Lucene search
+L

56 matches found

CVE
CVE
added 2020/07/30 12:53 p.m.48 views

CVE-2020-8192

CVE-2020-8192 affects Fastify versions 2.14.1 and 3.0.0-rc.4. The vulnerability is a denial-of-service via resource exhaustion when the AJV-based validation uses the allErrors option and receives specially crafted schemas. The impact described in multiple connected records is that a malicious use...

6.5CVSS6.2AI score0.01157EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2019/10/17 8:19 p.m.164 views

CVE-2019-8192

CVE-2019-8192 is an asserted use-after-free in Adobe Acrobat/Reader affecting multiple historic versions (up to 2019.012.20040, 2017.011.30148, and 2015.x) that could lead to arbitrary code execution. Connected documents corroborate a memory-management vulnerability with remote-exploitation poten...

8.8CVSS9.3AI score0.03637EPSS
Exploits0References1Affected Software2
OpenVAS
OpenVAS
added 2019/10/16 12:0 a.m.34 views

Adobe Acrobat 2017 Security Updates (APSB19-49) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

10CVSS8.3AI score0.22886EPSS
Exploits9References1
Tenable Nessus
Tenable Nessus
added 2019/10/16 12:0 a.m.31 views

Adobe Reader < 2015.006.30504 / 2017.011.30150 / 2019.021.20047 Multiple Vulnerabilities (APSB19-49) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30504, 2017.011.30150, or 2019.021.20047. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier,...

10CVSS7.6AI score0.22886EPSS
Exploits9References69
OSV
OSV
added 2018/10/17 4:19 p.m.8 views

GHSA-45XM-V8GQ-7JQX Excessive memory allocation

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit 8192 bytes above which the WebSocket gets an HTTP response with the...

6.5CVSS6.8AI score0.02652EPSS
Exploits0References19
RedhatCVE
RedhatCVE
added 2018/10/11 1:19 p.m.28 views

CVE-2018-12541

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit 8192 bytes above which the WebSocket gets an HTTP response with the...

6.5CVSS1.2AI score0.02652EPSS
Exploits0References2
NVD
NVD
added 2017/11/22 7:29 p.m.19 views

CVE-2017-8192

FusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation...

7.8CVSS7.6AI score0.00216EPSS
Exploits0References1
CVE
CVE
added 2017/11/22 7:0 p.m.51 views

CVE-2017-8192

CVE-2017-8192 affects Huawei FusionSphere OpenStack V100R006C00, with an improper authorization vulnerability where a low-privilege attacker can obtain operation authority for a specific directory, enabling privilege escalation. Root cause: improper authorization configuration. Impact: local priv...

7.8CVSS7.5AI score0.00216EPSS
Exploits0References1Affected Software1
Huawei
Huawei
added 2017/10/25 12:0 a.m.30 views

Security Advisory - Improper Authorization Vulnerability in Huawei FusionSphere OpenStack

There is an improper authorization vulnerability in Huawei FusionSphere OpenStack products. Due to improper authorization, an attacker with low privilege may exploit this vulnerability to obtain the operation authority of some specific directory, causing privilege escalation. Vulnerability ID:...

7.8CVSS7.5AI score0.00216EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.9 views

CVE-2015-8192

...

Exploits0
CVE
CVE
added 2017/05/11 2:1 p.m.26 views

CVE-2015-8192

CVE-2015-8192 entry is rejected/not used and does not represent an active vulnerability.

6.6AI score
Exploits0
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.8 views

CVE-2014-8192

...

Exploits0
seebug.org
seebug.org
added 2017/03/09 12:0 a.m.192 views

Linux kernel local privilege escalation flaw in n_hdlc(CVE-2017-2636)

This article discloses the exploitation of CVE-2017-2636, which is a race condition in the nhdlc Linux kernel driver drivers/tty/nhdlc.c. The described exploit gains root privileges bypassing Supervisor Mode Execution Protection SMEP. This driver provides HDLC serial line discipline and comes as ...

7.2CVSS7.6AI score0.03723EPSS
Exploits11
Zero Day Initiative
Zero Day Initiative
added 2015/07/30 12:0 a.m.32 views

IBM Tivoli Storage Manager FastBack Server Opcode 8192 Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 8192. By sending a crafted packet on TCP...

10CVSS7.4AI score0.08979EPSS
Exploits0References1
exploitpack
exploitpack
added 2011/06/11 12:0 a.m.20 views

Linux Kernel 2.6.283.0 (DEC Alpha Linux) - Local Privilege Escalation

Linux Kernel 2.6.283.0 DEC Alpha Linux - Local Privilege Escalation / DEC Alpha Linux include include include include include include include include include include define SYSosfwait4 7 define SOCKOFFSET 552 / Offset of skdestruct fptr in sock struct, change for your kernel / define PAGESIZE 819...

0.6AI score
Exploits0
securityvulns
securityvulns
added 2001/01/16 12:0 a.m.29 views

DoS против Veritas Backupexec на Linux

connect на TCP/8192 приводит к его преждевременной кончине...

1.5AI score
Exploits0References1
Rows per page
Query Builder