Lucene search
+L

78 matches found

CVE
CVE
added 2020/09/09 12:43 p.m.53 views

CVE-2020-6337

CVE-2020-6337 affects SAP 3D Visual Enterprise Viewer (version 9). The issue is described as an HDR file parsing/input handling flaw caused by improper input validation, leading to a crash and temporary unavailability, with some sources noting potential memory corruption and remote code execution...

4.3CVSS4.5AI score0.01623EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2019/11/07 3:15 p.m.22 views

CVE-2019-6337

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...

5.2CVSS5.2AI score0.004EPSS
Exploits0References1
CVE
CVE
added 2019/11/07 2:37 p.m.86 views

CVE-2019-6337

CVE-2019-6337 affects HP Inkjet printers via a maliciously crafted print file that can cause the device to assert and emit a core dump to a local device. Public details in HP’s advisory HPSBPI03630 (HP Inkjet Printers - Buffer Overflow and Local Disclosure of Information) confirm a Buffer Overflo...

5.2CVSS6.9AI score0.004EPSS
Exploits0References1Affected Software1
Veracode
Veracode
added 2019/05/16 1:23 a.m.38 views

Denial Of Service (DoS)

Wireshark is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the...

9.3CVSS6.4AI score0.47422EPSS
Exploits13References9Affected Software1
Veracode
Veracode
added 2019/05/02 5:2 a.m.31 views

Denial Of Service (DoS)

Wireshark is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the...

9.3CVSS6.4AI score0.47422EPSS
Exploits13References27Affected Software1
UbuntuCve
UbuntuCve
added 2018/12/31 10:29 p.m.38 views

CVE-2018-6337

folly::secureRandom will re-use a buffer between parent and child processes when fork is called. That will result in multiple forked children producing repeat or similar results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00...

7.5CVSS7.3AI score0.01778EPSS
Exploits0References3
OSV
OSV
added 2018/12/31 10:29 p.m.24 views

CVE-2018-6337

folly::secureRandom will re-use a buffer between parent and child processes when fork is called. That will result in multiple forked children producing repeat or similar results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00...

7.5CVSS7AI score
Exploits0References3
CVE
CVE
added 2018/12/31 10:0 p.m.62 views

CVE-2018-6337

The CVE-2018-6337 issue affects HHVM and the folly library, caused by folly::secureRandom re-using a buffer between parent and child processes after fork(). This can lead to repeated or correlated random outcomes across multiple forked children. Affected products/versions: HHVM prior to 3.26.3; f...

7.5CVSS7.5AI score0.01778EPSS
Exploits0References3Affected Software2
Vulnrichment
Vulnrichment
added 2018/12/31 10:0 p.m.9 views

CVE-2018-6337

folly::secureRandom will re-use a buffer between parent and child processes when fork is called. That will result in multiple forked children producing repeat or similar results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00...

7.6AI score0.01778EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2017/04/21 12:0 a.m.26 views

MediaWiki Multiple Vulnerabilities (Aug 2016) - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; if...

7.5CVSS7AI score0.02133EPSS
Exploits0References1
OSV
OSV
added 2017/04/20 5:59 p.m.17 views

CVE-2016-6337

MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights...

7.5CVSS6.9AI score
Exploits0References2
CVE
CVE
added 2017/04/20 5:0 p.m.58 views

CVE-2016-6337

MediaWiki 1.27.x prior to 1.27.1 is vulnerable to a remote access bypass: a attacker could exploit a path via UserGetRights after Session::getAllowedUserRights to bypass session restrictions. The issue affects the specified MediaWiki 1.27.x range and enables partial authentication to bypass acces...

7.5CVSS7.4AI score0.01231EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/04/20 5:0 p.m.19 views

CVE-2016-6337

MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights...

7.5AI score0.01231EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2017/04/20 5:0 p.m.27 views

CVE-2016-6337

MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights...

7.5CVSS7.5AI score0.01231EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/08/29 12:0 a.m.61 views

MediaWiki 1.23.x < 1.23.15 / 1.26.x < 1.26.4 / 1.27.x < 1.27.1 Multiple Vulnerabilities

According to its version number, the MediaWiki application running on the remote web server is 1.23.x prior to 1.23.15, 1.26.x prior to 1.26.4, or 1.27.x prior to 1.27.1. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists in the...

7.5CVSS7.3AI score0.02133EPSS
Exploits0References11
NVD
NVD
added 2016/01/26 5:59 a.m.14 views

CVE-2015-6337

Cross-site scripting XSS vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.0.10 allows remote attackers to inject arbitrary web script or HTML via a crafted hostname in an SNMP response, aka Bug ID CSCuw47238...

6.1CVSS6AI score0.01009EPSS
Exploits0References2
CVE
CVE
added 2016/01/26 2:0 a.m.51 views

CVE-2015-6337

CVE-2015-6337 describes a cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10. A crafted hostname in an SNMP response can let a remote attacker inject arbitrary web script/HTML, potentially hijacking browser sessions or...

6.1CVSS5.9AI score0.01009EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2015/09/29 12:0 a.m.30 views

Gentoo Security Advisory GLSA 201312-13

Gentoo Linux Local Security Checks GLSA 201312-13 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

5CVSS6.2AI score0.0284EPSS
Exploits3References1
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.27 views

Amazon Linux: Security Advisory (ALAS-2014-330)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.1AI score0.47422EPSS
Exploits13References2
OpenVAS
OpenVAS
added 2014/11/12 12:0 a.m.54 views

Microsoft Internet Explorer Multiple Vulnerabilities (3003057)

This host is missing a critical security update according to Microsoft Bulletin MS14-065. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS5AI score0.30213EPSS
Exploits0References19
Rows per page
Query Builder