Lucene search
+L

51 matches found

OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•28 views

SUSE: Security Advisory (SUSE-SU-2018:0811-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.2AI score0.02744EPSS
SaveExploits3References5
Cvelist
Cvelist
•added 2020/10/15 9:50 a.m.•35 views

CVE-2020-7327 McAfee MVEDR - Improperly implemented security check

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client MVEDR prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing...

6CVSS6.7AI score0.00289EPSS
SaveExploits0References1
CVE
CVE
•added 2020/10/15 9:50 a.m.•71 views

CVE-2020-7327

The CVE-2020-7327 entry affects McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to version 3.2.0. The root cause is an improperly implemented security check that can let local administrators run malicious code by stopping a core Windows service, which leaves the McAfee core tr...

6.7CVSS6.3AI score0.00289EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2019/02/04 7:29 p.m.•32 views

CVE-2019-7327

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php because proper filtration is omitted...

6.1CVSS5.9AI score
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2019/02/04 7:00 p.m.•73 views

CVE-2019-7327

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php because proper filtration is omitted...

6.1CVSS6.1AI score0.009EPSS
SaveExploits1
CVE
CVE
•added 2019/02/04 7:00 p.m.•116 views

CVE-2019-7327

CVE-2019-7327 affects ZoneMinder up to version 1.32.3. The issue is a reflected Cross‑Site Scripting (XSS) vulnerability triggered by the vulnerable scale parameter in the frame view (frame.php), due to improper filtration. The documented impact is that an attacker can execute arbitrary HTML or J...

6.1CVSS5.9AI score0.009EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
•added 2019/02/04 7:00 p.m.•61 views

CVE-2019-7327

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php because proper filtration is omitted...

6.1CVSS2.2AI score0.009EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2018/04/04 12:00 a.m.•46 views

SUSE SLES11 Security Update : wireshark (SUSE-SU-2018:0867-1)

This update for wireshark fixes the following issues: Security issue fixed bsc1082692 : - CVE-2018-7335: The IEEE 802.11 dissector could crash wnpa-sec-2018-05 - CVE-2018-7321: thrift long dissector loop dissectthriftmap - CVE-2018-7322: DICOM: inifinite loop dissectdcmtag - CVE-2018-7323: WCCP:...

7.5CVSS6.5AI score0.02744EPSS
SaveExploits3References51
Tenable Nessus
Tenable Nessus
•added 2018/03/27 12:00 a.m.•44 views

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0811-1)

This update for wireshark fixes the following issues: Security issue fixed bsc1082692 : - CVE-2018-7335: The IEEE 802.11 dissector could crash wnpa-sec-2018-05 - CVE-2018-7321: thrift long dissector loop dissectthriftmap - CVE-2018-7322: DICOM: inifinite loop dissectdcmtag - CVE-2018-7323: WCCP:...

7.5CVSS6.5AI score0.02744EPSS
SaveExploits3References51
ALT Linux
ALT Linux
•added 2018/02/26 12:00 a.m.•188 views

Security fix for the ALT Linux 9 package wireshark version 2.4.5-alt1

Feb. 26, 2018 Anton Farygin 2.4.5-alt1 - 2.4.5 - fixes: wnpa-sec-2018-05 The IEEE 802.11 dissector could crash. CVE-2018-7335 wnpa-sec-2018-06 Multiple dissectors could go into large infinite loops. All ASN.1 BER dissectors, along with the DICOM, DMP, LLTD, OpenFlow, RELOAD, RPCoRDMA, RPKI-Router...

5CVSS7.1AI score0.02744EPSS
SaveExploits2
OpenVAS
OpenVAS
•added 2018/02/26 12:00 a.m.•93 views

Wireshark Security Updates (wnpa-sec-2018-05 to wnpa-sec-2018-14) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

7.5CVSS8.6AI score0.02744EPSS
SaveExploits3References10
CVE
CVE
•added 2018/02/23 10:00 p.m.•125 views

CVE-2018-7327

CVE-2018-7327 affects Wireshark versions 2.4.0–2.4.4 and 2.2.0–2.2.12 in epan/dissectors/packet-openflow_v6.c, where an infinite loop could be triggered by crafted packets. The issue was mitigated by validating property lengths. Remediation: upgrade to a fixed version (e.g., Wireshark 2.4.5 or la...

7.5CVSS7.2AI score0.02174EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
•added 2018/02/23 10:00 p.m.•41 views

CVE-2018-7327

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflowv6.c had an infinite loop that was addressed by validating property lengths...

7.5CVSS1.8AI score0.02174EPSS
SaveExploits1
Kaspersky
Kaspersky
•added 2018/02/23 12:00 a.m.•211 views

KLA11201 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An improper operand validation offsets in the SIGCOMP protocol dissector can be exploited remotely via...

7.5CVSS8.5AI score0.02744EPSS
SaveExploits2References12
attackerkb
attackerkb
•added 2017/05/11 2:30 p.m.•7 views

CVE-2016-7327

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

5.8AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2015/09/29 12:00 a.m.•151 views

Gentoo Security Advisory GLSA 201408-11

Gentoo Linux Local Security Checks GLSA 201408-11 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

7.5CVSS6.9AI score0.35635EPSS
SaveExploits16References1
UbuntuCve
UbuntuCve
•added 2015/09/24 4:59 a.m.•28 views

CVE-2015-7327

Mozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time API times, which allows remote attackers to track last-level cache access, and consequently obtain sensitive information, via crafted JavaScript code that makes performance.now calls...

4.3CVSS7.3AI score0.01771EPSS
SaveExploits1References5
CVE
CVE
•added 2015/09/24 1:00 a.m.•81 views

CVE-2015-7327

Technical details about CVE-2015-7327 are not publicly available in the provided connected documents. The initial description provides context but lacks specific vendor/product/version/root cause/impact. Monitor for updates and forthcoming advisories.

4.3CVSS6.7AI score0.01771EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2014/10/19 10:00 a.m.•55 views

CVE-2014-7327

CVE-2014-7327 affects the Macau Business Android app (3.0). The vulnerable component is the SSL certificate validation: it does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. The NVD entry li...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2014/10/17 12:00 a.m.•138 views

PHP 5.6.0 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is a development version of 5.6.0. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not attempted to exploit this issue but has instead relied only on application's self-reported version number...

7.5CVSS7AI score0.30128EPSS
SaveExploits16References29
Rows per page
Query Builder