Lucene search
+L

1228 matches found

Cvelist
Cvelist
•added 2017/07/14 4:00 p.m.•41 views

CVE-2017-2252

Untrusted search path vulnerability in self-extracting archive files created by File Compact Ver.5 version 5.10 and earlier, Ver.6 version 6.02 and earlier, Ver.7 version 7.02 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

7.7AI score0.0108EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/07/14 12:00 a.m.•5 views

PT-2017-15298

Name of the Vulnerable Software and Affected Versions File Compact Ver.5 versions 5.10 and earlier File Compact Ver.6 versions 6.02 and earlier File Compact Ver.7 versions 7.02 and earlier Description The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directo...

9.3CVSS0.0108EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/07/10 4:57 a.m.•16 views

Self-Extracting Archives created by File Compact may insecurely load Dynamic Link Libraries

Overview File Compact provided by SOURCENEXT CORPORATION is compression/decompression software. It can also create self-extracting archive files. Self-extracting archive files created by File Compact contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link...

9.3CVSS6.8AI score0.0108EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/07/10 12:00 a.m.•106 views

JVN#29939155: Self-Extracting Archives created by File Compact may insecurely load Dynamic Link Libraries

File Compact provided by SOURCENEXT CORPORATION is compression/decompression software. It can also create self-extracting archive files. Self-extracting archive files created by File Compact contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries...

9.3CVSS7.7AI score0.0108EPSS
SaveExploits0
ICS
ICS
•added 2017/07/06 12:00 a.m.•88 views

Siemens SIPROTEC 4 and SIPROTEC Compact (Update A)

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the original...

10CVSS1.5AI score0.74497EPSS
SaveExploits7References50
ICS
ICS
•added 2017/07/06 12:00 a.m.•89 views

Siemens SIPROTEC 4 and SIPROTEC Compact (Update B)

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the updated...

10CVSS1.5AI score0.74497EPSS
SaveExploits7References50
ICS
ICS
•added 2017/07/06 12:00 a.m.•83 views

Siemens SIPROTEC 4 and SIPROTEC Compact (Update C)

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the updated...

10CVSS1.5AI score0.74497EPSS
SaveExploits7References49
ICS
ICS
•added 2017/07/06 12:00 a.m.•52 views

Siemens SIPROTEC 4 and SIPROTEC Compact (Update D)

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the updated...

10CVSS1.5AI score0.74497EPSS
SaveExploits7References51
Tenable Nessus
Tenable Nessus
•added 2017/07/03 12:00 a.m.•55 views

Fedora 25 : libmtp (2017-4c57da6642)

libmtp 1.1.13 ============= Christophe Vu-Brugier 1 : - added GoPro HERO5 Black Emeric Grange 2 : - added GoPro HERO5 Session - rename F5321 into XPeria X Compact Gaute Hope 2 : - add GoPro Hero+ - add mtp-detect for GoPro Hero+ Jerry Zhang 1 : - Update Google device strings, add PTP+ADB id Marcu...

6.8CVSS6.4AI score0.00855EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2017/04/27 12:00 a.m.•17 views

PDF Viewer Code Execution

The vulnerability of the Product Representation Compact PRC parser programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, arises from reading data beyond the specified buffer. Exploiting this vulnerability ca...

9.3CVSS8AI score0.0346EPSS
SaveExploits0References3Affected Software2
osv_cve
osv_cve
•added 2017/04/12 2:59 p.m.•13 views

CVE-2017-3019

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact PRC format parser. Successful exploitation could lead to arbitrary code execution...

7.8CVSS6AI score0.0346EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/12 12:00 a.m.•8 views

CVE-2017-3019: Out-of-bounds Read

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact PRC format parser. Successful exploitation could lead to arbitrary code execution...

9.3CVSS6.5AI score0.0346EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2017/02/17 5:59 p.m.•17 views

UBUNTU-CVE-2016-6873

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

9.8CVSS7.3AI score0.02219EPSS
SaveExploits0References3
CVE
CVE
•added 2017/02/17 5:00 p.m.•83 views

CVE-2016-6873

CVE-2016-6873 affects Facebook HHVM before 3.15.0. The vulnerability is caused by self recursion in the compact function, leading to unspecified impact via unknown vectors. Public records (NVD/NSS OSV) describe a high-severity, network-exploitable issue with potential partial confidentiality/inte...

9.8CVSS9.6AI score0.02219EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2017/02/17 5:00 p.m.•11 views

CVE-2016-6873

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

9.8CVSS0.02219EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2017/02/17 12:00 a.m.•10 views

PT-2017-9038

Name of the Vulnerable Software and Affected Versions Facebook HHVM versions prior to 3.15.0 Description The issue is related to self recursion in compact, allowing attackers to have an unspecified impact. The exact vectors used for the attack are unknown. Recommendations For Facebook HHVM versio...

9.8CVSS0.02219EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/17 12:00 a.m.•12 views

CVE-2016-6873: Undefined Security Weakness

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

9.8CVSS5.8AI score0.02219EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2017/01/16 11:14 a.m.•20 views

compactseo.com XSS vulnerability

Vulnerable URL: http://compactseo.com/search.php?query=mapmediterranean' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18989941 VIP website status:| No Check compactseo.com SSL...

6.3AI score
SaveExploits0
osv_cve
osv_cve
•added 2017/01/11 4:59 a.m.•13 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

7.8CVSS6AI score0.0333EPSS
SaveExploits0References4
NVD
NVD
•added 2017/01/11 4:59 a.m.•26 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

9.3CVSS7.9AI score0.0333EPSS
SaveExploits0References4
Rows per page
Query Builder