Lucene search
+L

6080 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/04/06 12:0 a.m.32 views

Trend Micro Maximum Security tmnciesc Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.2CVSS4.2AI score0.00504EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/06 12:0 a.m.26 views

Trend Micro Maximum Security tmnciesc Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers disclose sensitive information on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...

4.6CVSS2.2AI score0.00685EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/04/06 12:0 a.m.28 views

Trend Micro Maximum Security tmnciesc Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

7.2CVSS2.9AI score0.00471EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/04/06 12:0 a.m.39 views

Ubuntu: Security Advisory (USN-3620-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.05233EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/04/05 12:0 a.m.73 views

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3620-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3620-1 advisory. It was discovered that the netlink 802.11 configuration interface in the Linux kernel did not properly validate some attributes passed from userspace. A...

10CVSS7.6AI score0.05233EPSS
SaveExploits0References9
OSV
OSV
added 2018/04/04 7:44 p.m.13 views

USN-3620-1 linux vulnerabilities

It was discovered that the netlink 802.11 configuration interface in the Linux kernel did not properly validate some attributes passed from userspace. A local attacker with the CAPNETADMIN privilege could use this to cause a denial of service system crash or possibly execute arbitrary code...

10CVSS7.2AI score0.05233EPSS
SaveExploits0References9
Prion
Prion
added 2018/04/03 5:29 p.m.14 views

Null pointer dereference

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur...

9.3CVSS7.1AI score0.00437EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2018/04/03 5:29 p.m.2 views

CVE-2017-17770

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur...

9.3CVSS7.5AI score0.00437EPSS
SaveExploits0References2
Prion
Prion
added 2018/03/30 9:29 p.m.16 views

Race condition

While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of allocated memory. If one thread sends an ioctl cmd IPAIOCQUERYRTTBLINDEX while another sends an ioctl cmd IPAIOCDELRTRULE, a use-after-free conditi...

7.5CVSS9.2AI score0.00605EPSS
SaveExploits0References2
NVD
NVD
added 2018/03/30 9:29 p.m.15 views

CVE-2017-14877

While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of allocated memory. If one thread sends an ioctl cmd IPAIOCQUERYRTTBLINDEX while another sends an ioctl cmd IPAIOCDELRTRULE, a use-after-free conditi...

9.8CVSS7.5AI score0.00605EPSS
SaveExploits0References2
NVD
NVD
added 2018/03/30 9:29 p.m.25 views

CVE-2017-14881

While calling the IPA IOCTL handler for IPAIOCADDHDRPROCCTX in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-13, a use-after-free condition may potentially occur...

9.8CVSS7.4AI score0.00605EPSS
SaveExploits0References2
NVD
NVD
added 2018/03/30 9:29 p.m.18 views

CVE-2017-14875

In the handler for the ioctl command VIDIOCMSMISPDUALHWLPMMODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a heap overread vulnerability exists...

7.5CVSS7AI score0.00542EPSS
SaveExploits0References2
CVE
CVE
added 2018/03/30 9:0 p.m.46 views

CVE-2017-14875

CVE-2017-14875 describes a heap overread in the ioctl handler VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE used by Android for MSM, Firefox OS for MSM, and QRD Android prior to 2017-05-23. The provided documents name the affected environments and the general vulnerability class but do not provide further root...

7.5CVSS7.5AI score0.00542EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/03/30 9:0 p.m.25 views

CVE-2017-14877

While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of allocated memory. If one thread sends an ioctl cmd IPAIOCQUERYRTTBLINDEX while another sends an ioctl cmd IPAIOCDELRTRULE, a use-after-free conditi...

7.5AI score0.00605EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/03/30 9:0 p.m.21 views

CVE-2017-14881

While calling the IPA IOCTL handler for IPAIOCADDHDRPROCCTX in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-13, a use-after-free condition may potentially occur...

7.4AI score0.00605EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2018/03/30 9:0 p.m.59 views

CVE-2018-7566

The Linux kernel 4.15 has a Buffer Overflow via an SNDRVSEQIOCTLSETCLIENTPOOL ioctl write operation to /dev/snd/seq by a local user...

7.8CVSS8AI score0.005EPSS
SaveExploits0
Prion
Prion
added 2018/03/30 7:29 p.m.19 views

Null pointer dereference

A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030...

4.9CVSS5.2AI score0.00288EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/03/30 7:0 p.m.21 views

CVE-2018-9151

A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030...

5.2AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
added 2018/03/30 7:0 p.m.42 views

CVE-2018-9151

CVE-2018-9151 affects the Kingsoft Internet Security 9+ kernel driver KWatch3.sys, with a NULL pointer dereference in the function ObReferenceObjectByHandle. It allows local, non-privileged users to crash the system via IOCTL 0x80030030. The provided connected documents confirm the affected compo...

5.5CVSS5.2AI score0.00288EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/03/27 3:29 a.m.23 views

CVE-2018-9051

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002021...

7.8CVSS8AI score0.00413EPSS
SaveExploits1References1
Rows per page
Query Builder