Lucene search
+L

7995 matches found

NVD
NVD
added 2018/09/05 6:29 p.m.21 views

CVE-2018-16539

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable...

5.5CVSS6.1AI score0.01445EPSS
SaveExploits0References8
OSV
OSV
added 2018/09/05 6:29 p.m.16 views

CVE-2018-16539

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable...

5.5CVSS7.3AI score
SaveExploits0References8
CVE
CVE
added 2018/09/05 6:0 p.m.143 views

CVE-2018-16539

CVE-2018-16539 affects Artifex Ghostscript (prior to 9.24). A crafted PostScript file could bypass access checks in temp file handling, allowing disclosure of files on the system. Multiple advisories (Debian, Red Hat/CentOS, Gentoo, Fedora, IBM PowerKVM, Amazon Linux) document this vulnerability ...

5.5CVSS6AI score0.01445EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2018/09/05 6:0 p.m.41 views

CVE-2018-16542

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter...

6.2AI score0.01908EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2018/09/05 6:0 p.m.36 views

CVE-2018-16539

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable...

6.1AI score0.01445EPSS
SaveExploits0References8
OSV
OSV
added 2018/09/05 6:29 a.m.37 views

CVE-2018-16509

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction...

7.8CVSS7.2AI score
SaveExploits0References15
Debian CVE
Debian CVE
added 2018/09/05 6:0 a.m.47 views

CVE-2018-16509

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction...

9.3CVSS8AI score0.92499EPSS
SaveExploits4
Cvelist
Cvelist
added 2018/09/05 6:0 a.m.37 views

CVE-2018-16509

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction...

7.1AI score0.92499EPSS
SaveExploits4References15
UbuntuCve
UbuntuCve
added 2018/09/05 12:0 a.m.51 views

CVE-2018-16509

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction...

9.3CVSS7.1AI score0.92499EPSS
SaveExploits4References4
UbuntuCve
UbuntuCve
added 2018/09/05 12:0 a.m.35 views

CVE-2018-16542

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter...

5.5CVSS6.8AI score0.01908EPSS
SaveExploits0References3
exploitpack
exploitpack
added 2018/09/03 12:0 a.m.32 views

Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions)

Admidio 3.3.5 - Cross-Site Request Forgery Change Permissions Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery Change Permissions Author: Nawaf Alkeraithe Date: 2018-09-01 Vendor Homepage: https://www.admidio.org/ Software Link:...

0.8AI score
SaveExploits0
zdt
zdt
added 2018/09/03 12:0 a.m.54 views

Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions) Vulnerability

Exploit for php platform in category web applications Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery Change Permissions Author: Nawaf Alkeraithe Vendor Homepage: https://www.admidio.org/ Software Link:...

0.7AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/09/03 12:0 a.m.35 views

Admidio 3.3.5 Cross Site Request Forgery

Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery Change Permissions Author: Nawaf Alkeraithe Date: 2018-09-01 Vendor Homepage: https://www.admidio.org/ Software Link: https://sourceforge.net/projects/admidio/files/Admidio/3.3.x/admidio-3.3.5.zip/download Version: 3.3.5 Tested on: PHP CVE...

1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/09/03 12:0 a.m.39 views

Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions)

Exploit Title: Admidio 3.3.5 - Cross-Site Request Forgery Change Permissions Author: Nawaf Alkeraithe Date: 2018-09-01 Vendor Homepage: https://www.admidio.org/ Software Link: https://sourceforge.net/projects/admidio/files/Admidio/3.3.x/admidio-3.3.5.zip/download Version: 3.3.5 Tested on: PHP CVE...

5.3AI score
SaveExploits0
NVD
NVD
added 2018/08/31 4:29 p.m.22 views

CVE-2018-16276

An issue was discovered in yurexread in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges...

7.8CVSS7.5AI score0.0044EPSS
SaveExploits0References14
Prion
Prion
added 2018/08/31 4:29 p.m.29 views

Out-of-bounds

An issue was discovered in yurexread in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges...

7.2CVSS7.3AI score0.0044EPSS
SaveExploits0References14Affected Software3
CVE
CVE
added 2018/08/31 4:0 p.m.201 views

CVE-2018-16276

CVE-2018-16276 concerns the Linux kernel, specifically the yurex_read function in drivers/usb/misc/yurex.c. The issue is a bounds-check vulnerability that could allow a local attacker with access to the system to crash the kernel or potentially escalate privileges. Affected code path is in the US...

7.8CVSS7.3AI score0.0044EPSS
SaveExploits0References14Affected Software1
Cvelist
Cvelist
added 2018/08/31 4:0 p.m.37 views

CVE-2018-16276

An issue was discovered in yurexread in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges...

7.4AI score0.0044EPSS
SaveExploits0References14
UbuntuCve
UbuntuCve
added 2018/08/31 12:0 a.m.43 views

CVE-2018-16276

An issue was discovered in yurexread in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges...

7.8CVSS6.8AI score0.0044EPSS
SaveExploits0References11
OSV
OSV
added 2018/08/31 12:0 a.m.6 views

UBUNTU-CVE-2018-16276

An issue was discovered in yurexread in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges...

7.8CVSS6.7AI score0.0044EPSS
SaveExploits0References12
Rows per page
Query Builder