Lucene search
+L

5608 matches found

osv_ubuntu
osv_ubuntu
•added 2020/01/03 5:15 p.m.•54 views

UBUNTU-CVE-2012-4451

Multiple cross-site scripting XSS vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to 1 Debug, 2 Feed\PubSubHubbub, 3 Log\Formatter\Xml, 4 Tag\Cloud\Decorator, 5 Uri, 6 View\Helper\HeadStyle, 7...

6.1CVSS6.5AI score0.01367EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/03 12:00 a.m.•4 views

CVE-2012-4451: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to 1 Debug, 2 Feed\PubSubHubbub, 3 Log\Formatter\Xml, 4 Tag\Cloud\Decorator, 5 Uri, 6 View\Helper\HeadStyle, 7...

6.1CVSS6.5AI score0.01367EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/12/30 12:00 a.m.•18 views

Proxyman Privileged Helper Tool Data Forgery Issue Vulnerability

Proxyman is an HTTP debugging proxy application from Proxyman for the macOS platform. The program is able to view, proxy and intercept HTTP/HTTPS requests.Privileged Helper Tool is one of the helper tools. A security vulnerability exists in com.proxyman.NSProxy.HelperTool based on Privileged Help...

4.3CVSS6.7AI score0.00434EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/12/29 7:15 p.m.•33 views

CVE-2019-20057

com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling MITM attacks...

3.7CVSS6.7AI score0.00434EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/29 7:15 p.m.•28 views

CVE-2019-20057

com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling MITM attacks...

4.3CVSS4.1AI score0.00434EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/29 7:15 p.m.•33 views

Code injection

com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling MITM attacks...

4.3CVSS4.2AI score0.00434EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/12/29 6:28 p.m.•38 views

CVE-2019-20057

com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling MITM attacks...

4.1AI score0.00434EPSS
SaveExploits0References1
CVE
CVE
•added 2019/12/29 6:28 p.m.•176 views

CVE-2019-20057

Proxyman for macOS up to version 1.11.0 is affected by CVE-2019-20057 due to the com.proxyman.NSProxy.HelperTool in Privileged Helper Tool. An attacker could abuse this component to modify the System Proxy, causing all traffic to be redirected to a malicious host and enabling MITM attacks. The vu...

4.3CVSS4.1AI score0.00434EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/29 12:00 a.m.•7 views

CVE-2019-20057: Insufficient Verification of Data Authenticity

com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling MITM attacks...

4.3CVSS5.5AI score0.00434EPSS
SaveExploits0References2
NVD
NVD
•added 2019/12/20 2:15 p.m.•28 views

CVE-2012-3409

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

7.8CVSS7.8AI score0.00409EPSS
SaveExploits0References6
Prion
Prion
•added 2019/12/20 2:15 p.m.•16 views

Privilege escalation

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

4.6CVSS7.2AI score0.00409EPSS
SaveExploits0References6Affected Software2
osv_ubuntu
osv_ubuntu
•added 2019/12/20 2:15 p.m.•17 views

UBUNTU-CVE-2012-3409

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

7.8CVSS5.8AI score0.00409EPSS
SaveExploits0References3
CVE
CVE
•added 2019/12/20 1:33 p.m.•105 views

CVE-2012-3409

The vulnerability CVE-2012-3409 affects ecryptfs-utils: the suid helper does not restrict mounting filesystems with nosuid,nodev, enabling a possible local privilege escalation. Multiple advisories reference this issue (SUSE CVE-2012-3409; Debian security tracker; Ubuntu-related OSV entries; Fedo...

7.8CVSS7.6AI score0.00409EPSS
SaveExploits0References6Affected Software1
Mend
Mend
•added 2019/12/20 1:33 p.m.•11 views

CVE-2012-3409

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

8.5CVSS0.00409EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/20 12:00 a.m.•5 views

CVE-2012-3409: Improper Input Validation

ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...

7.8CVSS7.3AI score0.00409EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/12/20 12:00 a.m.•5 views

PT-2019-6768

Name of the Vulnerable Software and Affected Versions ecryptfs-utils affected versions not specified Description The issue is related to the suid helper in ecryptfs-utils, which does not properly restrict mounting filesystems with nosuid and nodev options. This oversight creates a possible...

7.8CVSS0.00409EPSS
SaveExploits0References14
osv_usn
osv_usn
•added 2019/11/14 12:25 a.m.•26 views

USN-4191-2 qemu vulnerabilities

USN-4191-2 fixed a vulnerability in QEMU. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that the LSI SCSI adapter emulator implementation in QEMU did not properly validate executed scripts. A local attacker could use this to cause...

8.8CVSS7.3AI score0.16658EPSS
SaveExploits5References6
Ubuntu
Ubuntu
•added 2019/11/14 12:14 a.m.•159 views

USN-4191-1: QEMU vulnerabilities

It was discovered that the LSI SCSI adapter emulator implementation in QEMU did not properly validate executed scripts. A local attacker could use this to cause a denial of service. CVE-2019-12068 Sergej Schumilo, Cornelius Aschermann and Simon Wörner discovered that the qxl paravirtual graphics...

8.8CVSS7.6AI score0.16658EPSS
SaveExploits5
Zero Day Initiative
Zero Day Initiative
•added 2019/11/13 12:00 a.m.•53 views

Microsoft Windows IP Helper Service Hard Link Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

5.3CVSS3.4AI score0.02065EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/05 12:00 a.m.•5 views

CVE-2010-3672: Improper Neutralization of Input During Web Page Generation

TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension...

6.1CVSS6AI score0.00952EPSS
SaveExploits0References2
Rows per page
Query Builder