Lucene search
+L

32 matches found

Exploit DB
Exploit DB
added 2018/04/24 12:00 a.m.52 views

RGui 3.4.4 - Local Buffer Overflow

!/usr/bin/python Exploit Author: bzyo CVE: CVE-2018-9060 Twitter: @bzyo Exploit Title: R 3.4.4 - Local Buffer Overflow Date: 03-27-2018 Vulnerable Software: R 3.4.4 Vendor Homepage: https://www.r-project.org/ Version: 3.4.4 Software Link: https://cloud.r-project.org/bin/windows/ Tested On: Window...

5.2AI score
SaveExploits4
exploitpack
exploitpack
added 2018/04/24 12:00 a.m.46 views

RGui 3.4.4 - Local Buffer Overflow

RGui 3.4.4 - Local Buffer Overflow !/usr/bin/python Exploit Author: bzyo CVE: CVE-2018-9060 Twitter: @bzyo Exploit Title: R 3.4.4 - Local Buffer Overflow Date: 03-27-2018 Vulnerable Software: R 3.4.4 Vendor Homepage: https://www.r-project.org/ Version: 3.4.4 Software Link:...

0.3AI score
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2017/09/14 12:00 a.m.47 views

Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-3414-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3414-1 advisory. Leo Gaspard discovered that QEMU incorrectly handled VirtFS access control. A guest attacker could use this issue to elevate privileges insid...

9.8CVSS6.8AI score0.04093EPSS
SaveExploits0References17
CVE
CVE
added 2017/08/18 6:00 p.m.45 views

CVE-2015-9060

CVE-2015-9060 affects Qualcomm products with CAF Android builds using the Linux kernel. The issue is a pointer validation flaw in a QTEE system call, as described in the CVE description. The connected documents confirm the root cause (improper pointer validation) and the affected context (Qualcom...

10CVSS7.8AI score0.0077EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2017/08/18 6:00 p.m.31 views

CVE-2015-9060

In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call...

8.4AI score0.0077EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2017/07/27 12:00 a.m.255 views

Fedora 25 : 2:qemu (2017-f941184db1)

CVE-2017-7718: cirrus: OOB read access issue bz 1443443 - CVE-2016-9603: cirrus: heap buffer overflow via vnc connection bz 1432040 - CVE-2017-7377: 9pfs: fix file descriptor leak bz 1437872 - CVE-2017-7980: cirrus: OOB r/w access issues in bitblt bz 1444372 - CVE-2017-8112: vmwpvscsi: infinite...

9.9CVSS7.3AI score0.04544EPSS
SaveExploits0References14
NVD
NVD
added 2017/06/01 4:29 p.m.33 views

CVE-2017-9060

Memory leak in the virtiogpusetscanout function in hw/display/virtio-gpu.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service memory consumption via a large number of "VIRTIOGPUCMDSETSCANOUT:" commands...

5.5CVSS5.2AI score0.00411EPSS
SaveExploits0References5
CVE
CVE
added 2017/06/01 4:00 p.m.94 views

CVE-2017-9060

CVE-2017-9060 affects QEMU's Virtio GPU device. The issue is a memory leak in virtio_gpu_set_scanout in hw/display/virtio-gpu.c triggered by a high volume of VIRTIO_GPU_CMD_SET_SCANOUT commands, leading to guest memory exhaustion and denial of service. Connected documents explicitly reference the...

5.5CVSS5.5AI score0.00411EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2017/05/11 2:01 p.m.30 views

CVE-2016-9060

CVE-2016-9060 entry is rejected/not used and does not represent an active vulnerability.

6.9AI score
SaveExploits0
Cvelist
Cvelist
added 2017/05/11 2:01 p.m.13 views

CVE-2016-9060

...

SaveExploits0
CVE
CVE
added 2014/11/24 11:00 a.m.68 views

CVE-2014-9060

The CVE-2014-9060 issue affects Moodle’s LTI module (versions prior to 2.5.9, 2.6.x prior to 2.6.6, and 2.7.x prior to 2.7.3; also 2.4.11) where the return URL parameters are not properly restricted. This allows remote attackers to trigger generation of arbitrary messages by modifying the return ...

5CVSS6.8AI score0.02118EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/04/08 12:00 a.m.31 views

SuSE 11.3 Security Update : wireshark (SAT Patch Number 9060)

Wireshark was updated to version 1.8.13 to fix security and stability issues. The following security vulnerabilities have been fixed : - The NFS dissector could crash. CVE-2014-2281 - The RLC dissector could crash. CVE-2014-2283 - The MPEG file parser could overflow a buffer. For more information...

9.3CVSS7.3AI score0.47422EPSS
SaveExploits11References9
Rows per page
Query Builder