Lucene search
+L

450 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/03/12 12:00 a.m.54 views

Microsoft Windows DHCP Client Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DHCP Client service. A crafted DHCP packet can trigger an integer...

5CVSS4.1AI score0.52468EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2019/03/12 12:00 a.m.153 views

KLA11438 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

9.8CVSS9.6AI score0.64364EPSS
SaveExploits0References68
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.9 views

The vulnerability of the DHCP Client component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the DHCP Client component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain full control over the application using the DHCP protocol...

7.5CVSS7.2AI score0.00776EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/01/16 7:30 p.m.20 views

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

7.5CVSS7.1AI score0.00776EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/16 7:30 p.m.9 views

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

7.5CVSS7.1AI score0.00776EPSS
SaveExploits0References2
Prion
Prion
added 2019/01/16 7:30 p.m.24 views

Design/Logic Flaw

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

5.4CVSS7.6AI score0.00776EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/01/16 7:00 p.m.30 views

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

7.2AI score0.00776EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2019/01/16 7:00 p.m.13 views

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

6.3AI score0.00776EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/01/16 12:00 a.m.18 views

Unspecified Vulnerability in Oracle Solaris (CNVD-2019-28425)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the DHCP Client subcomponent of the Solaris component version 10 of the Oracle Sun Systems Products...

7.5CVSS8.6AI score0.00776EPSS
SaveExploits0References1
Veracode
Veracode
added 2019/01/15 9:16 a.m.26 views

Arbitrary Code Execution

bash is vulnerable to arbitrary code execution. A flaw was found in the way bash processed the hostname value. A malicious DHCP server could use this flaw to execute arbitrary commands on the DHCP client machines running bash under specific circumstances...

7.5CVSS8.4AI score0.05615EPSS
SaveExploits0References19Affected Software3
Tenable Nessus
Tenable Nessus
added 2019/01/15 12:00 a.m.28 views

Solaris 10 (x86) : 148310-10

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

7.5CVSS7.4AI score0.00776EPSS
SaveExploits0References2
Krebs on Security
Krebs on Security
added 2019/01/09 2:46 p.m.102 views

Patch Tuesday, January 2019 Edition

Microsoft on Tuesday released updates to fix roughly four dozen security issues with its Windows operating systems and related software. All things considered, this first Patch Tuesday of 2019 is fairly mild, bereft as it is of any new Adobe Flash updates or zero-day exploits. But there are a few...

9.3CVSS0.8AI score0.67381EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2019/01/09 7:33 a.m.2 views

Microsoft Patch Tuesday — January 2019 Security Updates Released

Microsoft has issued its first Patch Tuesday for this year to address 49 CVE-listed security vulnerabilities in its Windows operating systems and other products, 7 of which are rated critical, 40 important and 2 moderate in severity. Just one of the security vulnerabilities patched by the tech...

9.3CVSS7.9AI score0.29822EPSS
SaveExploits2
OSV
OSV
added 2019/01/08 9:29 p.m.7 views

CVE-2019-0547

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code Execution Vulnerability." This affects Windows 10, Windows 10 Servers...

9.8CVSS7.3AI score0.67381EPSS
SaveExploits0References2
NVD
NVD
added 2019/01/08 9:29 p.m.34 views

CVE-2019-0547

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code Execution Vulnerability." This affects Windows 10, Windows 10 Servers...

9.8CVSS9.7AI score0.67381EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2019/01/08 8:49 p.m.46 views

Microsoft Issues Multiple Critical Patches for Edge Browser

Microsoft patched a bevy of critical bugs impacting its Edge browser that could allow an attacker to hijack a targeted PC simply by steering a victim to a rigged website harboring specially crafted exploit code. In all, Microsoft tackled four critical Edge vulnerabilities, part of the company’s...

9.3CVSS0.8AI score0.75577EPSS
SaveExploits20References12
Symantec
Symantec
added 2019/01/08 12:00 a.m.428 views

Microsoft Windows DHCP Client CVE-2019-0547 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successfully exploiting this issue may result in the execution of arbitrary code in the context of the affected system. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affecte...

1.4AI score0.67381EPSS
SaveExploits0Affected Software2
Kaspersky
Kaspersky
added 2019/01/08 12:00 a.m.115 views

KLA11394 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information and execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Windows Data...

9.8CVSS9AI score0.67381EPSS
SaveExploits28References50
NVD
NVD
added 2018/12/23 2:29 a.m.22 views

CVE-2018-20373

Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client...

5.4CVSS5.3AI score0.0074EPSS
SaveExploits3References2
NVD
NVD
added 2018/12/23 2:29 a.m.19 views

CVE-2018-20372

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

5.4CVSS5.4AI score0.0074EPSS
SaveExploits3References2
Rows per page
Query Builder