Lucene search
+L

254 matches found

Cvelist
Cvelist
added 2019/01/18 10:0 p.m.30 views

CVE-2018-3595

Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 7...

5.6AI score0.00201EPSS
SaveExploits0References2
OSV
OSV
added 2018/12/13 10:29 p.m.11 views

CVE-2018-15776

Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell...

6.8CVSS5.8AI score0.00941EPSS
SaveExploits0References2
Prion
Prion
added 2018/08/03 6:29 p.m.20 views

Design/Logic Flaw

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

5CVSS5.3AI score0.00961EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2018/08/03 6:29 p.m.23 views

CVE-2018-14907

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

5.3CVSS5.3AI score0.00961EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/08/03 6:0 p.m.26 views

CVE-2018-14907

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

5.3AI score0.00961EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2018/04/12 12:0 a.m.10 views

The vulnerability of the libavc library in the Media Framework component of the Android operating system allows a hacker to trigger a service failure.

The vulnerability of the libavc library in the Media Framework component of the Android operating system is related to improper error handling during memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

7.8CVSS7.7AI score0.00463EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2018/03/13 3:29 p.m.19 views

CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3CVSS5.3AI score0.01578EPSS
SaveExploits1References1
OSV
OSV
added 2018/03/13 3:29 p.m.7 views

CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3CVSS5.7AI score0.01578EPSS
SaveExploits1References1
Prion
Prion
added 2018/03/13 3:29 p.m.21 views

Input validation

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5CVSS5.3AI score0.01578EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2018/03/13 3:29 p.m.25 views

PYSEC-2018-112

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3CVSS3.3AI score0.01578EPSS
SaveExploits1References3
CVE
CVE
added 2018/03/13 3:0 p.m.52 views

CVE-2018-1000083

CVE-2018-1000083 affects Ajenti version 2. The vulnerability is an improper error handling in the Login JSON request that can disclose the server path through a traceback when a malformed JSON is sent. Exploitation details are not provided in the connected documents beyond the error-path disclosu...

5.3CVSS5.2AI score0.01578EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2018/03/13 3:0 p.m.27 views

CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3AI score0.01578EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2018/01/18 12:0 a.m.9 views

The vulnerability of the hdpvr_probe function (drivers/media/usb/hdpvr/hdpvr-core.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the hdpvrprobe function drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel is related to improper error handling. Exploiting this vulnerability can allow a local attacker to cause service failures or other effects through a specially crafted USB device...

6.8CVSS6.8AI score0.00399EPSS
SaveExploits0References16Affected Software1
NVD
NVD
added 2017/11/30 9:29 a.m.22 views

CVE-2017-12353

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a...

5.8CVSS5.8AI score0.01638EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2017/11/22 12:19 p.m.54 views

CVE-2017-16644

The hdpvrprobe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service improper error handling and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS6.3AI score0.00399EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2017/11/07 12:0 a.m.32 views

CVE-2017-16644

The hdpvrprobe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service improper error handling and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS6.8AI score0.00399EPSS
SaveExploits0References6
NVD
NVD
added 2017/10/24 9:29 p.m.14 views

CVE-2017-1583

IBM WebSphere Application Server IBM Liberty for Java for Bluemix 3.13could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF...

7.5CVSS7.2AI score0.0319EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2017/10/24 9:0 p.m.20 views

CVE-2017-1583

IBM WebSphere Application Server IBM Liberty for Java for Bluemix 3.13could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF...

7.3AI score0.0319EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2016/12/13 12:0 a.m.31 views

CVE-2016-1252

The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection...

5.9CVSS6.1AI score0.07308EPSS
SaveExploits3References2
OSV
OSV
added 2016/12/13 12:0 a.m.4 views

UBUNTU-CVE-2016-1252

The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection...

5.9CVSS6.1AI score0.07308EPSS
SaveExploits3References3
Rows per page
Query Builder