40 matches found
CVE-2018-8823
modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter...
CVE-2018-8823
modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter...
CVE-2018-8823
The CVE-2018-8823 entry corresponds to the PrestaShop Responsive Mega Menu Pro module (version 1.0.32) affecting PrestaShop 1.5.5.0–1.7.2.5. The vulnerability allows remote attackers to execute arbitrary PHP code through the code parameter in modules/bamegamenu/ajax_phpcode.php, enabling remote c...
Fedora 27 : tor (2017-bc2edc421d)
update to upstream release 0.3.1.9. Fixes various CVEs : - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a password - CVE-2017-8822: Relays can pick themselves in a...
Fedora Update for tor FEDORA-2017-bc2edc421d
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for tor FEDORA-2017-bce9e03721
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[ASA-201712-10] tor: multiple issues
Arch Linux Security Advisory ASA-201712-10 ========================================== Severity: High Date : 2017-12-16 CVE-ID : CVE-2017-8819 CVE-2017-8820 CVE-2017-8822 CVE-2017-8823 Package : tor Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-539 Summary ======= T...
openSUSE Security Update : tor (openSUSE-2017-1336)
This update for tor fixes vulnerabilities that allowed some traffic confirmation, DoS and other attacks bsc1070849 : - CVE-2017-8819: Replay-cache ineffective for v2 onion services - CVE-2017-8820: Remote DoS attack against directory authorities - CVE-2017-8821: An attacker can make Tor ask for a...
Security fix for the ALT Linux 8 package tor version 0.3.1.9-alt1.M80P.1
0.3.1.9-alt1.M80P.1 built Dec. 6, 2017 Vladimir Didenko in task 195838 Dec. 1, 2017 Vladimir Didenko - new version Fixes: CVE-2017-8819, CVE-2017-8820, CVE-2017-8821, CVE-2017-8822, CVE-2017-8823...
Debian DSA-4054-1 : tor - security update
Multiple vulnerabilities have been found in Tor, a connection-based low-latency anonymous communication system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4054. The text itself is...
[SECURITY] [DSA 4054-1] tor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4054-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 03, 2017 https://www.debian.org/security/faq -...
CVE-2017-8823
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there is a use-after-free in onion service v2 during intro-point expiration because the expiring list is mismanaged in certain error cases, aka TROVE-2017-013...
CVE-2017-8823
CVE-2017-8823 (Tor) : A use-after-free in onion service v2 during intro-point expiration is caused by mismanagement of the expiring list in certain error cases (Tor before 0.3.1.9). Descriptions from Arch Linux ASA-201712-10 indicate this can lead to crashes of v2 onion services when circuits exp...
Nvidia Windows Kernel Mode Driver Denial Of Service(CVE-2016-8823)
Summary An local denial of service vulnerability exists in the communication functionality of Nvidia Windows Kernel Mode Driver. A specially crafted message can cause a vulnerability resulting in a machine crash BSOD. An attacker can send a specific message to trigger this vulnerability. Tested...
CVE-2016-8823
CVE-2016-8823 affects the NVIDIA Windows GPU Display Driver (kernel mode nvlddmkm.sys) and arises from the DxgDdiEscape handler, where the input buffer size is not validated. The issue enables local access to cause a denial of service or possible privilege escalation. Public details describe a lo...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-8823. Reason: This candidate is a reservation duplicate of CVE-2016-8823. Notes: All CVE users should reference CVE-2016-8823 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2016-8708
CVE-2016-8823 concerns the NVIDIA Windows GPU Display Driver in the kernel mode DxgDdiEscape handler, where the size of an input buffer is not validated. This can lead to a denial of service or possible escalation of privileges. Affected component is nvlddmkm.sys within the NVIDIA Windows GPU Dis...
CVE-2015-8823
Technical details about CVE-2015-8823 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2014-8823
CVE-2014-8823 affects Apple OS X (pre-10.10.2) where the IOUSBControllerUserClient::ReadRegister function in the IOUSBFamily driver allows a local attacker to read arbitrary kernel memory by supplying a crafted first argument and leveraging root access. The issue stems from inadequate validation ...
CVE-2009-2600
creationtimestamp| type| source ---|---|--- 2009-05-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34940 2009-05-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8823...