10.2 and NSS 3.15.3.1 - MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 Miscellaneous memory safety hazards - MFSA 2013-105/CVE-2013-5611 bmo771294 Application Installation doorhanger...

10CVSS7.8AI score0.11076EPSS
SaveExploits13References17
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:00 a.m.41 views

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2013:1918-1)

update to Firefox 26.0 bnc854367, bnc854370 - rebased patches - requires NSPR 4.10.2 and NSS 3.15.3.1 - MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 Miscellaneous memory safety hazards - MFSA 2013-105/CVE-2013-5611 bmo771294 Application Installation doorhanger persists on navigation - MFSA...

10CVSS7.8AI score0.11076EPSS
SaveExploits13References18
Tenable Nessus
Tenable Nessus
added 2014/06/13 12:00 a.m.36 views

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2013:1917-1)

update to Firefox 26.0 bnc854367, bnc854370 - rebased patches - requires NSPR 4.10.2 and NSS 3.15.3.1 - MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 Miscellaneous memory safety hazards - MFSA 2013-105/CVE-2013-5611 bmo771294 Application Installation doorhanger persists on navigation - MFSA...

10CVSS7.8AI score0.11076EPSS
SaveExploits13References18
Tenable Nessus
Tenable Nessus
added 2013/12/20 12:00 a.m.30 views

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 8657)

Mozilla Firefox has been updated to the 24.2.0 ESR security release. This is a major upgrade from the 17 ESR release branch. Security issues fixed : - Application Installation doorhanger persists on navigation. MFSA 2013-105. CVE-2013-5611 - Miscellaneous memory safety hazards rv:24.2. MFSA...

10CVSS7.4AI score0.11076EPSS
SaveExploits13References37
Rows per page
Query Builder