Lucene search
+L

901 matches found

Tenable Nessus
Tenable Nessus
added 2018/08/21 12:0 a.m.52 views

Mozilla Firefox ESR < 52.9 Multiple Vulnerabilities

Binary data 700339.prm...

9.8CVSS7.3AI score0.04831EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
added 2018/08/21 12:0 a.m.26 views

Mozilla Firefox < 57.0.1 Multiple Vulnerabilities

Binary data 700323.prm...

7.5CVSS7.4AI score0.02989EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2018/08/21 12:0 a.m.13 views

Mozilla Firefox ESR < 52.5 Multiple Vulnerabilities

Binary data 700332.prm...

10CVSS7.3AI score0.07439EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2018/08/21 12:0 a.m.29 views

Mozilla Firefox < 57 Multiple Vulnerabilities

Binary data 700322.prm...

10CVSS7.3AI score0.92621EPSS
SaveExploits15References22
Github Security Blog
Github Security Blog
added 2018/08/08 10:29 p.m.22 views

Moderate severity vulnerability that affects safemode

Withdrawn, accidental duplicate publish. The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method...

8.1CVSS6.4AI score0.02131EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2018/08/07 7:31 a.m.25 views

Denial-of-Service (DoS)

libxml2.so is vulnerable to heap-based buffer overflow. The xmlParseXmlDecl function in parser.c allows context-dependent attackers to cause a denial of service condition when an encoding conversion failure occurs which causes the parser to extract more errors during the failure...

5CVSS8.9AI score0.07017EPSS
SaveExploits0References21Affected Software2
VulnCheck KEV
VulnCheck KEV
added 2018/07/13 12:0 a.m.4 views

VulnCheck KEV: CVE-2011-4723

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information...

6.8CVSS6AI score0.03128EPSS
SaveExploits0References1
zdt
zdt
added 2018/04/24 12:0 a.m.149 views

WordPress WD #Instagram Feed Premium 1.3.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications WD Instagram Feed 1.3.0aaaXSS Vulnerabilities Two cross-site scripting vulnerabilities in the WD Instagram Feed WordPress plugin allow attackers to inject arbitrary web script or HTML by passing payloads through the bio of an Instagram profile...

0.00957EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2018/04/24 12:0 a.m.69 views

WordPress WD Instagram Feed Premium 1.3.0 Cross Site Scripting

WD Instagram Feed 1.3.0aaaXSS Vulnerabilities Two cross-site scripting vulnerabilities in the WD Instagram Feed WordPress plugin allow attackers to inject arbitrary web script or HTML by passing payloads through the bio of an Instagram profile or remotely via comments on an Instagram post...

0.1AI score0.00957EPSS
SaveExploits2
Cvelist
Cvelist
added 2018/04/13 3:0 p.m.37 views

CVE-2016-9646 Commit metadata forgery via CGI::FormBuilder context-dependent APIs

ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder-field method similar to the CGI-param API that led to Bugzilla's CVE-2014-1572, which can be abused to lead to commit metadata forgery...

7.2AI score0.01178EPSS
SaveExploits0References4
OSV
OSV
added 2018/02/07 5:29 p.m.16 views

CVE-2017-12472

ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnlmalloc...

9.8CVSS9.8AI score
SaveExploits0References2
NVD
NVD
added 2018/02/07 5:29 p.m.21 views

CVE-2017-12472

ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnlmalloc...

9.8CVSS9.7AI score0.01783EPSS
SaveExploits0References2
Prion
Prion
added 2018/02/07 5:29 p.m.15 views

Null pointer dereference

ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnlmalloc...

7.5CVSS9.5AI score0.01783EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2018/02/07 5:29 p.m.18 views

Out-of-bounds

The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...

7.5CVSS9.5AI score0.01783EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2018/02/07 5:29 p.m.18 views

CVE-2017-12465

Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the 1 vallen variable in the iottlvparsesequence function or 2 typ, vallen and i variables in the localrpcparse function...

9.8CVSS9.6AI score0.01783EPSS
SaveExploits0References2
Prion
Prion
added 2018/02/07 5:29 p.m.14 views

Buffer overflow

Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables...

7.5CVSS9.6AI score0.01888EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2018/02/07 5:29 p.m.15 views

Integer overflow

Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the 1 vallen variable in the iottlvparsesequence function or 2 typ, vallen and i variables in the localrpcparse function...

7.5CVSS9.5AI score0.01783EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2018/02/07 5:29 p.m.22 views

CVE-2017-12466

CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to sslhalen when running ccn-lite-sim, which trigger an out-of-bounds access...

9.8CVSS9.6AI score0.01783EPSS
SaveExploits0References2
OSV
OSV
added 2018/02/07 5:29 p.m.13 views

CVE-2017-12471

The cnbparselev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function...

9.8CVSS9.8AI score
SaveExploits0References2
OSV
OSV
added 2018/02/07 5:29 p.m.14 views

CVE-2017-12412

ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow...

7.8CVSS8AI score
SaveExploits0References2
Rows per page
Query Builder