Lucene search
+L

60 matches found

OSV
OSV
added 2017/03/15 2:59 p.m.20 views

CVE-2017-6386

Memory leak in the vrendcreatevertexelementsstate function in vrendrenderer.c in virglrenderer allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRGLOBJECTVERTEXELEMENTS commands...

6.5CVSS6.3AI score
SaveExploits0References5
Cvelist
Cvelist
added 2017/03/15 2:00 p.m.31 views

CVE-2017-6386

Memory leak in the vrendcreatevertexelementsstate function in vrendrenderer.c in virglrenderer allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRGLOBJECTVERTEXELEMENTS commands...

6AI score0.00392EPSS
SaveExploits0References5
CVE
CVE
added 2017/03/15 2:00 p.m.59 views

CVE-2017-6386

CVE-2017-6386 affects virglrenderer: memory leak in vrend_create_vertex_elements_state (vrend_renderer.c) can cause host memory exhaustion via a high volume of VIRGL_OBJECT_VERTEX_ELEMENTS from a local guestOS user, leading to DoS. The provided documents do not specify a patch version or remediat...

6.5CVSS5.9AI score0.00392EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2016/10/05 5:00 p.m.54 views

CVE-2016-6386

Cisco IOS XE Software IP Fragment Reassembly Denial of Service vulnerability (CVE-2016-6386) affects Cisco IOS XE on 64-bit platforms, specifically versions 3.1–3.17 and 16.1. The issue stems from corruption in the IPv4 fragment reassembly data structure when handling fragmented packets, allowing...

7.8CVSS7.6AI score0.02868EPSS
SaveExploits0References3Affected Software6
CVE
CVE
added 2015/12/01 11:00 a.m.69 views

CVE-2015-6386

The Cisco Web Security Appliance (WSA) passthrough FTP feature is affected. A vulnerability in WSA software versions 8.0.7-142 and 8.5.1-021 can allow an unauthenticated, remote attacker to cause a denial of service via FTP sessions where the control connection is closed after data transfer (Bug ...

5CVSS6.9AI score0.01744EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2015/01/16 4:00 p.m.31 views

CVE-2014-6386

Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R9, 12.3R2 before 12.3R2-S3, 12.3 before 12.3R3, 13.1 before 13.1R4, and 13.2 before 13.2R1 allows remote attackers to cause a denial o...

6.5AI score0.02721EPSS
SaveExploits0References3
CVE
CVE
added 2015/01/16 4:00 p.m.56 views

CVE-2014-6386

CVE-2014-6386 affects Juniper Networks Junos OS. A crafted BGP FlowSpec prefix in affected releases can trigger an assertion failure and restart the routing process daemon (rpd), causing a remote denial of service. Affected releases include Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12...

7.8CVSS6.8AI score0.02721EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2014/02/05 12:00 a.m.24 views

Fedora Update for drupal6 FEDORA-2013-22352

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.4AI score0.03072EPSS
SaveExploits0References2
Debian
Debian
added 2013/12/28 10:23 a.m.81 views

[SECURITY] [DSA 2828-1] drupal6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2828-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 28, 2013 http://www.debian.org/security/faq -...

6.8CVSS7.3AI score0.03072EPSS
SaveExploits0
Debian
Debian
added 2013/12/28 10:23 a.m.76 views

[SECURITY] [DSA 2828-1] drupal6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2828-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 28, 2013 http://www.debian.org/security/faq -...

6.8CVSS0.2AI score0.03072EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2013/12/17 12:00 a.m.26 views

Fedora Update for drupal6 FEDORA-2013-22507

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.4AI score0.03072EPSS
SaveExploits0References2
CVE
CVE
added 2013/12/07 9:00 p.m.150 views

CVE-2013-6386

Drupal 6.x before 6.29 and 7.x before 7.24 uses PHP mt_rand with predictable seeds, allowing remote attackers to predict security strings and bypass restrictions via brute force. Impact includes potential unauthorized access or bypass of protections as described in multiple advisories. Mitigation...

6.8CVSS6.5AI score0.02084EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
added 2013/12/03 12:00 a.m.23 views

Fedora Update for drupal7 FEDORA-2013-21844

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.4AI score0.03072EPSS
SaveExploits0References2
Debian
Debian
added 2013/11/26 4:50 p.m.63 views

[SECURITY] [DSA 2804-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2804-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2013 http://www.debian.org/security/faq -...

6.8CVSS7.1AI score0.03072EPSS
SaveExploits0
CVE
CVE
added 2009/03/02 7:00 p.m.62 views

CVE-2008-6386

CVE-2008-6386 describes a Cross-site scripting (XSS) vulnerability in Z1Exchange 1.0, specifically in showads.php, where the id parameter can be leveraged to inject arbitrary web script or HTML. The NVD entry assigns a medium severity (CVSS v2 base score 4.3) with network attack vector, no confid...

4.3CVSS5.9AI score0.01458EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2009/03/02 7:00 p.m.30 views

CVE-2008-6386

Cross-site scripting XSS vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

5.7AI score0.01458EPSS
SaveExploits2References3
Circl
Circl
added 2008/12/02 12:00 a.m.8 views

CVE-2008-6386

creationtimestamp| type| source ---|---|--- 2008-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32634...

4.3CVSS5.8AI score0.01458EPSS
SaveExploits2References1
Circl
Circl
added 2008/09/05 12:00 a.m.8 views

CVE-2008-6997

creationtimestamp| type| source ---|---|--- 2008-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6386...

4.3CVSS5.8AI score0.03676EPSS
SaveExploits2References1
CVE
CVE
added 2007/12/15 2:00 a.m.57 views

CVE-2007-6386

CVE-2007-6386 : A stack-based buffer overflow in PccScan.dll (before build 1451) affects Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and Internet Security Pro 2008. The overflow occurs when processing a malformed ZIP archive with a long name (constructed via format string...

7.2CVSS7AI score0.01031EPSS
SaveExploits0References8Affected Software3
CVE
CVE
added 2006/12/08 1:00 a.m.48 views

CVE-2006-6386

CVE-2006-6386 is a Cross-site Scripting (XSS) vulnerability in Drupal’s CVS management/tracker components (4.7.x-1.0, 4.7.x-2.0, 4.7.0 before 20060807). The flaw allows remote attackers to inject arbitrary web script or HTML via the motivation field on the CVS application page, because the value ...

6.8CVSS6AI score0.01242EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder