Lucene search
+L

333 matches found

Cvelist
Cvelist
•added 2018/08/03 6:00 p.m.•38 views

CVE-2018-14907

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

5.3AI score0.00961EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/04 12:00 a.m.•3 views

CVE-2017-16014: Improper Check or Handling of Exceptional Conditions

Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service...

7.5CVSS7.2AI score0.01687EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2018/04/12 12:00 a.m.•18 views

The vulnerability of the libavc library in the Media Framework component of the Android operating system allows a hacker to trigger a service failure.

The vulnerability of the libavc library in the Media Framework component of the Android operating system is related to improper error handling during memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

7.8CVSS7.7AI score0.00463EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2018/03/13 3:29 p.m.•16 views

CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3CVSS5.7AI score0.01549EPSS
SaveExploits1References1
NVD
NVD
•added 2018/03/13 3:29 p.m.•26 views

CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3CVSS5.3AI score0.01549EPSS
SaveExploits1References1
Prion
Prion
•added 2018/03/13 3:29 p.m.•28 views

Input validation

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5CVSS5.3AI score0.01549EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2018/03/13 3:29 p.m.•33 views

PYSEC-2018-112

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3CVSS3.3AI score0.01549EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2018/03/13 3:00 p.m.•37 views

CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the...

5.3AI score0.01549EPSS
SaveExploits1References1
CVE
CVE
•added 2018/03/13 3:00 p.m.•73 views

CVE-2018-1000083

CVE-2018-1000083 affects Ajenti version 2. The vulnerability is an improper error handling in the Login JSON request that can disclose the server path through a traceback when a malformed JSON is sent. Exploitation details are not provided in the connected documents beyond the error-path disclosu...

5.3CVSS5.2AI score0.01549EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/01/18 12:00 a.m.•17 views

The vulnerability of the hdpvr_probe function (drivers/media/usb/hdpvr/hdpvr-core.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the hdpvrprobe function drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel is related to improper error handling. Exploiting this vulnerability can allow a local attacker to cause service failures or other effects through a specially crafted USB device...

6.8CVSS6.8AI score0.00409EPSS
SaveExploits0References16Affected Software1
NVD
NVD
•added 2017/11/30 9:29 a.m.•32 views

CVE-2017-12353

A vulnerability in the Multipurpose Internet Mail Extensions MIME scanner of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured user filters on the device. The vulnerability is due to improper error handling of a...

5.8CVSS5.8AI score0.01638EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2017/11/22 12:19 p.m.•59 views

CVE-2017-16644

The hdpvrprobe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service improper error handling and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS6.3AI score0.00409EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/11/07 12:00 a.m.•34 views

CVE-2017-16644

The hdpvrprobe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service improper error handling and system crash or possibly have unspecified other impact via a crafted USB device...

7.2CVSS6.5AI score0.00409EPSS
SaveExploits0References6
NVD
NVD
•added 2017/10/24 9:29 p.m.•18 views

CVE-2017-1583

IBM WebSphere Application Server IBM Liberty for Java for Bluemix 3.13could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF...

7.5CVSS7.2AI score0.0319EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2017/10/24 9:00 p.m.•29 views

CVE-2017-1583

IBM WebSphere Application Server IBM Liberty for Java for Bluemix 3.13could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF...

7.3AI score0.0319EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2016/12/13 12:00 a.m.•36 views

CVE-2016-1252

The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection...

5.9CVSS6.1AI score0.07248EPSS
SaveExploits3References2
OSV
OSV
•added 2016/12/13 12:00 a.m.•11 views

UBUNTU-CVE-2016-1252

The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and in Ubuntu 16.10 before 1.3.2ubuntu0.1 allows man-in-the-middle attackers to bypass a repository-signing protection...

5.9CVSS6.1AI score0.07248EPSS
SaveExploits3References3
RedHat Linux
RedHat Linux
•added 2016/11/15 11:40 a.m.•14 views

php: Improper error handling in bzread()

A flaw was found in the way certain error conditions were handled by bzread function in PHP. An attacker could use this flaw to upload a specially crafted bz2 archive which, when parsed via the vulnerable function, could cause the application to crash or execute arbitrary code with the permission...

7.8CVSS7.5AI score0.09844EPSS
SaveExploits5References4
OSV
OSV
•added 2016/09/01 12:44 p.m.•35 views

SUSE-SU-2016:2210-1 Security update for php53

This update for php53 fixes the following issues: - security update: CVE-2014-3587: Integer overflow in the cdfreadpropertyinfo affecting SLES11 SP3 bsc987530 CVE-2016-6297: Stack-based buffer overflow vulnerability in phpstreamzipopener bsc991426 CVE-2016-6291: Out-of-bounds access in...

9.8CVSS8.2AI score0.20237EPSS
SaveExploits10References17
BDU FSTEC
BDU FSTEC
•added 2016/08/23 12:00 a.m.•13 views

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the codecs/hevcdec/SoftHEVC.cpp method in the libstagefright library of the Android operating system’s media server is related to improper error handling by the decoder. Exploiting this vulnerability allows a malicious actor to cause service interruptions device freezing and...

7.1CVSS6.3AI score0.00574EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder