Lucene search
+L

1245 matches found

ATTACKERKB
ATTACKERKB
added 2019/06/18 6:15 p.m.7 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS6AI score0.0051EPSS
SaveExploits0References10
Prion
Prion
added 2019/06/18 6:15 p.m.14 views

Heap overflow

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

4.6CVSS7.4AI score0.0051EPSS
SaveExploits0References6Affected Software2
UbuntuCve
UbuntuCve
added 2019/06/18 6:15 p.m.32 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.4AI score0.0051EPSS
SaveExploits0References2
OSV
OSV
added 2019/06/18 6:15 p.m.6 views

UBUNTU-CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.5AI score0.0051EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2019/06/18 5:34 p.m.79 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.7AI score0.0051EPSS
SaveExploits0
Prion
Prion
added 2019/05/28 3:29 a.m.16 views

Information disclosure

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS4.5AI score0.02164EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2019/05/28 3:29 a.m.17 views

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS5.9AI score0.02164EPSS
SaveExploits0References4
NVD
NVD
added 2019/05/28 3:29 a.m.10 views

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS4.5AI score0.02164EPSS
SaveExploits0References4
OSV
OSV
added 2019/05/28 3:29 a.m.9 views

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS6.6AI score
SaveExploits0References4
OSV
OSV
added 2019/05/28 3:29 a.m.4 views

DEBIAN-CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS6.7AI score0.02164EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2019/05/28 2:21 a.m.38 views

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS4.5AI score0.02164EPSS
SaveExploits0
CVE
CVE
added 2019/05/28 2:21 a.m.110 views

CVE-2019-12383

CVE-2019-12383 affects Tor Browser prior to 8.0.1, exposing the browser UI locale by measuring a button width even when users enable “Don’t send my language.” Root cause: information exposure via UI rendering measurements; impact: potential disclosure of user language settings. The connected docu...

4.3CVSS4.5AI score0.02164EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2019/05/28 2:21 a.m.25 views

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.5AI score0.02164EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2019/05/27 12:0 a.m.12 views

PT-2019-12773 · Tor +2 · Tor Browser +1

Name of the Vulnerable Software and Affected Versions: Tor Browser versions prior to 8.0.1 Description: The issue allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting. This is an information exposure issue...

4.3CVSS4.4AI score0.02164EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2019/05/23 12:0 a.m.61 views

Ubuntu 14.04 LTS : PHP vulnerabilities (USN-3566-2)

USN-3566-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. CVE-2018-20783 It was...

9.8CVSS7.3AI score0.07031EPSS
SaveExploits2References6
OSV
OSV
added 2019/05/22 11:58 a.m.6 views

USN-3566-2 php5 vulnerabilities

USN-3566-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. CVE-2018-20783 It was...

9.8CVSS7AI score0.07031EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
added 2019/05/21 12:0 a.m.16 views

PT-2019-5890 · Imagemagick +6 · Imagemagick +6

Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-43 Q16 Description: The issue is related to a heap-based buffer over-read in the WritePNGImage function, which can allow a remote attacker to access confidential data and cause a denial of service. The problem is...

9.8CVSS6.6AI score0.05916EPSS
SaveExploits91References495
Veracode
Veracode
added 2019/05/02 4:54 a.m.35 views

Privilege Escalation

Perl is a high-level programming language commonly used for system administration utilities and web programming. A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to...

7.5CVSS9.8AI score0.62202EPSS
SaveExploits15References19Affected Software1
Veracode
Veracode
added 2019/05/02 4:54 a.m.40 views

Memory Corruption

Perl is a high-level programming language commonly used for system administration utilities and web programming. A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to...

7.5CVSS9.8AI score0.62202EPSS
SaveExploits15References24Affected Software1
Veracode
Veracode
added 2019/05/02 4:54 a.m.31 views

HTTP Header Injection

Perl is a high-level programming language commonly used for system administration utilities and web programming. A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to...

7.5CVSS9.8AI score0.62202EPSS
SaveExploits15References16Affected Software1
Rows per page
Query Builder