Lucene search
K

5572 matches found

CNVD
CNVD
added 2018/04/18 12:0 a.m.4 views

Unspecified Vulnerability in Oracle Hospitality Simphony First Edition

Oracle Hospitality Simphony First Edition is an enterprise hospitality management platform that delivers point-of-sale POS and back-office functionality on fixed and mobile devices to support stadiums, arenas and other food and beverage operations. An unspecified vulnerability exists in the...

5.5CVSS6.7AI score0.00796EPSS
Exploits0References1
Prion
Prion
added 2018/04/13 3:29 p.m.14 views

Heap overflow

A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption...

7.5CVSS9.3AI score0.02999EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2018/04/13 3:29 p.m.1 views

DEBIAN-CVE-2017-0357

A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption...

9.8CVSS9.2AI score0.02999EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2018/04/12 12:0 a.m.3 views

The vulnerability of the Android operating system’s loader from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system’s loader from the CAF repository is related to insufficient checks on the sizes of headers in compressed load images. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protect...

9.8CVSS5.6AI score0.00442EPSS
Exploits0References2
ThreatPost
ThreatPost
added 2018/04/10 2:48 p.m.34 views

Quant Loader Trojan Spreads Via Microsoft URL Shortcut Files

Researchers are warning of a new email phishing campaign that downloads and launches the Quant Loader trojan, capable of distributing ransomware and stealing passwords. Barracuda on Tuesday said it has been tracking emails containing zipped Microsoft internet shortcut files with a “.url” file...

5.1CVSS0.7AI score0.11774EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2018/04/04 12:0 a.m.3 views

The vulnerability of the AMD Secure Processor implementation in EPYC Server processors allows for writing to the secure memory region of the processor.

The vulnerability of the AMD Secure Processor implementation in EPYC Server processors lies in the deficiencies in the implementation of the loader responsible for verifying the functionality of the hardware, as well as for initiating the AMD Secure Processor module. Exploiting this vulnerability...

1CVSS5.5AI score0.01717EPSS
Exploits0References8
Prion
Prion
added 2018/03/30 3:29 p.m.16 views

Authentication flaw

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config...

10CVSS9.4AI score0.02307EPSS
Exploits0References3
NVD
NVD
added 2018/03/30 3:29 p.m.23 views

CVE-2017-14911

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config...

10CVSS9.6AI score0.02307EPSS
Exploits0References3
Cvelist
Cvelist
added 2018/03/30 3:0 p.m.30 views

CVE-2017-14911

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config...

9.6AI score0.02307EPSS
Exploits0References3
CNVD
CNVD
added 2018/03/27 12:0 a.m.2 views

FreePlane XML External Entity Injection Vulnerability

FreePlane is a set of free open source mind mapping tools. mindmap loader is one of the mind map loader. XML Parser is one of the XML file parser. An XML external entity injection vulnerability exists in the XML Parser of the mindmap loader in FreePlane 1.5.9 and earlier versions. An attacker can...

5.5CVSS7.2AI score0.02297EPSS
Exploits1References1
0day.today
0day.today
added 2018/03/23 12:0 a.m.83 views

XenForo 2 - CSS Loader Denial of Service Exploit

Exploit for php platform in category web applications Exploit Title: XenForo CSS Loader DoS Google Dork: intext:"Forum software by XenForo™" inurl:css.php ext:php Exploit Author: LockedByte Vendor Homepage: https://xenforo.com/ Software Link: https://xenforo.com/help/installation/ Version: XenFor...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2018/03/23 12:0 a.m.245 views

XenForo 2 - CSS Loader Denial of Service

Exploit Title: XenForo CSS Loader DoS Google Dork: intext:"Forum software by XenForo™" inurl:css.php ext:php Date: 22-03-18 Exploit Author: LockedByte Vendor Homepage: https://xenforo.com/ Software Link: https://xenforo.com/help/installation/ Version: XenForo 2 Tested on: Linux...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2018/03/23 12:0 a.m.16 views

XenForo 2 - CSS Loader Denial of Service

XenForo 2 - CSS Loader Denial of Service Exploit Title: XenForo CSS Loader DoS Google Dork: intext:"Forum software by XenForo™" inurl:css.php ext:php Date: 22-03-18 Exploit Author: LockedByte Vendor Homepage: https://xenforo.com/ Software Link: https://xenforo.com/help/installation/ Version:...

7.3AI score
Exploits0
Packet Storm
Packet Storm
added 2018/03/23 12:0 a.m.48 views

XenForo 2 CSS Loader Denial Of Service

Exploit Title: XenForo CSS Loader DoS Google Dork: intext:"Forum software by XenForoaC/" inurl:css.php ext:php Date: 22-03-18 Exploit Author: LockedByte Vendor Homepage: https://xenforo.com/ Software Link: https://xenforo.com/help/installation/ Version: XenForo 2 Tested on: Linux...

7.1AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2018/03/21 12:0 a.m.3 views

The vulnerability of the dynamic loader ld.so, which is responsible for system calls and core functions of glibc, allows a attacker to trigger a memory corruption.

The vulnerability of the dynamic loader ld.so, which provides system calls and core functions of the glibc library, is related to resource management errors. Exploiting this vulnerability allows an attacker to trigger a memory leak by using the environment variable LDHWCAPMASK...

7.8CVSS7.5AI score0.01478EPSS
Exploits5References7Affected Software1
UbuntuCve
UbuntuCve
added 2018/03/13 3:29 p.m.14 views

CVE-2018-1000069

FreePlane version 1.5.9 and earlier contains a XML External Entity XXE vulnerability in XML Parser in mindmap loader that can result in stealing data from victim's machine. This attack appears to require the victim to open a specially crafted mind map file. This vulnerability appears to have been...

5.5CVSS6.1AI score0.02297EPSS
Exploits1References3
Prion
Prion
added 2018/03/13 3:29 p.m.13 views

Xxe

FreePlane version 1.5.9 and earlier contains a XML External Entity XXE vulnerability in XML Parser in mindmap loader that can result in stealing data from victim's machine. This attack appears to require the victim to open a specially crafted mind map file. This vulnerability appears to have been...

4.3CVSS5.3AI score0.02297EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2018/03/13 3:29 p.m.0 views

UBUNTU-CVE-2018-1000069

FreePlane version 1.5.9 and earlier contains a XML External Entity XXE vulnerability in XML Parser in mindmap loader that can result in stealing data from victim's machine. This attack appears to require the victim to open a specially crafted mind map file. This vulnerability appears to have been...

5.5CVSS5.8AI score0.02297EPSS
Exploits1References4
OSV
OSV
added 2018/03/13 3:29 p.m.0 views

DEBIAN-CVE-2018-1000069

FreePlane version 1.5.9 and earlier contains a XML External Entity XXE vulnerability in XML Parser in mindmap loader that can result in stealing data from victim's machine. This attack appears to require the victim to open a specially crafted mind map file. This vulnerability appears to have been...

5.5CVSS7AI score0.02297EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/03/13 3:0 p.m.23 views

CVE-2018-1000069

FreePlane version 1.5.9 and earlier contains a XML External Entity XXE vulnerability in XML Parser in mindmap loader that can result in stealing data from victim's machine. This attack appears to require the victim to open a specially crafted mind map file. This vulnerability appears to have been...

5.2AI score0.02297EPSS
Exploits1References4
Rows per page
Query Builder