Lucene search
+L

988 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2017/07/10 4:57 a.m.8 views

Self-Extracting Archives created by File Compact may insecurely load Dynamic Link Libraries

Overview File Compact provided by SOURCENEXT CORPORATION is compression/decompression software. It can also create self-extracting archive files. Self-extracting archive files created by File Compact contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link...

9.3CVSS6.8AI score0.0108EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2017/07/10 12:00 a.m.96 views

JVN#29939155: Self-Extracting Archives created by File Compact may insecurely load Dynamic Link Libraries

File Compact provided by SOURCENEXT CORPORATION is compression/decompression software. It can also create self-extracting archive files. Self-extracting archive files created by File Compact contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries...

9.3CVSS7.7AI score0.0108EPSS
SaveExploits0
ICS
ICS
added 2017/07/06 12:00 a.m.81 views

Siemens SIPROTEC 4 and SIPROTEC Compact (Update B)

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the updated...

10CVSS1.5AI score0.74497EPSS
SaveExploits7References50
ICS
ICS
added 2017/07/06 12:00 a.m.71 views

Siemens SIPROTEC 4 and SIPROTEC Compact (Update C)

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the updated...

10CVSS1.5AI score0.74497EPSS
SaveExploits7References49
ICS
ICS
added 2017/07/06 12:00 a.m.78 views

Siemens SIPROTEC 4 and SIPROTEC Compact (Update A)

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the original...

10CVSS1.5AI score0.74497EPSS
SaveExploits7References50
ICS
ICS
added 2017/07/06 12:00 a.m.42 views

Siemens SIPROTEC 4 and SIPROTEC Compact (Update D)

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIPROTEC 4 and SIPROTEC Compact Vulnerabilities: Improper Input Validation, Missing Authorization, Improper Authentication UPDATE INFORMATION This updated advisory is a follow-up to the updated...

10CVSS1.5AI score0.74497EPSS
SaveExploits7References51
Tenable Nessus
Tenable Nessus
added 2017/07/03 12:00 a.m.51 views

Fedora 25 : libmtp (2017-4c57da6642)

libmtp 1.1.13 ============= Christophe Vu-Brugier 1 : - added GoPro HERO5 Black Emeric Grange 2 : - added GoPro HERO5 Session - rename F5321 into XPeria X Compact Gaute Hope 2 : - add GoPro Hero+ - add mtp-detect for GoPro Hero+ Jerry Zhang 1 : - Update Google device strings, add PTP+ADB id Marcu...

6.8CVSS6.4AI score0.00855EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2017/04/27 12:00 a.m.13 views

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of the Product Representation Compact PRC parser programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, arises from reading data beyond the specified buffer. Exploiting this vulnerability ca...

9.3CVSS8AI score0.0346EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2017/04/12 2:59 p.m.7 views

CVE-2017-3019

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact PRC format parser. Successful exploitation could lead to arbitrary code execution...

7.8CVSS6AI score0.0346EPSS
SaveExploits0References3
OSV
OSV
added 2017/02/17 5:59 p.m.12 views

UBUNTU-CVE-2016-6873

Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...

9.8CVSS7.3AI score0.02219EPSS
SaveExploits0References3
CVE
CVE
added 2017/02/17 5:00 p.m.73 views

CVE-2016-6873

CVE-2016-6873 affects Facebook HHVM before 3.15.0. The vulnerability is caused by self recursion in the compact function, leading to unspecified impact via unknown vectors. Public records (NVD/NSS OSV) describe a high-severity, network-exploitable issue with potential partial confidentiality/inte...

9.8CVSS9.6AI score0.02219EPSS
SaveExploits0References3Affected Software1
Openbugbounty
Openbugbounty
added 2017/01/16 11:14 a.m.18 views

compactseo.com XSS vulnerability

Vulnerable URL: http://compactseo.com/search.php?query=mapmediterranean' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18989941 VIP website status:| No Check compactseo.com SSL...

6.3AI score
SaveExploits0
OSV
OSV
added 2017/01/11 4:59 a.m.9 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

7.8CVSS6AI score0.0333EPSS
SaveExploits0References4
NVD
NVD
added 2017/01/11 4:59 a.m.21 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

9.3CVSS7.9AI score0.0333EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2017/01/11 4:40 a.m.40 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

9AI score0.0333EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2017/01/11 4:40 a.m.33 views

CVE-2017-2941

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing Compact Font Format data. Successful exploitation could lead to arbitrary code execution...

9.3CVSS8AI score0.0333EPSS
SaveExploits0References4
CNVD
CNVD
added 2016/09/06 12:00 a.m.12 views

Siemens SIPROTEC 4/SIPROTEC Compact Authentication Bypass Vulnerability (CNVD-2016-07252)

SIPROTEC 4 and SIPROTEC Compact devices provide a wide range of centralized protection, control and automation functions for substations and other applications. An authentication bypass vulnerability exists in Siemens SIPROTEC 4, SIPROTEC Compact devices, versions prior to EN100 Ethernet 4.29. A...

10CVSS7.3AI score0.0286EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/09/06 12:00 a.m.12 views

Siemens SIPROTEC 4/SIPROTEC Compact Denial of Service Vulnerability

SIPROTEC 4 and SIPROTEC Compact devices provide a wide range of centralized protection, control and automation functions for substations and other applications. A denial of service vulnerability exists in Siemens SIPROTEC 4, SIPROTEC Compact devices, versions prior to EN100 Ethernet 4.29. A remot...

7.8CVSS6.8AI score0.03002EPSS
SaveExploits0References1
ICS
ICS
added 2016/06/10 6:00 a.m.58 views

Siemens SIPROTEC 4 and SIPROTEC Compact Vulnerabilities

OVERVIEW Siemens reports that they have released a firmware update for SIPROTEC 4 and SIPROTEC Compact devices to mitigate authentication bypass and resource exhaustion vulnerabilities. Kirill Nesterov and Anatoly Katushin from Kaspersky Lab reported some of these vulnerabilities directly to...

10CVSS9.4AI score0.03002EPSS
SaveExploits0References10
OSV
OSV
added 2016/05/31 1:59 a.m.8 views

CVE-2016-4785

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

5.3CVSS5.8AI score0.02676EPSS
SaveExploits0References6
Rows per page
Query Builder