Lucene search
+L

51 matches found

Debian CVE
Debian CVE
added 2020/02/11 2:42 p.m.33 views

CVE-2020-6416

Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.7AI score0.0199EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2020/02/10 12:16 p.m.27 views

CVE-2020-6416

Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS3AI score0.0199EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2020/02/04 12:0 a.m.112 views

Google Chrome < 80.0.3987.87 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.87. It is, therefore, affected by multiple vulnerabilities as referenced in the 202002stable-channel-update-for-desktop advisory. - Insufficient data validation in streams in Google Chrome prior to 80.0.3987.8...

8.8CVSS7.5AI score0.06997EPSS
SaveExploits19References74
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.47 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1524)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.3AI score0.06167EPSS
SaveExploits17References2
Tenable Nessus
Tenable Nessus
added 2019/05/14 12:0 a.m.38 views

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1524)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanoutadd from setsockopt...

9.3CVSS6.7AI score0.06167EPSS
SaveExploits17References21
Circl
Circl
added 2018/05/29 3:50 p.m.12 views

CVE-2017-6416

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smtp/sysgaugeclientbof.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:59+00:00| seen|...

9.8CVSS9.5AI score0.10857EPSS
SaveExploits2References1
CVE
CVE
added 2017/05/11 2:1 p.m.33 views

CVE-2012-6416

CVE-2012-6416 is rejected/not used; this entry does not represent an active vulnerability.

6.6AI score
SaveExploits0
Metasploit
Metasploit
added 2017/03/15 4:29 a.m.40 views

SysGauge SMTP Validation Buffer Overflow

This module will setup an SMTP server expecting a connection from SysGauge 1.5.18 via its SMTP server validation. The module sends a malicious response along in the 220 service ready response and exploits the client, resulting in an unprivileged shell. This module requires Metasploit:...

9.8CVSS1.1AI score0.10857EPSS
SaveExploits2
OSV
OSV
added 2017/03/06 2:59 a.m.3 views

CVE-2017-6416

An issue was discovered in SysGauge 1.5.18. A buffer overflow vulnerability in SMTP connection verification leads to arbitrary code execution. The attack vector is a crafted SMTP daemon that sends a long 220 aka "Service ready" string...

9.8CVSS6.2AI score0.10857EPSS
SaveExploits2References2
CVE
CVE
added 2017/03/06 2:0 a.m.57 views

CVE-2017-6416

SysGauge 1.5.18 is affected by a buffer overflow in SMTP connection verification, allowing arbitrary code execution via a crafted SMTP daemon that sends an overly long 220 (Service ready) response. The issue is documented in CVE-2017-6416 with references including an exploit module (SysGauge SMTP...

9.8CVSS9.6AI score0.10857EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2016/10/05 5:0 p.m.63 views

CVE-2016-6416

The CVE-2016-6416 issue affects Cisco AsyncOS on ESA, WSA, and SMA devices. The local FTP service could be flooded by remote attackers, causing DoS due to lack of throttling. Affected versions include ESA 9.6.0-000 through 9.9.6-026, WSA 9.0.0-162 through 9.5.0-444, and SMA in the same family. Ro...

5.9CVSS5.7AI score0.0202EPSS
SaveExploits0References5Affected Software3
CVE
CVE
added 2015/12/14 2:0 a.m.54 views

CVE-2015-6416

CVE-2015-6416 is a cross-site scripting (XSS) vulnerability in Cisco’s Unified Email Interaction Manager and Unified Web Interaction Manager version 11.0(1). The issue arises from insufficient sanitization of user-supplied input in the web interface, allowing an unauthenticated, remote attacker t...

4.3CVSS5.8AI score0.01786EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2015/12/14 2:0 a.m.20 views

CVE-2015-6416

Cross-site scripting XSS vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.01 allows remote attackers to inject arbitrary web script or HTML a crafted URL, aka Bug ID CSCuw24479...

5.7AI score0.01786EPSS
SaveExploits0References3
F5 Networks
F5 Networks
added 2014/10/23 12:0 a.m.45 views

SOL15742 - Linux kernel vulnerabilities CVE-2014-6416, CVE-2014-6417, and CVE-2014-6418

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

7.8CVSS2.7AI score0.06167EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2014/10/10 12:0 a.m.44 views

Ubuntu: Security Advisory (USN-2378-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.06167EPSS
SaveExploits8References2
OpenVAS
OpenVAS
added 2014/10/10 12:0 a.m.55 views

Ubuntu: Security Advisory (USN-2376-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.06167EPSS
SaveExploits4References2
OSV
OSV
added 2014/09/28 10:55 a.m.7 views

CVE-2014-6416

Buffer overflow in net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service memory corruption and panic or possibly have unspecified other impact via a long unencrypted auth ticket...

7.9AI score
SaveExploits0References15
OSV
OSV
added 2014/09/28 10:55 a.m.1 views

BELL-CVE-2014-6416 CVE-2014-6416 does not affect BellSoft software

Bulletin has no description...

7.8CVSS5.8AI score0.06167EPSS
SaveExploits1References1
CVE
CVE
added 2014/09/28 10:0 a.m.102 views

CVE-2014-6416

CVE-2014-6416 describes a buffer overflow in net/ceph/auth_x.c used by Ceph within the Linux kernel prior to 3.16.3. An unencrypted, long auth ticket can be exploited remotely to trigger memory corruption and a kernel panic (DoS). Connected advisories reiter the same root cause and impact. Remedi...

7.8CVSS8.1AI score0.06167EPSS
SaveExploits1References11Affected Software1
OpenVAS
OpenVAS
added 2014/05/26 12:0 a.m.52 views

Fedora Update for rubygem-actionpack FEDORA-2014-6098

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.53703EPSS
SaveExploits4References4
Rows per page
Query Builder