CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5597 matches found

GoogleProjectZero•added 2014/08/25 12:00 a.m.•60 views

The poisoned NUL byte, 2014 edition

Posted by Chris Evans, Exploit Writer Underling to Tavis Ormandy Back in this 1998 post to the Bugtraq mailing list, Olaf Kirch outlined an attack he called “The poisoned NUL byte”. It was an off-by-one error leading to writing a NUL byte outside the bounds of the current stack frame. On i386...

10CVSS9.2AI score0.84298EPSS

SaveExploits7

ThreatPost•added 2014/08/20 12:38 p.m.•20 views

Tor Browser Hardening Features Under Scrutiny

Tor is a target like never before. The NSA has made no bones about its disdain for the anonymity network, and someone, allegedly researchers from Carnegie Mellon University, were recently on the network trying to de-anonymize users of its hidden services. All of this has prompted the keepers of T...

0.6AI score

SaveExploits0References6

Packet Storm•added 2014/08/18 12:00 a.m.•79 views

Senkas Kolibri WebServer 2.0 Buffer Overflow

Exploit Details ------------------ Senkas Kolibri WebServer 2.0 available at http://www.senkas.com/kolibri/download.php is vulnerable to RCE via an overly long POST request. Sending the exploit will result in a SEH overwrite, which can then be use to redirect execution to a POP POP RET within the...

7.5CVSS0.8AI score0.14301EPSS

SaveExploits22

zdt•added 2014/08/18 12:00 a.m.•124 views

Senkas Kolibri WebServer 2.0 Buffer Overflow Exploit

Senkas Kolibri WebServer version 2.0 is vulnerable to remote code execution via an overly long POST request. Sending the exploit will result in a SEH overwrite, which can then be use to redirect execution to a POP POP RET within the application's binary itself, which once executed, will allow the...

7.5CVSS0.6AI score0.14301EPSS

SaveExploits22

RedHat Linux•added 2014/08/13 9:48 a.m.•16 views

flash-plugin: multiple code execution or security bypass flaws (APSB14-18)

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly...

10CVSS5.8AI score0.03978EPSS

SaveExploits0References5

RedHat Linux•added 2014/08/13 9:48 a.m.•14 views

flash-plugin: multiple code execution or security bypass flaws (APSB14-18)

10CVSS5.8AI score0.03978EPSS

SaveExploits0References5

OpenVAS•added 2014/08/13 12:00 a.m.•30 views

Microsoft Windows RPC Security Feature Bypass Vulnerability (2978668)

This host is missing an important security update according to Microsoft Bulletin MS14-047 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.5CVSS5AI score0.11461EPSS

SaveExploits0References3

OpenVAS•added 2014/08/13 12:00 a.m.•68 views

Microsoft .NET Framework Security Bypass Vulnerability (2984625)

This host is missing an important security update according to Microsoft Bulletin MS14-046. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4.3CVSS5AI score0.14261EPSS

SaveExploits0References3

NVD•added 2014/08/12 10:55 p.m.•21 views

CVE-2014-0540

10CVSS6.3AI score0.03978EPSS

SaveExploits0References5

NVD•added 2014/08/12 10:55 p.m.•20 views

CVE-2014-0542

10CVSS6.3AI score0.03978EPSS

SaveExploits0References5

NVD•added 2014/08/12 10:55 p.m.•21 views

CVE-2014-0544

10CVSS6.3AI score0.03978EPSS

SaveExploits0References5

NVD•added 2014/08/12 10:55 p.m.•24 views

CVE-2014-0545

10CVSS6.3AI score0.03978EPSS

SaveExploits0References5