Lucene search
+L

9440 matches found

Exploit DB
Exploit DB
•added 2014/01/24 12:00 a.m.•37 views

MW6 Technologies MaxiCode - ActiveX 'Data' Buffer Overflow (PoC)

!-- =========================================================================== Problem: The Data parameter is subject to a buffer overflow DEFINITELY leading to arbitrary code execution. COM Object - 2355C601-37D1-42B4-BEB1-03C773298DC8 MW6MaxiCode Class File Description : MaxiCode ActiveX File...

9.3CVSS5.7AI score0.07373EPSS
SaveExploits7
NVD
NVD
•added 2014/01/21 6:55 p.m.•34 views

CVE-2013-0485

Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries...

10CVSS6AI score0.02441EPSS
SaveExploits0References6
Prion
Prion
•added 2014/01/21 6:55 p.m.•27 views

Design/Logic Flaw

Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries...

10CVSS6.7AI score0.02441EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2014/01/21 6:00 p.m.•82 views

CVE-2013-0485

CVE-2013-0485 refers to an unspecified vulnerability in IBM Java SDK versions (7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16) with unknown impact/attack vectors related to Class Libraries. Connected advisories note the issue affecting IBM Rational Developer ...

10CVSS6AI score0.02441EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2014/01/21 6:00 p.m.•40 views

CVE-2013-0485

Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries...

5.9AI score0.02441EPSS
SaveExploits0References6
Prion
Prion
•added 2014/01/21 4:06 p.m.•25 views

Authentication flaw

The isURLInPortal method in the URLTool class in inportal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows remote attackers to bypass the allowexternalloginsites filtering property, redirect users to...

5.8CVSS7AI score0.02222EPSS
SaveExploits2References5Affected Software1
Prion
Prion
•added 2014/01/21 1:55 a.m.•24 views

Information disclosure

wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft...

4CVSS6.1AI score0.0176EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2014/01/19 6:02 p.m.•42 views

Design/Logic Flaw

The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance, a similar iss...

7.5CVSS6.7AI score0.12434EPSS
SaveExploits0References5Affected Software3
UbuntuCve
UbuntuCve
•added 2014/01/19 6:02 p.m.•55 views

CVE-2013-2185

The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance, a similar iss...

7.5CVSS6.9AI score0.07199EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2014/01/09 12:00 a.m.•63 views

Android Fragment Injection vulnerability

Hi, We have recently disclosed a new vulnerability to the Android Security Team. The vulnerability affected many apps, including Settings the one that is found on every Android device, Gmail, Google Now, Dropbox and Evernote. To be more accurate, any App which extended the PreferenceActivity clas...

0.1AI score
SaveExploits0
FuelPHP
FuelPHP
•added 2014/01/05 12:00 a.m.•44 views

auto-format of Curl responses may lead to code execution

When executing a cURL request using the RequestCurl class with an unvalidated URL provided by user input, or a request to a malicious or a legitimate but hacked website, a specially crafted response can lead to auto-execution of malicious code, due to the way the auto formatting mechanism works...

7.5CVSS6.4AI score0.02718EPSS
SaveExploits0References1Affected Software1
seebug.org
seebug.org
•added 2013/12/31 12:00 a.m.•15 views

PHP imdb类多个跨站脚本漏洞

BUGTRAQ ID: 64542 PHP是一种HTML内嵌式的语言。 PHP imdb类2-2.1.5及其他版本在实现上存在多个跨站脚本漏洞,攻击者可利用这些漏洞在受影响站点用户浏览器中执行任意脚本代码。 0 PHP imdb Classes 2-2.1.5 厂商补丁: PHP --- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://sourceforge.net/projects/imdbphp/...

6.9AI score
SaveExploits0
Debian
Debian
•added 2013/12/24 5:38 a.m.•60 views

[SECURITY] [DSA 2827-1] libcommons-fileupload-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2827-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 24, 2013 http://www.debian.org/security/faq -...

7.5CVSS7.7AI score0.12434EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2013/12/23 12:00 a.m.•62 views

Debian: Security Advisory (DSA-2827-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.12434EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2013/12/18 12:29 a.m.•22 views

[Harald scan] Bluetooth discovery scanning

Harald Scan is able to determine Major and Minor device class of device, as well as attempt to resolve the device's MAC address to the largest known Bluetooth MAC address Vendor list. If you are running Harald Scan and see a entry with 'Unknown' in the vendor column pleaseemail me the file which ...

7.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2013/12/17 12:00 a.m.•19 views

Fedora Update for php-symfony2-Locale FEDORA-2013-22422

Check for the Version of php-symfony2-Locale OpenVAS Vulnerability Test Fedora Update for php-symfony2-Locale FEDORA-2013-22422 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

5CVSS6.3AI score0.01868EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/12/17 12:00 a.m.•54 views

JVN#53768697: Android OS vulnerable to arbitrary Java method execution

Android OS contains a vulnerability where an arbitrary Java method may be executed. Impact When viewing a specially crafted page using the standard Android browser or an other application that uses the WebView class, Android OS may be rebooted or arbitrary code may be executed without intent from...

9.3CVSS6.4AI score0.43356EPSS
SaveExploits7
NVD
NVD
•added 2013/12/11 12:55 a.m.•42 views

CVE-2013-3907

portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Port-Class Driver Double Fetch Vulnerability."...

7.2CVSS6.3AI score0.01772EPSS
SaveExploits0References1
Prion
Prion
•added 2013/12/11 12:55 a.m.•35 views

Double free

portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Port-Class Driver Double Fetch Vulnerability."...

7.2CVSS6.8AI score0.01772EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2013/12/11 12:00 a.m.•71 views

MS13-101: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2880430)

The remote Windows host has the following vulnerabilities : - Multiple errors exist in the Windows kernel-mode drivers that could allow privilege escalation and arbitrary code execution. CVE-2013-3899, CVE-2013-3902, CVE-2013-5058 - An error exists in the way the Windows kernel-mode driver parses...

7.2CVSS6AI score0.02764EPSS
SaveExploits6References8
Rows per page
Query Builder