Lucene search
+L

4200 matches found

Prion
Prion
added 2018/03/15 9:29 p.m.21 views

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame...

10CVSS8.8AI score0.01416EPSS
SaveExploits0References3
NVD
NVD
added 2018/03/15 9:29 p.m.24 views

CVE-2017-15815

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame...

10CVSS8.1AI score0.01416EPSS
SaveExploits0References3
CVE
CVE
added 2018/03/15 9:0 p.m.53 views

CVE-2017-15815

CVE-2017-15815 describes a potential buffer overflow in the WLAN processing path of Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel, specifically when handling 802.11 MGMT frames (e.g., Auth) inside limProcessAuthFrame. The issue is triggered during processing o...

10CVSS9AI score0.01416EPSS
SaveExploits0References3Affected Software1
android
android
added 2018/03/01 12:0 a.m.32 views

CVE-2017-15815

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame...

10CVSS4.6AI score0.01416EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/01/25 12:0 a.m.3 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2018-02234)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 58. A remote attacker could exploit the vulnerability to access frames across sources...

9.8CVSS8.7AI score0.01183EPSS
SaveExploits0References1
Schneier on Security
Schneier on Security
added 2018/01/24 11:28 a.m.47 views

Detecting Drone Surveillance with Traffic Analysis

This is clever: Researchers at Ben Gurion University in Beer Sheva, Israel have built a proof-of-concept system for counter-surveillance against spy drones that demonstrates a clever, if not exactly simple, way to determine whether a certain person or object is under aerial surveillance. They fir...

6.6AI score
SaveExploits0
Cvelist
Cvelist
added 2018/01/23 2:0 p.m.39 views

CVE-2015-1142857

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before...

6.2AI score0.02429EPSS
SaveExploits0References3
CVE
CVE
added 2018/01/23 2:0 p.m.93 views

CVE-2015-1142857

CVE-2015-1142857 describes a network-virtualization flaw where VFs assigned to guests can cause ethernet flow-control pause frames to be sent via the PF on SR-IOV NICs. The vulnerability affects multiple drivers and firmware families: Linux ixgbe (before commit f079fa005aae08ee0e1bc32699874ff4f02...

8.6CVSS5.9AI score0.02429EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2018/01/23 12:0 a.m.22 views

CVE-2018-5116

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with th...

9.8CVSS7.3AI score0.01183EPSS
SaveExploits0References3
OSV
OSV
added 2018/01/23 12:0 a.m.4 views

UBUNTU-CVE-2018-5116

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with th...

9.8CVSS7.4AI score0.01183EPSS
SaveExploits0References4
OSV
OSV
added 2018/01/12 11:29 p.m.4 views

CVE-2017-13196

In several places in ihevcddecode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS5.9AI score0.02173EPSS
SaveExploits0References3
Prion
Prion
added 2018/01/12 11:29 p.m.20 views

Design/Logic Flaw

In several places in ihevcddecode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.5AI score0.02173EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2017/12/01 12:0 a.m.8 views

PT-2017-14150 · Apache · Apache Qpid Broker-J

Name of the Vulnerable Software and Affected Versions: Apache Qpid Broker-J versions 6.1.0 through 6.1.4 Description: The issue arises from the broker's failure to properly enforce a maximum frame size in AMQP 1.0 frames, allowing a remote unauthenticated attacker to cause the broker to exhaust a...

7.5CVSS7.4AI score0.04389EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
added 2017/11/21 2:29 p.m.37 views

CVE-2017-5729

Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle...

7.4CVSS7.1AI score0.0134EPSS
SaveExploits0References2
CNVD
CNVD
added 2017/11/21 12:0 a.m.6 views

Cisco Meeting Server Denial of Service Vulnerability (CNVD-2017-34912)

Cisco Meeting Server formerly known as Acano Conferencing Server, CMS is the United States Cisco Cisco company's set of audio and video conferencing server software. A denial of service vulnerability exists in the H.26 decoder function in Cisco Meeting Server. A remote attacker can exploit this...

5.8CVSS6.8AI score0.02197EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/11/17 12:0 a.m.34 views

GNU Binutils Denial of Service Vulnerability (CNVD-2017-34506)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data, and assembly source code. A denial of service vulnerability exists in the displaydebugframes function in dwarf.c in GNU Binutils 2.29.1. A remote attacker can exploit this...

7.8CVSS7.4AI score0.01792EPSS
SaveExploits1References1
NVD
NVD
added 2017/11/16 9:29 p.m.20 views

CVE-2017-16867

Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for 1 delivery drivers to freeze a camera and re-enter a house for unfilmed activities or 2 attackers to freeze a camera and enter a house if a delivery driver fail...

6.5CVSS6.5AI score0.02222EPSS
SaveExploits0References4
CVE
CVE
added 2017/11/16 9:0 p.m.52 views

CVE-2017-16867

The CVE-2017-16867 entry describes Amazon Key’s Cloud Cam mishandling 802.11 deauthentication frames during delivery, allowing a camera to be frozen and an interior entry under two scenarios. Affected: Cloud Cam devices used with Amazon Key up to 2017-11-16. Root cause: mishandling of deauth fram...

6.5CVSS6.4AI score0.02222EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2017/11/16 9:0 p.m.22 views

CVE-2017-16867

Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for 1 delivery drivers to freeze a camera and re-enter a house for unfilmed activities or 2 attackers to freeze a camera and enter a house if a delivery driver fail...

6.5AI score0.02222EPSS
SaveExploits0References4
OSV
OSV
added 2017/11/15 8:29 a.m.4 views

UBUNTU-CVE-2017-16828

The displaydebugframes function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service integer overflow and heap-based buffer over-read, and application crash or possibly have unspecified other impact via a crafted ELF file, related to printdebugframe...

7.8CVSS7.2AI score0.01792EPSS
SaveExploits1References3
Rows per page
Query Builder