Lucene search
+L

2725 matches found

CNVD
CNVD
added 2018/06/22 12:00 a.m.7 views

Cisco TelePresence Video Communication Server Expressway Denial of Service Vulnerability (CNVD-2018-11975)

Cisco TelePresence Video Communication Server VCS Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A...

7.5CVSS7.4AI score0.02367EPSS
SaveExploits0References1
Prion
Prion
added 2018/06/21 11:29 a.m.22 views

Race condition

A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server VCS Expressway could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to exhaustion of file descriptors while processing a high volume of...

5CVSS7.4AI score0.02367EPSS
SaveExploits0References3
CVE
CVE
added 2018/06/21 11:00 a.m.60 views

CVE-2018-0358

The CVE-2018-0358 entry affects Cisco TelePresence Video Communication Server (VCS) Expressway. The vulnerability stems from the handling of file descriptors, leading to exhaustion when processing a high volume of traffic. An unauthenticated, remote attacker could establish a large number of conc...

7.5CVSS7.5AI score0.02367EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/06/21 11:00 a.m.26 views

CVE-2018-0358

A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server VCS Expressway could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to exhaustion of file descriptors while processing a high volume of...

7.5AI score0.02367EPSS
SaveExploits0References3
NVD
NVD
added 2018/06/12 12:29 p.m.21 views

CVE-2018-12232

In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sockclose and sockfssetattr functions. fchownat does not increment the file descriptor reference count, which allows...

7.1CVSS5.8AI score0.05736EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2018/06/12 12:00 p.m.53 views

CVE-2018-12232

In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sockclose and sockfssetattr functions. fchownat does not increment the file descriptor reference count, which allows...

7.1CVSS6.8AI score0.05736EPSS
SaveExploits0
OSV
OSV
added 2018/06/12 12:00 a.m.11 views

UBUNTU-CVE-2018-12232

In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sockclose and sockfssetattr functions. fchownat does not increment the file descriptor reference count, which allows...

5.9CVSS6.7AI score0.05736EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2018/06/12 12:00 a.m.44 views

CVE-2018-12232

In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sockclose and sockfssetattr functions. fchownat does not increment the file descriptor reference count, which allows...

7.1CVSS6.8AI score0.05736EPSS
SaveExploits0References8
OSV
OSV
added 2018/06/08 9:29 p.m.3 views

DEBIAN-CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

7.5CVSS7.3AI score0.08546EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/06/08 9:00 p.m.38 views

CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

8AI score0.08546EPSS
SaveExploits0References21
AlpineLinux
AlpineLinux
added 2018/06/08 9:00 p.m.54 views

CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

7.5CVSS8.1AI score0.08546EPSS
SaveExploits0
OSV
OSV
added 2018/06/08 12:00 a.m.7 views

UBUNTU-CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

7.5CVSS6.8AI score0.08546EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2018/06/08 12:00 a.m.11 views

PT-2018-2214 · Gnu +5 · Gnupg +5

Name of the Vulnerable Software and Affected Versions: GnuPG versions prior to 2.2.8 Description: The issue is related to the mishandling of the original filename during decryption and verification actions in the mainproc.c component. This allows remote attackers to spoof output sent to other...

9.3CVSS6.5AI score0.08548EPSS
SaveExploits13References147
zdt
zdt
added 2018/05/31 12:00 a.m.29 views

Linux/x86 - Bind (4444/TCP) Shell Shellcode (105 bytes)

/ ; Filename: tcpbindshellcodelight.nasm ; Author: Paolo Perego ; Website: https://codiceinsicuro.it ; Twitter: @thesp0nge ; SLAE-ID: 1217 ; Purpose: binds on TCP port 4444 and spawn a shell on incoming connections. global start section .text start: ; Creating the socket. ; ; int socketint domain...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2018/05/03 12:00 a.m.7 views

GNU Binutils Binary File Descriptor Library Denial of Service Vulnerability (CNVD-2018-09227)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

5.5CVSS6.8AI score0.03871EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/03 12:00 a.m.4 views

GNU Binutils Binary File Descriptor Library Denial of Service Vulnerability (CNVD-2018-09562)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

5.5CVSS6.8AI score0.03069EPSS
SaveExploits0References1
OSV
OSV
added 2018/04/29 3:29 p.m.9 views

DEBIAN-CVE-2018-10534

The bfdXXbfdcopyprivatebfddatacommon function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of externalIMAGEDEBUGDIRECTORY edd so that the address...

5.5CVSS7.7AI score0.03069EPSS
SaveExploits0References1
Prion
Prion
added 2018/04/29 3:29 p.m.29 views

Design/Logic Flaw

The bfdXXbfdcopyprivatebfddatacommon function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of externalIMAGEDEBUGDIRECTORY edd so that the address...

4.3CVSS6.5AI score0.03069EPSS
SaveExploits0References6Affected Software4
UbuntuCve
UbuntuCve
added 2018/04/29 3:29 p.m.29 views

CVE-2018-10534

The bfdXXbfdcopyprivatebfddatacommon function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of externalIMAGEDEBUGDIRECTORY edd so that the address...

5.5CVSS6.8AI score0.03069EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2018/04/29 3:00 p.m.28 views

CVE-2018-10534

The bfdXXbfdcopyprivatebfddatacommon function in peXXigen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of externalIMAGEDEBUGDIRECTORY edd so that the address...

6.3AI score0.03069EPSS
SaveExploits0References6
Rows per page
Query Builder