Lucene search
+L

6429 matches found

Prion
Prion
•added 2020/02/07 6:15 p.m.•22 views

Input validation

A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs...

4.3CVSS7AI score0.01505EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2020/02/07 5:03 p.m.•6 views

CVE-2014-5278

A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs...

6.9CVSS0.01505EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2020/02/07 5:03 p.m.•72 views

CVE-2014-5278

A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs...

5.3CVSS5.2AI score0.01505EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/02/07 5:03 p.m.•35 views

CVE-2014-5278

A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs...

5.2AI score0.01505EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2020/02/07 12:57 p.m.•12 views

SUSE-SU-2020:0370-1 Security update for wicked

This update for wicked fixes the following issues: - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IAPD option bsc1160904. - CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids bsc1160906...

9.8CVSS8.5AI score0.02416EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/07 12:00 a.m.•2 views

CVE-2014-5278: Undefined Security Weakness

A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs...

5.3CVSS5.9AI score0.01505EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/02/07 12:00 a.m.•3 views

PT-2020-7712

Name of the Vulnerable Software and Affected Versions Docker versions prior to 1.2 Description A issue exists where container names may collide with and override container IDs. Recommendations For versions prior to 1.2, update to version 1.2 or later to resolve the issue...

5.3CVSS0.01505EPSS
SaveExploits0References7
NVD
NVD
•added 2020/02/06 4:15 p.m.•36 views

CVE-2014-10400

The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875...

6.1CVSS6.2AI score0.01248EPSS
SaveExploits0References3
NVD
NVD
•added 2020/02/06 4:15 p.m.•33 views

CVE-2014-2875

The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which allows remote attackers to hijack arbitrary sessions via a brute force attack. NOTE: CVE-2014-10399 and CVE-2014-10400 were SPLIT from this ID...

6.1CVSS6.2AI score0.01631EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2020/02/06 4:15 p.m.•18 views

CVE-2014-2875

The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which allows remote attackers to hijack arbitrary sessions via a brute force attack. NOTE: CVE-2014-10399 and CVE-2014-10400 were SPLIT from this ID...

6.1CVSS6.8AI score
SaveExploits0References4
Mend
Mend
•added 2020/02/06 3:26 p.m.•5 views

CVE-2014-10400

The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875...

6.1CVSS0.01248EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2020/02/06 3:26 p.m.•39 views

CVE-2014-10400

The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875...

6.2AI score0.01248EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2020/02/06 3:26 p.m.•49 views

CVE-2014-10400

The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875...

6.1CVSS6.2AI score0.01248EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/02/06 3:26 p.m.•47 views

CVE-2014-2875

The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which allows remote attackers to hijack arbitrary sessions via a brute force attack. NOTE: CVE-2014-10399 and CVE-2014-10400 were SPLIT from this ID...

6.2AI score0.01631EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2020/02/06 3:26 p.m.•55 views

CVE-2014-2875

The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which allows remote attackers to hijack arbitrary sessions via a brute force attack. NOTE: CVE-2014-10399 and CVE-2014-10400 were SPLIT from this ID...

6.1CVSS6.2AI score0.01631EPSS
SaveExploits0
CVE
CVE
•added 2020/02/06 3:26 p.m.•67 views

CVE-2014-2875

CVE-2014-2875 refers to the session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2, which uses weak session IDs generated from OS time. This allows remote attackers to hijack arbitrary sessions via brute-force guessing. The issue is documented as a split from CVE-2014-10399 and CVE-2014-10400....

6.1CVSS6.1AI score0.01631EPSS
SaveExploits0References3Affected Software1
Apple
Apple
•added 2020/02/06 7:51 a.m.•141 views

About the security content of macOS High Sierra 10.13 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

10CVSS7.5AI score0.7907EPSS
SaveExploits18Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/06 12:00 a.m.•6 views

CVE-2014-10400: Session Fixation

The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875...

6.1CVSS6.5AI score0.01248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/02/06 12:00 a.m.•4 views

PT-2020-7599

Name of the Vulnerable Software and Affected Versions CGILua versions 5.0.x Description The session.lua library uses sequential session IDs, making it easier for remote attackers to predict the session ID and hijack arbitrary sessions. Recommendations For CGILua versions 5.0.x, consider...

6.1CVSS0.01248EPSS
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
•added 2020/02/05 12:53 a.m.•19 views

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1487)

Summary IBM Sterling File Gateway could allow an authenticated attacker to obtain sensitive information such as login ids on the system. Vulnerability Details CVEID: CVE-2017-1487 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated attacker to obtain sensitive information such as...

6.5CVSS1.3AI score0.01148EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder