Lucene search
+L

1990 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/05 12:00 a.m.•10 views

CVE-2016-9691: Improper Restriction of XML External Entity Reference

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory...

9CVSS5.8AI score0.01412EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/05/05 12:00 a.m.•8 views

PT-2017-10269

Name of the Vulnerable Software and Affected Versions IBM WebSphere Cast Iron Solution versions 7.0.0 through 7.5.0.0 Description The issue is caused by improper validation of user-supplied input, allowing a remote attacker to exploit it and induce the application to perform server-side DNS looku...

8.6CVSS0.0161EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/05/05 12:00 a.m.•10 views

PT-2017-10268

Name of the Vulnerable Software and Affected Versions IBM WebSphere Cast Iron Solution versions 7.0.0 through 7.5.0.0 Description The issue is caused by an XML External Entity Injection XXE error when processing XML data, which could allow a remote attacker to expose highly sensitive information ...

9CVSS0.01412EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
•added 2017/04/27 6:03 p.m.•17 views

castironradiatorcentre.co.uk XSS vulnerability

Vulnerable URL: https://www.castironradiatorcentre.co.uk/products.asp?search=1%22%27--!%3E%3CScript%20/K/%3Econfirm%27OPENBUGBOUNTY%27%3C/Script%20/K/%3E=Accessories+%26+Spares=Wall+Stays=buy=CDC-LUXSTAY-BLKNI=1 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for...

6.3AI score
SaveExploits0
Mend
Mend
•added 2017/04/24 11:00 p.m.•5 views

CVE-2017-5042

Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent...

6.9CVSS0.00363EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2017/04/10 12:00 a.m.•45 views

Google Chrome < 57.0.2987.133 Multiple Vulnerabilities

Binary data 700054.pasl...

8.8CVSS9.4AI score0.01493EPSS
SaveExploits0References2
osv_opensuse
osv_opensuse
•added 2017/04/01 4:49 p.m.•12 views

OPENSUSE-SU-2017:0909-1 Security update for Chromium

This update to Chromium 57.0.2987.133 fixes the following issues boo1031677: - CVE-2017-5055: Use after free in printing - CVE-2017-5054: Heap buffer overflow in V8 - CVE-2017-5052: Bad cast in Blink - CVE-2017-5056: Use after free in Blink - CVE-2017-5053: Out of bounds memory access in V8 The...

9.6CVSS9.6AI score0.02557EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2017/03/31 12:00 a.m.•106 views

Google Chrome < 57.0.2987.133 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 57.0.2987.133. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop29 advisory. - An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linu...

9.6CVSS8.8AI score0.02557EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2017/03/31 12:00 a.m.•90 views

FreeBSD : chromium -- multiple vulnerabilities (7cf058d8-158d-11e7-ba2c-e8e0b747a45a)

Google Chrome Releases reports : 5 security fixes in this release, including : - 698622 Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar - 699166 High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs - 662767 High CVE-2017-5052: Bad...

9.6CVSS8.4AI score0.02557EPSS
SaveExploits0References7
FreeBSD
FreeBSD
•added 2017/03/29 12:00 a.m.•43 views

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 5 security fixes in this release, including: 698622 Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar 699166 High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs 662767 High CVE-2017-5052: Bad cast in...

9.6CVSS9.5AI score0.02557EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2017/03/24 3:59 p.m.•10 views

DEBIAN-CVE-2017-5511

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

9.8CVSS7.5AI score0.05467EPSS
SaveExploits0References1
Prion
Prion
•added 2017/03/24 3:59 p.m.•26 views

Heap overflow

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

7.5CVSS9.4AI score0.05467EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2017/03/24 3:00 p.m.•53 views

CVE-2017-5511

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

9.8CVSS6.5AI score0.05467EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2017/03/14 6:13 a.m.•13 views

chromium-browser: incorrect handling of cookies in cast

Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent...

5.7CVSS7.5AI score0.00363EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2017/03/10 12:00 a.m.•25 views

Google Chrome < 57.0.2987.98 Multiple Vulnerabilities

Binary data 9991.pasl...

4.3CVSS6.4AI score0.01491EPSS
SaveExploits1References2
OSS-Fuzz
OSS-Fuzz
•added 2017/02/20 4:00 p.m.•29 views

grpc: Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start

Detailed report: https://oss-fuzz.com/testcase?key=5138174202347520 Project: grpc Fuzzer: libFuzzergrpcurifuzzertest Fuzz target binary: urifuzzertest Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7fff5af703d0 Crash State: Bad-cast to const std::1::less sta...

5.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2017/02/18 10:59 a.m.•25 views

libtsm: Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_start

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://oss-fuzz.com/testcase?key=4858886169296896 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerubsanlibtsm Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe13981c...

7AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2017/02/17 7:59 a.m.•17 views

nss: Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_GLOBAL__sub_I_quickder_target.cc;_start

Project: https://hg.mozilla.org/projects/nss Detailed report: https://oss-fuzz.com/testcase?key=4585070186725376 Project: nss Fuzzer: libFuzzernssquickder Fuzz target binary: quickder Job Type: libfuzzerubsannss Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe7319e0e8 Crash State:...

6.7AI score
SaveExploits0Affected Software1
UbuntuCve
UbuntuCve
•added 2017/01/17 12:00 a.m.•27 views

CVE-2017-5511

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

9.8CVSS6.8AI score0.05467EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2017/01/17 12:00 a.m.•13 views

UBUNTU-CVE-2017-5511

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

9.8CVSS7.1AI score0.05467EPSS
SaveExploits0References4
Rows per page
Query Builder