60 matches found
CVE-2019-6213
creationtimestamp| type| source ---|---|--- 2019-01-28 15:10:00+00:00| seen| MISP/5c4f1a2e-1300-4391-87cf-19c50a021402 2019-01-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46300...
CVE-2017-6213
paypal/invoice-sdk-php is affected by a reflected XSS vulnerability in samples/permissions.php through the permToken parameter, which can lead to code execution. The affected component is the PHP-based PayPal invoice SDK; the underlying issue is lack of input sanitization on permToken. Public det...
CVE-2018-14297
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-14297
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-14297
CVE-2018-14297 affects Foxit Reader (and Foxit PhantomPDF in some listings). The vulnerability is a use-after-free in the processing of FreeText annotations, where manipulating a document’s elements can cause a freed pointer to be reused, enabling remote code execution. Exploitation requires user...
CVE-2018-6213
Summary: CVE-2018-6213 affects D-Link DIR-620 devices with ISP-customized firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0 and 2.0.22. The issue is a hardcoded admin password set to “anonymous” in the web server, enabling privileged access without authentication. The connected documents corrobo...
CVE-2018-6213
In the web server on D-Link DIR-620 devices with a certain customized by ISP variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, there is a hardcoded password of anonymous for the admin account...
Backdoors in D-Link’s backyard
"If you want to change the world, start with yourself." In the case of security research this can be rephrased to: "If you want to make the world safer, start with the smart things in your home." Or, to be more specific, start with your router – the core of any home network as well as an...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0174) (BlueBorne) (Dirty COW) (Stack Clash)
The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0174 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...
kernel, perf, python security update
CentOS Errata and Security Advisory CESA-2017:1842 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Unbreakable Enterprise kernel security update
kernel-uek 4.1.12-103.3.8 - fs/exec.c: account for argv/envp pointers Kees Cook Orabug: 26638900 CVE-2017-1000365 CVE-2017-1000365 4.1.12-103.3.7 - i40e/i40evf: check for stopped admin queue Mitch Williams Orabug: 26654222 4.1.12-103.3.6 - xen: fix bio vec merging Roger Pau Monne Orabug: 26645497...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3605)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3605 advisory. - dentry name snapshots Al Viro Orabug: 26630936 CVE-2017-7533 - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings David...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0143)
The remote OracleVM system is missing necessary patches to address critical security updates : - dentry name snapshots Al Viro Orabug: 26630936 CVE-2017-7533 - scsi: libiscsi: use kvzalloc for iscsipoolinit Kyle Fortin - mm: introduce kvmzalloc helpers Kyle Fortin Orabug: 26621191 - KEYS: Disallo...
Oracle Linux 7 : kernel (ELSA-2017-1842-1) (Stack Clash)
The remote Oracle Linux host is missing a security update for the kernel packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2017-1842-1. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc';...
RHEL 7 : kernel (RHSA-2017:1842)
"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1842 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An use-after-free flaw was found in t...
CVE-2015-6213
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2012-6213
CVE-2012-6213 is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-6213
fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service memory consumption and deadlock via MSBIND mount system calls, as demonstrated by a loop that triggers exponential growth in the...