Lucene search
+L

7977 matches found

OSV
OSV
added 2018/06/26 4:29 p.m.3 views

DEBIAN-CVE-2018-1000500

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...

8.1CVSS9AI score0.02462EPSS
SaveExploits0References1
OSV
OSV
added 2018/06/26 4:29 p.m.37 views

CVE-2018-1000500

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...

8.1CVSS8.4AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2018/06/26 4:29 p.m.47 views

CVE-2018-1000500

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...

8.1CVSS7AI score0.02462EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2018/06/26 4:00 p.m.14 views

CVE-2018-1000500

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...

9AI score0.02462EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2018/06/26 4:00 p.m.134 views

CVE-2018-1000500

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file"...

8.1CVSS9.1AI score0.02462EPSS
SaveExploits0
NVD
NVD
added 2018/06/21 11:29 a.m.25 views

CVE-2018-0298

A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to incorrect input validation in the web UI. An attacker could exploit this vulnerabili...

7.8CVSS7.8AI score0.01975EPSS
SaveExploits0References1
Prion
Prion
added 2018/06/21 11:29 a.m.24 views

Command injection

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to the management interface on an affected system and execute a command-injection exploit. The vulnerability is due to incorrect input validation of user-supplied...

9CVSS8.9AI score0.03996EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/06/21 11:00 a.m.30 views

CVE-2018-0298

A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to incorrect input validation in the web UI. An attacker could exploit this vulnerabili...

7.8AI score0.01975EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2018/06/21 11:00 a.m.15 views

CVE-2018-0313

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to the management interface on an affected system and execute a command-injection exploit. The vulnerability is due to incorrect input validation of user-supplied...

7.7AI score0.03996EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2018/06/21 11:00 a.m.11 views

CVE-2018-0298

A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to incorrect input validation in the web UI. An attacker could exploit this vulnerabili...

7.5AI score0.01975EPSS
SaveExploits0References1
OSV
OSV
added 2018/06/20 9:29 p.m.10 views

CVE-2018-0301

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the...

9.8CVSS6.5AI score0.17038EPSS
SaveExploits0References3
Prion
Prion
added 2018/06/20 9:29 p.m.28 views

Buffer overflow

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the...

10CVSS9.8AI score0.17038EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2018/06/20 9:00 p.m.21 views

CVE-2018-0301

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the...

8.2AI score0.17038EPSS
SaveExploits0References3
Cisco
Cisco
added 2018/06/20 4:00 p.m.136 views

Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the...

9.8CVSS2.3AI score0.17038EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/06/20 4:00 p.m.55 views

Cisco FXOS Software and UCS Fabric Interconnect Web UI Denial of Service Vulnerability

A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to incorrect input validation in the web UI. An attacker could exploit this vulnerabili...

8.6CVSS1.7AI score0.01975EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/06/19 12:00 a.m.59 views

Burp Suite CE 1.7.32 - 1.7.33 MITM Vulnerability - Linux

Burp Suite Community Edition is prone to a man-in-the-middle MITM vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.4CVSS7.5AI score0.00494EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/06/19 12:00 a.m.70 views

Burp Suite CE 1.7.32 - 1.7.33 MITM Vulnerability - Windows

Burp Suite Community Edition is prone to a man-in-the-middle MITM vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

7.4CVSS7.5AI score0.00494EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/06/19 12:00 a.m.69 views

Burp Suite CE 1.7.32 - 1.7.33 MITM Vulnerability - Mac OS X

Burp Suite Community Edition is prone to a man-in-the-middle MITM vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.4CVSS7.5AI score0.00494EPSS
SaveExploits0References1
OSV
OSV
added 2018/06/18 2:29 p.m.11 views

CVE-2018-1153

Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic...

7.4CVSS5.8AI score0.00494EPSS
SaveExploits0References2
NVD
NVD
added 2018/06/18 2:29 p.m.16 views

CVE-2018-1153

Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic...

7.4CVSS7.3AI score0.00494EPSS
SaveExploits0References2
Rows per page
Query Builder