Lucene search
+L

4736 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/15 12:00 a.m.•12 views

CVE-2014-6482: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect integrity via unknown vectors related to Updates Change Assistant...

4CVSS6AI score0.01105EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2014/10/15 12:00 a.m.•6 views

PT-2014-7245

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PT PeopleTools versions 8.53 through 8.54 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Updates Change Assistant. Recommendatio...

4CVSS0.01105EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2014/10/14 10:18 a.m.•25 views

Important: Red Hat Bug Fix Advisory: redhat-upgrade-tool bug fix update

An updated redhat-upgrade-tool package that fixes several bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Upgrade Tool is used for performing an in-place upgrade of your current system to the next major version of Red Hat Enterprise Linux. It determines what packages are needed...

10CVSS7.2AI score0.01064EPSS
SaveExploits0References3
NVD
NVD
•added 2014/09/22 10:55 a.m.•27 views

CVE-2014-5998

The SkyDrive Assistant aka com.dhh.sky application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
Prion
Prion
•added 2014/09/22 10:55 a.m.•23 views

Information disclosure

The SkyDrive Assistant aka com.dhh.sky application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2014/09/22 10:00 a.m.•60 views

CVE-2014-5998

CVE-2014-5998 affects SkyDrive Assistant (com.dhh.sky) for Android, version 2.1 . The issue is not verifying X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. CVSSv2 base score is 5.4 (MEDIUM) . N...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/09/22 10:00 a.m.•44 views

CVE-2014-5998

The SkyDrive Assistant aka com.dhh.sky application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00271EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/22 12:00 a.m.•10 views

CVE-2014-5998: Undefined Security Weakness

The SkyDrive Assistant aka com.dhh.sky application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/09/22 12:00 a.m.•5 views

PT-2014-6983

Name of the Vulnerable Software and Affected Versions SkyDrive Assistant aka com.dhh.sky version 2.1 Description The issue concerns the failure of the application to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive informati...

5.4CVSS0.00271EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2014/09/09 12:00 a.m.•6 views

PT-2014-6791

Name of the Vulnerable Software and Affected Versions World of Tanks Assistant aka ru.worldoftanks.mobile version 1.7.5 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

5.4CVSS0.00271EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/09 12:00 a.m.•9 views

CVE-2014-5806: Undefined Security Weakness

The World of Tanks Assistant aka ru.worldoftanks.mobile application 1.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2014/08/04 12:00 a.m.•95 views

VMware vCenter Support Assistant Multiple Vulnerabilities (VMSA-2014-0006)

The version of VMware vCenter Support Assistant installed on the remote host is 5.5.1.x prior to 5.5.1.1. It is, therefore, affected by multiple vulnerabilities in the bundled OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other...

7.4CVSS7.2AI score0.99977EPSS
SaveExploits13References8
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•31 views

Site-Assistant <= 0990 - (paths[version]) Remote File Include Exploit

No description provided by source. html head meta http-equiv=Content-Type content=text/html; charset=windows-1254 titleSite-Assistant = v0990pathsversionRemote File Include Exploit/title script language=JavaScript...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•28 views

GPG4Win GNU - Privacy Assistant PoC

No description provided by source. GPG4Win - GNU Privacy Assistant - GPA.EXE - Crash PoC Found By: DrIDE Tested On: 7RC, XPSP3 Usage: Paste this into GPA Clipboard, Verify. ''' -----BEGIN PGP MESSAGE----- Charset: ISO-8859-1 Version: GnuPG v1.4.9 GNU/Linux Comment: If you Verify me in Clipboard...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•20 views

Office Assistant Pro 2.2.2 iOS - File Include Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•180 views

phpRaid < 3.0.7 (rss.php phpraid_dir) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl phpraid = 3.x.x rss.php Remote File Inclusion Exploit Download Script : http://up.9q9q.net/up/index.php?f=994a86950 Founded & Coded by: Cold z3ro , [email protected] Dork : inurl:phpRaid , phpRaid , roster.php?Sort=Race perl cold-z3ro.pl targe...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•16 views

Yahoo! Assistant 3.6 - 'yNotifier.dll' ActiveX Control Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29065/info Yahoo! Assistant 'yNotifier.dll' ActiveX control is prone to a memory-corruption vulnerability. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•35 views

Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (0Day)

No description provided by source. / Winamp 5.12 Remote Buffer Overflow Universal Exploit Zero-Day Bug discovered & exploit coded by ATmaCA Web: http://www.spyinstructors.com && http://www.atmacasoft.com E-Mail: [email protected] Credit to Kozan / / Tested with : Winamp 5.12 on Win XP Pro Sp2 / ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•69 views

Apple Mac OS X 10.3.x Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12863/info Multiple security vulnerabilities are reported to affect Apple Mac OS X. These issues were disclosed in the referenced vendor advisory. Insecure permissions are reported to be set on certain Apple Mac OS X...

7.2CVSS9.5AI score0.01051EPSS
SaveExploits5
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•43 views

OpenVAS Manager Command Injection Vulnerability

No description provided by source. Source: http://securityreason.com/securityalert/8048 Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this...

9CVSS0.4AI score0.09266EPSS
SaveExploits5
Rows per page
Query Builder