Lucene search
+L

30 matches found

CVE
CVE
added 2019/05/21 11:17 p.m.161 views

CVE-2019-9892

CVE-2019-9892 affects Open Ticket Request System (OTRS) versions 5.x (up to 5.0.34), 6.x (up to 6.0.17), and 7.x (up to 7.0.6). An agent with appropriate permissions can import a specially crafted Report Statistics XML, triggering an XML External Entity (XXE) processing flaw that may cause the sy...

6.5CVSS6.5AI score0.01097EPSS
SaveExploits0References5Affected Software1
Debian
Debian
added 2019/05/03 11:42 a.m.72 views

[SECURITY] [DLA 1774-1] otrs2 security update

Package : otrs2 Version : 3.3.18-1+deb8u9 CVE ID : CVE-2019-9892 A flaw was discovered in OTRS, the Open Ticket Request System. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading o...

6.5CVSS6.7AI score0.01097EPSS
SaveExploits0
CVE
CVE
added 2017/07/05 7:0 p.m.60 views

CVE-2017-9892

CVE-2017-9892 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file can cause a denial of service and, possibly, otherImpact, due to heap/memory handling issues as described in the vulnerability details (notably data from faulting address influencing heap/control flow). The is...

7.8CVSS8AI score0.00944EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2017/07/05 7:0 p.m.28 views

CVE-2017-9892

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...

8.3AI score0.00944EPSS
SaveExploits0References2
CVE
CVE
added 2017/03/02 11:0 p.m.83 views

CVE-2016-9892

CVE-2016-9892 affects the esets_daemon service in ESET Endpoint Antivirus for macOS prior to 6.4.168.0 and Endpoint Security for macOS prior to 6.4.168.0. Root cause is improper verification of X.509 certificates from the edf.eset.com SSL server, enabling MITM attackers to spoof the server and pr...

5.9CVSS7.9AI score0.0166EPSS
SaveExploits4References4Affected Software2
Circl
Circl
added 2017/02/28 12:16 p.m.8 views

CVE-2016-9892

creationtimestamp| type| source ---|---|--- 2017-02-28 12:16:51+00:00| published-proof-of-concept| https://t.me/canyoupwnme/854 2017-02-28 12:50:02+00:00| published-proof-of-concept| https://t.me/HackerOne/556 2017-03-01 13:55:00+00:00| seen| https://t.me/webamoozir/1338 2026-07-26 07:02:09+00:00...

5.9CVSS6.4AI score0.0166EPSS
SaveExploits4References4
The Hacker News
The Hacker News
added 2017/02/28 3:6 a.m.78 views

Critical Flaw in ESET Antivirus Exposes Mac Users to Remote Hacking

What could be more exciting for hackers than exploiting a vulnerability in a widely used software without having to struggle too much? One such easy-to-exploit, but critical vulnerability has been discovered in ESET's antivirus software that could allow any unauthenticated attackers to remotely...

7.5CVSS8.8AI score0.13802EPSS
SaveExploits4
zdt
zdt
added 2017/02/28 12:0 a.m.215 views

ESET Endpoint Antivirus 6 Remote Code Execution Exploit

Exploit for windows platform in category remote exploits CVE-2016-9892 - Remote Code Execution as Root via ESET Endpoint Antivirus 6 --------------------------------------------------------------------------- Summary ======= Name: Remote Code Execution as Root via ESET Endpoint Antivirus 6 CVE:...

7.5CVSS8.3AI score0.13802EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2017/02/27 12:0 a.m.194 views

ESET Endpoint Antivirus 6 Remote Code Execution

CVE-2016-9892 - Remote Code Execution as Root via ESET Endpoint Antivirus 6 --------------------------------------------------------------------------- Summary ======= Name: Remote Code Execution as Root via ESET Endpoint Antivirus 6 CVE: CVE-2016-9892 Discoverers: Jason Geffner and Jan Bee Vendo...

7.5CVSS0.4AI score0.13802EPSS
SaveExploits4
CVE
CVE
added 2016/08/06 10:0 a.m.93 views

CVE-2014-9892

The CVE-2014-9892 issue affects the Linux kernel (up to 4.7) in the snd_compr_tstamp path used by Android on Nexus 5/7 devices. Root cause: snd_compr_tstamp does not initialize a timestamp data structure, enabling a crafted app to obtain sensitive information. Impact: information disclosure possi...

5.5CVSS5.3AI score0.00499EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder