Lucene search
K

27 matches found

OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-8455 Malicious code in @malware-test-airer-dojos-rabat-mased/test-mlw3-airer-dojos-rabat-mased (npm)

The package @malware-test-airer-dojos-rabat-mased/test-mlw3-airer-dojos-rabat-mased was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:47 a.m.4 views

CVE-2019-8455

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file...

7.1CVSS6.7AI score0.0008EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/24 12:0 a.m.15 views

RHEL 8 : edk2 (RHSA-2024:8455)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8455 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU a...

8.8CVSS7.7AI score0.00431EPSS
Exploits1References4
NVD
NVD
added 2024/09/30 8:15 a.m.18 views

CVE-2024-8455

The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with this service are encoded user passwords. Due to insufficient strength, unauthorized remote attackers who intercept the packets ca...

8.1CVSS0.00211EPSS
Exploits0References2
OSV
OSV
added 2024/06/06 12:29 p.m.7 views

CGA-R29X-H39P-8455

Bulletin has no description...

5.9CVSS6.7AI score0.54214EPSS
Exploits3
NVD
NVD
added 2019/04/17 3:29 p.m.9 views

CVE-2019-8455

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file...

7.1CVSS6.8AI score0.0008EPSS
Exploits0References2
CVE
CVE
added 2019/04/17 2:5 p.m.42 views

CVE-2019-8455

The CVE-2019-8455 entry concerns Check Point ZoneAlarm (up to version 15.4.062). A hard-link created from the log file to any system file can cause the linked file’s permissions to be changed to grant access to all users, enabling a local attacker to gain higher privileges on targeted files. Conn...

7.1CVSS6.7AI score0.0008EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2018/09/13 12:29 a.m.1 views

CVE-2018-8455

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...

7.8CVSS5.8AI score0.00926EPSS
Exploits0References3
CVE
CVE
added 2018/09/13 12:0 a.m.124 views

CVE-2018-8455

Technical details about CVE-2018-8455 are not publicly provided in the supplied documents; monitor for updates on affected products, root cause, and remediation.

7.8CVSS7.5AI score0.00926EPSS
Exploits0References3Affected Software5
Symantec
Symantec
added 2018/09/11 12:0 a.m.41 views

Microsoft Windows Kernel CVE-2018-8455 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...

2.9AI score0.00926EPSS
Exploits0Affected Software3
CVE
CVE
added 2017/05/03 5:13 a.m.48 views

CVE-2017-8455

Foxit Reader and Foxit PhantomPDF (prior to 8.2.1) are affected by an out-of-bounds read triggered by a crafted font in a PDF, potentially revealing sensitive data or allowing arbitrary code execution. Impact is remote code execution or information disclosure in the context of the vulnerable proc...

7.8CVSS8.4AI score0.00377EPSS
Exploits0References3Affected Software2
OpenVAS
OpenVAS
added 2017/04/05 12:0 a.m.22 views

Foxit PhantomPDF Multiple Vulnerabilities (May 2017) - Windows

Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:phantompdf";...

8.8CVSS6.7AI score0.00892EPSS
Exploits0References9
NVD
NVD
added 2017/01/12 8:59 p.m.13 views

CVE-2016-8455

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

9.3CVSS6.4AI score0.00174EPSS
Exploits0References2
CVE
CVE
added 2017/01/12 8:0 p.m.47 views

CVE-2016-8455

CVE-2016-8455 describes an elevation of privilege in the Broadcom Wi‑Fi driver affecting Android devices using kernel 3.10 (notably Nexus 6P). A local malicious application could execute arbitrary code in the kernel after compromising a privileged process. The connected documents confirm the issu...

9.3CVSS6.9AI score0.00174EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/01/04 12:0 a.m.34 views

openSUSE Security Update : flash-player (openSUSE-2015-882)

This update for flash-player to version 11.2.202.554 fixes the following security issues in Adobe security advisory APSB15-32. - These updates resolve heap buffer overflow vulnerabilities that could lead to code execution CVE-2015-8438, CVE-2015-8446. - These updates resolve memory corruption...

10CVSS8.8AI score0.77915EPSS
Exploits18References79
OpenVAS
OpenVAS
added 2015/12/11 12:0 a.m.22 views

SUSE: Security Advisory for flash-player (SUSE-SU-2015:2247-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8AI score0.77915EPSS
Exploits11References2
UbuntuCve
UbuntuCve
added 2015/12/10 6:0 a.m.12 views

CVE-2015-8455

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial o...

10CVSS7.5AI score0.11151EPSS
Exploits0References2
Prion
Prion
added 2015/12/10 5:59 a.m.19 views

Memory corruption

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial o...

10CVSS8.9AI score0.13403EPSS
Exploits0References11Affected Software4
CVE
CVE
added 2015/12/10 2:0 a.m.72 views

CVE-2015-8455

The CVE-2015-8455 entry concerns Adobe Flash Player versions prior to 18.0.0.268 and 19.x and prior to 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204, the Adobe AIR SDK before 20.0.0.204, and the Adobe AIR SDK & Compiler before 20.0.0.204. The vul...

10CVSS9.1AI score0.11151EPSS
Exploits0References10Affected Software1
RedHat Linux
RedHat Linux
added 2015/12/09 1:36 p.m.41 views

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

10CVSS7.2AI score0.77915EPSS
Exploits21References3
Rows per page
Query Builder