Lucene search
K

2394 matches found

Zero Day Initiative
Zero Day Initiative
added 2016/02/05 12:0 a.m.30 views

Advantech WebAccess datacore Service datacore.exe AlarmMessage strcpy Heap-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x5228 IOCTL in the Kernel subsystem. A heap-based buffer...

9.3CVSS4.8AI score0.28185EPSS
Exploits0References1
CNVD
CNVD
added 2015/12/18 12:0 a.m.2 views

Cisco Integrated Management Controller Denial of Service Vulnerability

Cisco Integrated Management Controller that IMC, is the United States Cisco Cisco company a set of tools for the management of the UCS Unified Computing System, which supports HTTP, SSH access, etc., and can be on the server, shutdown and reboot operations. A denial of service vulnerability exist...

6.8CVSS6.6AI score0.02192EPSS
Exploits0References1
CVE
CVE
added 2015/12/07 8:0 p.m.58 views

CVE-2015-4334

CVE-2015-4334 affects Blue Coat ProxySG SGOS when deployed as an explicit proxy. The default configuration forwards authentication challenges from upstream origin content servers, enabling a remote attacker to obtain sensitive information via HTTP 407 responses. Affected SGOS versions are before ...

5CVSS6.6AI score0.03333EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/10/13 12:0 a.m.2 views

The vulnerability of the NX-OS network operating system allows a hacker to gain access to user passwords, which are presented in an isolated manner.

The vulnerability of the NX-OS network operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has completed the authentication process, to gain access to user passwords stored in an isolated manner...

4CVSS5.5AI score0.02603EPSS
Exploits0References2
Packet Storm
Packet Storm
added 2015/10/06 12:0 a.m.38 views

Liferay Portal 6.2 EE SP13 Cross Site Scripting

Hey guys, during a penatrationtest I have found an unknown persistent xss in liferay portal backend. General Information Manufacture description: Liferay Portal is an enterprise-web-platform for the development of business solutions, which provides quick results and long-term values. Details ·...

7.4AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2015/06/02 12:0 a.m.6 views

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities exist in the xorg-x11-server-1.15.0 package of the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited...

6.5CVSS6.5AI score0.05192EPSS
Exploits0References14
BDU FSTEC
BDU FSTEC
added 2015/05/07 12:0 a.m.3 views

The vulnerability of the Oracle Database database management system allows a remote attacker to compromise data accessibility.

The vulnerability of the Oracle Database management system in the XDK and XDB components – XML Databases – allows a malicious actor, who operates remotely and has completed the authentication process, to compromise the accessibility of data...

4CVSS5.5AI score0.01508EPSS
Exploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2015/04/30 4:9 p.m.3 views

Management: Limited RBAC authorization bypass

It was discovered that the Role Based Access Control RBAC implementation did not sufficiently verify all authorization conditions that are required by the Maintainer role to perform certain administrative actions. An authenticated user with the Maintainer role could use this flaw to add, modify, ...

4CVSS5.8AI score0.0126EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.3 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the libsssautofs-1.9.2 package in the Red Hat Enterprise Linux operating system can lead to violations of confidentiality and integrity of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the authentication proces...

4.9CVSS5.5AI score0.02154EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.3 views

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the system-config-printer-1.1.16 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited by a malicious individual who has completed the...

6CVSS7.2AI score0.00421EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.3 views

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the dbus-1-qt3-debugsource package of the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out by a malicious individual who has complete...

6.2CVSS6.5AI score0.00785EPSS
Exploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.2 views

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities exist in the dbus-1-qt3-32bit package of the SUSE Linux Enterprise operating system. Exploitation of these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. The exploitation of these vulnerabilities can be...

6.2CVSS6.5AI score0.00785EPSS
Exploits2References5
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.3 views

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities exist in the hal-32bit operating system of SUSE Linux Enterprise. Exploiting these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who have...

6.2CVSS6.5AI score0.00785EPSS
Exploits2References5
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.3 views

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities exist in the xorg-x11-server-common-1.15.0 package of the CentOS operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely by a...

6.5CVSS6.5AI score0.05192EPSS
Exploits0References14Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.5 views

Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in the arts package up to version 3.5.2-r1 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. The exploitation of these vulnerabilities can be carrie...

6CVSS6.8AI score0.00385EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.4 views

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the krb5-doc package in the SUSE Linux Enterprise operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the...

8.5CVSS6.8AI score0.08085EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.4 views

The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the sssd-debuginfo-1.9.2 package of the CentOS operating system can be exploited by a malicious individual to compromise the confidentiality and integrity of protected information. This vulnerability can be exploited remotely by a malicious individual who has completed the...

4.9CVSS5.5AI score0.02154EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.4 views

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kdenetwork-krfb-libs-4.10.5 package for the CentOS operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely by a malicious individual who ha...

6.5CVSS7.8AI score0.0783EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.5 views

Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the xorg-x11-server-Xnest-1.7.7 package of the CentOS operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely by a malicious individual who has...

8.5CVSS7.2AI score0.05347EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.5 views

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the openldap-2.3.43 package for the Red Hat Enterprise Linux operating system can be exploited, leading to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely by a malicious individual who has...

4.6CVSS5.5AI score0.02959EPSS
Exploits0References2
Rows per page
Query Builder