Lucene search
K

3785 matches found

Zero Day Initiative
Zero Day Initiative
added 2015/10/13 12:0 a.m.27 views

Adobe Reader DC loadFlashMovie Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5CVSS6.3AI score0.03836EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/10/13 12:0 a.m.25 views

Adobe Reader DC animations Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5CVSS6.3AI score0.03836EPSS
Exploits0References1
NVD
NVD
added 2015/10/09 5:59 a.m.16 views

CVE-2015-5893

SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

2.1CVSS4.5AI score0.00356EPSS
Exploits0References4
NVD
NVD
added 2015/10/09 5:59 a.m.19 views

CVE-2015-5870

The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout information via unspecified vectors...

2.1CVSS4.6AI score0.00371EPSS
Exploits0References4
NVD
NVD
added 2015/10/09 5:59 a.m.14 views

CVE-2015-5864

IOAudioFamily in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

2.1CVSS4.5AI score0.00353EPSS
Exploits0References3
Prion
Prion
added 2015/10/09 5:59 a.m.15 views

Memory corruption

IOGraphics in Apple OS X before 10.11 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

4.3CVSS5.5AI score0.01435EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2015/10/09 5:59 a.m.10 views

Design/Logic Flaw

SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

2.1CVSS5.4AI score0.00356EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2015/10/09 1:0 a.m.58 views

CVE-2015-5865

CVE-2015-5865 corresponds to a vulnerability in the IOGraphics component of Apple OS X before 10.11, where a crafted app can cause leakage of sensitive kernel memory layout information. The affected entry describes a local information disclosure via the IOGraphics kernel path, enabling an attacke...

4.3CVSS5AI score0.01435EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2015/10/09 1:0 a.m.18 views

CVE-2015-5870

The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout information via unspecified vectors...

5AI score0.00371EPSS
Exploits0References4
Cvelist
Cvelist
added 2015/10/09 1:0 a.m.23 views

CVE-2015-5893

SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

5AI score0.00356EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2015/10/06 12:0 a.m.2 views

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows attackers to bypass the ASLR protection mechanism.

The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass ASLR protection due to errors in access control to memory cells...

5CVSS5.8AI score0.05481EPSS
Exploits0References2Affected Software2
CNVD
CNVD
added 2015/10/03 12:0 a.m.2 views

Apple OS X Kernel Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. kernel is one of the kernel components. A security vulnerability exists in the debugging interface of the Kernel in Apple OS X 10.10.5 and earlier versions. A local attacker could exploit this vulnerability to obta...

2.1CVSS6.1AI score0.00371EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2015/09/28 8:59 p.m.16 views

CVE-2015-6927

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...

3.6CVSS6AI score0.00502EPSS
Exploits1References4
Cvelist
Cvelist
added 2015/09/28 8:0 p.m.33 views

CVE-2015-6927

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...

6.4AI score0.00502EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2015/09/23 12:0 a.m.3 views

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially crafted application...

2.1CVSS5.4AI score0.02457EPSS
Exploits0References2
exploitpack
exploitpack
added 2015/09/22 12:0 a.m.15 views

Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar (MS15-061)

Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar MS15-061 Source: https://code.google.com/p/google-security-research/issues/detail?id=321 The PoC triggers a crashes due to a pool buffer overflow while drawing the caption bar of window. The trigger depends on the current window...

0.4AI score
Exploits0
NVD
NVD
added 2015/09/18 10:59 a.m.16 views

CVE-2015-5831

NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app...

5CVSS4.3AI score0.01617EPSS
Exploits0References6
CVE
CVE
added 2015/09/18 10:0 a.m.65 views

CVE-2015-5842

CVE-2015-5842 affects Apple’s XNU kernel (macOS/iOS) where an uninitialized kernel data structure could allow a local attacker to determine kernel memory layout. The connected Nessus/NASL entries confirm the root cause as a kernel memory-layout disclosure and note that the issue was mitigated by ...

2.1CVSS4.7AI score0.0034EPSS
Exploits0References8Affected Software1
CVE
CVE
added 2015/09/18 10:0 a.m.60 views

CVE-2015-5834

CVE-2015-5834 involves the IOAcceleratorFamily in iOS prior to version 9. A crafted app could cause a disclosure of the kernel memory layout. The root cause is a memory-disclosure path in IOAcceleratorFamily that was addressed by improved bounds checking. The impact is limited to information expo...

4.3CVSS4.7AI score0.0145EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2015/09/18 10:0 a.m.18 views

CVE-2015-5831

NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app...

4.8AI score0.01617EPSS
Exploits0References6
Rows per page
Query Builder