Lucene search
+L

6720 matches found

CNVD
CNVD
•added 2016/12/07 12:00 a.m.•18 views

FreeBSD bhyve(8) Integer Overflow Vulnerability

bhyve, the FreeBSD hypervisor/virtual machine manager, reports the "POPCNT" POPulation Count processor feature in bhyve8. An integer overflow vulnerability exists in FreeBSD bhyve8. As the bhyve8 virtual machine is configured with more than 3GB of client memory, this could allow a malicious clien...

7.8CVSS7.2AI score0.00326EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/11/28 12:00 a.m.•9 views

GStreamer Good Plug-ins write count buffer overflow vulnerability

GStreamer is a multimedia framework for creating streaming applications in the GNOME desktop environment. A buffer overflow vulnerability exists in GStreamer Good Plug-ins. An attacker could exploit the vulnerability to execute arbitrary code in the context of a user running the affected...

9.8CVSS7.9AI score0.08911EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2016/11/28 12:00 a.m.•11 views

PT-2017-12377 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.11 Description: The issue allows privileged KVM guest OS users to cause a denial of service, leading to an assertion failure and host OS crash, by accessing the Performance Monitors Cycle Count Register...

9.8CVSS7.5AI score0.15073EPSS
SaveExploits65References147
Hacker One
Hacker One
•added 2016/11/22 7:08 a.m.•33 views

Pushwoosh: Read Application Name , Subscribers Count

Attacker was able to read app name and subscribers count...

2.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2016/11/15 11:40 a.m.•13 views

php: select_colors write out-of-bounds

The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers to cause a denial of service selectcolors allocation error and out-of-bounds write or possibly have unspecified other impac...

9.8CVSS7.4AI score0.08819EPSS
SaveExploits1References4
NVD
NVD
•added 2016/11/04 9:59 p.m.•28 views

CVE-2016-8910

The rtl8139cplustransmit function in hw/net/rtl8139.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption by leveraging failure to limit the ring descriptor count...

6CVSS6.2AI score0.00407EPSS
SaveExploits0References9
OSV
OSV
•added 2016/11/04 9:59 p.m.•12 views

DEBIAN-CVE-2016-8910

The rtl8139cplustransmit function in hw/net/rtl8139.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption by leveraging failure to limit the ring descriptor count...

6CVSS8.5AI score0.00407EPSS
SaveExploits0References1
OSV
OSV
•added 2016/11/04 9:59 p.m.•9 views

ALPINE-CVE-2016-8910

The rtl8139cplustransmit function in hw/net/rtl8139.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption by leveraging failure to limit the ring descriptor count...

6CVSS6.3AI score0.00407EPSS
SaveExploits0References1
Prion
Prion
•added 2016/11/04 9:59 p.m.•30 views

Design/Logic Flaw

The rtl8139cplustransmit function in hw/net/rtl8139.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption by leveraging failure to limit the ring descriptor count...

2.1CVSS6.4AI score0.00407EPSS
SaveExploits0References9Affected Software5
Cvelist
Cvelist
•added 2016/11/04 9:00 p.m.•51 views

CVE-2016-8910

The rtl8139cplustransmit function in hw/net/rtl8139.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption by leveraging failure to limit the ring descriptor count...

6.2AI score0.00407EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2016/10/05 4:00 p.m.•56 views

CVE-2016-7908

The mcffecdotx function in hw/net/mcffec.c in QEMU aka Quick Emulator does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via vectors involving a buffer descript...

4.4CVSS6.3AI score0.00425EPSS
SaveExploits0
Citrix
Citrix
•added 2016/09/30 12:00 a.m.•16 views

Netscaler Gateway license not getting applied and ICA user count shows as 0

Netscaler Gateway license not getting applied and ICA user count shows as 0 in GUI and CLI both. show ns license output shows as below: Http DoS Protection: YES Dynamic Routing: YES Content Filtering: YES Integrated Caching: NO SSL VPN: YES Maximum users = 5 Maximum ICA users = 0...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2016/09/26 12:00 a.m.•15 views

Reset the start count of MCS catalog after the catalog has already been created

...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2016/08/25 12:00 a.m.•12 views

PT-2016-7357 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, through vectors related to the number of pixels in the ReadRLEImage function...

10CVSS6.8AI score0.49982EPSS
SaveExploits16References413
OSV
OSV
•added 2016/08/25 12:00 a.m.•13 views

UBUNTU-CVE-2016-7515

The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the number of pixels...

6.5CVSS7AI score0.02947EPSS
SaveExploits0References4
exploitpack
exploitpack
•added 2016/08/23 12:00 a.m.•21 views

WordPress Plugin Mail Masta 1.0 - Local File Inclusion

WordPress Plugin Mail Masta 1.0 - Local File Inclusion + Date: 23-8-2016 + Autor Guillermo Garcia Marcos + Vendor: https://downloads.wordpress.org/plugin/mail-masta.zip + Title: Mail Masta WP Local File Inclusion + info: Local File Inclusion The File Inclusion vulnerability allows an attacker to...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2016/08/23 12:00 a.m.•16 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or cause other effects

The vulnerability of the drivers/thermal/supplylmcore.c file in the Qualcomm Android operating system is related to the lack of a check on the count parameter. Exploiting this vulnerability can allow an attacker to cause service failures or other effects through a specially created application...

6.8CVSS7.2AI score0.00385EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2016/08/19 12:00 a.m.•11 views

UBUNTU-CVE-2016-6888

Integer overflow in the nettxpktinit function in hw/net/nettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service QEMU process crash via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference...

4.4CVSS6.8AI score0.00396EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2016/08/12 12:00 a.m.•11 views

WordPress Count per Day Plugin <= 3.5.4 - Reflected XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

1.7AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2016/08/12 12:00 a.m.•18 views

WordPress Count Per Day Plugin <= 3.2.3 - Full Path Disclosure

This plugin is prone to multiple script direct request path disclosure vulnerability. Solution Update the plugin...

1.2AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder