Lucene search
+L

121 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/16 12:00 a.m.•4 views

CVE-2020-9472: Unrestricted Upload of File with Dangerous Type

Umbraco CMS 8.5.3 allows an authenticated file upload and consequently Remote Code Execution via the Install Package functionality...

6.5CVSS6.7AI score0.02109EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/12/07 12:00 a.m.•16 views

Google Android elevation of privilege vulnerability (CNVD-2019-01567)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An arbitrary memory release vulnerability exists in the reallyinstallpackage of install.cpp in Google Android 7.0, 7.1.1, and 7.1.2. A local attacker can exploit this...

7.8CVSS9AI score0.00174EPSS
SaveExploits0References1
OSV
OSV
•added 2018/12/06 2:29 p.m.•15 views

CVE-2018-9557

In reallyinstallpackage of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0...

7.8CVSS6AI score0.00174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/12/06 12:00 a.m.•2 views

PT-2018-19048

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 7.1.2 Description The issue is related to the really install package function in install.cpp, where uninitialized data can lead to the freeing of arbitrary memory. This could result in local escalation of privilege...

7.8CVSS0.00174EPSS
SaveExploits0References4
CNVD
CNVD
•added 2017/09/26 12:00 a.m.•14 views

IBM AIX JRE/SDK installp and updatep package denial of service vulnerability

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM in the U.S. JRE/SDK installp and updatep packages are among the packages.JRE/SDK install packages are a JRE/SDK installation package; updatep packages are JRE/SDK update packages. JRE/SDK installp packages is a...

7.5CVSS6.6AI score0.0151EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2016/08/30 12:00 a.m.•13 views

Fedora Update for borgbackup FEDORA-2016-20014bf2bd

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Prion
Prion
•added 2015/11/12 3:59 a.m.•32 views

Design/Logic Flaw

Untrusted search path vulnerability in the client in Symantec Endpoint Protection SEP 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492...

7.2CVSS6.8AI score0.01738EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/12 12:00 a.m.•6 views

CVE-2015-8113: Undefined Security Weakness

Untrusted search path vulnerability in the client in Symantec Endpoint Protection SEP 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492...

7.2CVSS5.9AI score0.00475EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2015/09/12 12:00 a.m.•13 views

Fedora Update for pcre FEDORA-2015-14242

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Prion
Prion
•added 2015/08/01 1:59 a.m.•28 views

Design/Logic Flaw

Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via a Trojan horse DLL in a client install package...

8.5CVSS6.5AI score0.01738EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
•added 2015/07/07 12:00 a.m.•21 views

Fedora Update for firefox FEDORA-2015-8806

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2014/03/17 12:00 a.m.•59 views

RedHat Update for kernel RHSA-2014:0285-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.9AI score0.00654EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2013/12/17 12:00 a.m.•30 views

Fedora Update for dcraw FEDORA-2013-22929

Check for the Version of dcraw OpenVAS Vulnerability Test Fedora Update for dcraw FEDORA-2013-22929 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

4.3CVSS8AI score0.02063EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/08/01 12:00 a.m.•35 views

Fedora Update for kmouth FEDORA-2013-13499

Check for the Version of kmouth OpenVAS Vulnerability Test Fedora Update for kmouth FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.5CVSS0.4AI score0.04497EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/06/18 12:00 a.m.•15 views

Fedora Update for kde-workspace FEDORA-2013-10182

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.9AI score0.00558EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/06/13 12:00 a.m.•22 views

Fedora Update for kate FEDORA-2013-10130

Check for the Version of kate OpenVAS Vulnerability Test Fedora Update for kate FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

0.00558EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/03/11 12:00 a.m.•30 views

openSUSE: Security Advisory for flash-player (openSUSE-SU-2013:0279-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.3CVSS6AI score0.77597EPSS
SaveExploits10References2
OpenVAS
OpenVAS
•added 2012/08/30 12:00 a.m.•18 views

Fedora Update for thunderbird-lightning FEDORA-2012-9001

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/08/03 12:00 a.m.•26 views

Mandriva Update for libzip MDVSA-2012:034 (libzip)

Check for the Version of libzip OpenVAS Vulnerability Test Mandriva Update for libzip MDVSA-2012:034 libzip Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

7.5CVSS0.3AI score0.04024EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2010/01/22 12:00 a.m.•22 views

Mandriva Update for xinit MDVA-2010:037 (xinit)

Check for the Version of xinit OpenVAS Vulnerability Test Mandriva Update for xinit MDVA-2010:037 xinit Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

0.1AI score
SaveExploits0References2
Rows per page
Query Builder