Lucene search
+L

13884 matches found

OSV
OSV
added 2019/05/15 11:29 p.m.2 views

DEBIAN-CVE-2019-12109

A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for remport...

7.5CVSS6.9AI score0.0258EPSS
SaveExploits1References1
OSV
OSV
added 2019/05/15 11:29 p.m.1 views

DEBIAN-CVE-2019-12108

A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for intport...

7.5CVSS6.9AI score0.0258EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2019/05/15 12:00 a.m.8 views

PT-2019-12644 · Miniupnp +1 · Miniupnpd +1

Name of the Vulnerable Software and Affected Versions: MiniUPnPd versions prior to 2.1 Description: The issue allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value in the upnp event prepare function. Recommendations: For versions prior t...

7.8CVSS7.5AI score0.03404EPSS
SaveExploits6References29
Tenable Nessus
Tenable Nessus
added 2019/05/14 12:00 a.m.31 views

EulerOS Virtualization 3.0.1.0 : scsi-target-utils (EulerOS-SA-2019-1427)

According to the versions of the scsi-target-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Multiple buffer overflows in the iSNS implementation in isns.c in 1 Linux SCSI target framework aka tgt or...

5CVSS6.5AI score0.05347EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/05/14 12:00 a.m.38 views

EulerOS Virtualization 3.0.1.0 : rsync (EulerOS-SA-2019-1460)

According to the version of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemonfilterlist data...

9.8CVSS7.2AI score0.03097EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2019/05/07 12:00 a.m.57 views

Fedora Update for bird FEDORA-2018-6aada550ca

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.5AI score0.00392EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/05 6:29 a.m.8 views

UBUNTU-CVE-2019-11766

dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6OPTIONPDEXCLUDE feature...

9.8CVSS6AI score0.02104EPSS
SaveExploits0References8
IBM Security Bulletins
IBM Security Bulletins
added 2019/05/02 4:35 p.m.28 views

Security Bulletin: Security vulnerability in FlexNet Publisher affects IBM Rational License Key Server

Summary A security vulnerability in FlexNet Publisher from Flexera, used by IBM Rational License Key Server has been published. Required remediation has been addressed by IBM Rational License Key Server team. Vulnerability Details CVEID: CVE-2018-20033 DESCRIPTION: Flexera Software FlexNet...

9.8CVSS1.6AI score0.03669EPSS
SaveExploits0Affected Software1
Veracode
Veracode
added 2019/05/02 6:30 a.m.27 views

Denial Of Service (DoS)

NTP is vulnerable to denial of service attacks. a remote, unauthenticated attacker can send a specially crafted packet to trigger a null pointer dereference and cause the ntpd daemon to crash causing denial of service conditions...

5.9CVSS6.3AI score0.12963EPSS
SaveExploits1References15Affected Software1
Veracode
Veracode
added 2019/05/02 5:51 a.m.33 views

Buffer Overflow

Quagga is vulnerable to stack-based buffer overflow. This occurs when processing IPv6 Neighbor Discovery messages. An attacker could exploit the flaw in the 'zebra daemon' component to crash the application resulting in denial of service DoS...

9.8CVSS9AI score0.03457EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
added 2019/05/02 5:41 a.m.34 views

Man-In-The-Middle (MitM)

The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by...

7.5CVSS7AI score0.06135EPSS
SaveExploits0References39Affected Software1
Veracode
Veracode
added 2019/05/02 5:17 a.m.47 views

Denial Of Service (DoS)

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...

6.5CVSS6.3AI score0.06964EPSS
SaveExploits0References11Affected Software2
Veracode
Veracode
added 2019/05/02 5:17 a.m.42 views

Denial Of Service (DoS)

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...

6.5CVSS6.3AI score0.06964EPSS
SaveExploits0References12Affected Software2
Veracode
Veracode
added 2019/05/02 5:17 a.m.39 views

Denial Of Service (DoS)

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...

6.5CVSS6.3AI score0.06964EPSS
SaveExploits0References12Affected Software2
Veracode
Veracode
added 2019/05/02 5:17 a.m.36 views

Denial Of Service (DoS)

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...

6.5CVSS6.3AI score0.06964EPSS
SaveExploits0References12Affected Software2
Veracode
Veracode
added 2019/05/02 5:17 a.m.42 views

Denial Of Service (DoS)

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...

5.7CVSS6.3AI score0.09915EPSS
SaveExploits0References18Affected Software4
Veracode
Veracode
added 2019/05/02 5:17 a.m.27 views

Arbitrary Code Execution

CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. A string reference count bug was found in cupsd, causing premature freeing of string objects. An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged...

10CVSS6.4AI score0.29913EPSS
SaveExploits9References42Affected Software1
Veracode
Veracode
added 2019/05/02 5:12 a.m.23 views

Authentication Bypass

Red Hat Enterprise MRG Messaging, Realtime, and Grid is a next-generation IT infrastructure for enterprise computing. MRG offers increased performance, reliability, interoperability, and faster computing for enterprise customers. The Qpid packages provide a message broker daemon that receives,...

7.5CVSS6.8AI score0.12404EPSS
SaveExploits0References11Affected Software57
Veracode
Veracode
added 2019/05/02 5:12 a.m.24 views

Denial Of Service (DoS)

Red Hat Enterprise MRG Messaging, Realtime, and Grid is a next-generation IT infrastructure for enterprise computing. MRG offers increased performance, reliability, interoperability, and faster computing for enterprise customers. The Qpid packages provide a message broker daemon that receives,...

7.5CVSS6.8AI score0.12404EPSS
SaveExploits0References32Affected Software57
Veracode
Veracode
added 2019/05/02 4:55 a.m.28 views

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. A remote attacker is able to crash the application via excessive resource consumption and a daemon restart using malicious values in an HTTP request...

7.8CVSS1.8AI score0.32096EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder