Lucene search
+L

1065 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/25 12:00 a.m.•2 views

CVE-2014-0881: Improper Access Control

The TPM on Integrated Management Module II IMM2 on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146...

7.4CVSS7.3AI score0.01994EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/25 12:00 a.m.•3 views

CVE-2014-0882: Exposure of Sensitive Information to an Unauthorized Actor

Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data FFDC. IBM X-Force ID: 91149...

6.5CVSS6.8AI score0.01191EPSS
SaveExploits0References2
OSV
OSV
•added 2018/04/19 2:29 p.m.•15 views

CVE-2017-3774

A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 IMM2 earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination...

9.8CVSS5.8AI score0.01266EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/04/19 12:00 a.m.•0 views

PT-2018-7266

Name of the Vulnerable Software and Affected Versions: Integrated Management Module 2 IMM2 versions earlier than 4.70 Integrated Management Module 2 IMM2 versions earlier than 6.60 Description: A stack overflow issue was found in the web administration service. It can be triggered by providing a...

9.8CVSS0.01266EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/19 12:00 a.m.•4 views

CVE-2017-3774: Improper Restriction of Operations within the Bounds of a Memory Buffer

A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 IMM2 earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination...

9.8CVSS8.1AI score0.01266EPSS
SaveExploits0References2
CVE
CVE
•added 2018/04/18 2:00 p.m.•73 views

CVE-2014-9989

CVE-2014-9989 affects Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear (e.g., MDM9206/9607/9615/9625/9635M, MSM8909W, SD 210/212/205, SD 400/410/12, SD 425/430/600/615/16/SD 415/625/650/52/808/810/450, etc.). The vulnerability is in the USB management module and is triggered by...

10CVSS8.6AI score0.01185EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/18 12:00 a.m.•1 views

CVE-2014-9989: Improper Validation of Array Index

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, and SD 450, ...

10CVSS8.2AI score0.01185EPSS
SaveExploits0References2
OSV
OSV
•added 2018/04/13 1:29 p.m.•10 views

CVE-2017-6158

In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses...

6.5CVSS5.8AI score0.01098EPSS
SaveExploits0References1
OSV
OSV
•added 2018/03/22 6:29 p.m.•15 views

CVE-2018-5503

On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action...

7.5CVSS5.8AI score0.01681EPSS
SaveExploits0References2
OSV
OSV
•added 2018/01/26 7:29 p.m.•14 views

CVE-2017-3768

An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 Versions earlier than 4.4 for Lenovo System x and earlier than 6.4 for IBM System x. Flooding the IMM2 with a high volume of authentication failures via the Common Information Model CIM used ...

7.5CVSS5.8AI score0.01212EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/01/05 12:00 a.m.•41 views

Microsoft Windows Color Management Module Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Color Management Module Icm32.dll is one of these color management modules. An information disclosure vulnerability exists in Color Management Module Icm32.dll in Microsoft Windows 7 SP1, Windows Serv...

5.3CVSS6.3AI score0.07226EPSS
SaveExploits0References1
Prion
Prion
•added 2018/01/04 2:29 p.m.•23 views

Information disclosure

The Color Management Module Icm32.dll in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability"...

2.6CVSS5AI score0.07226EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2017/05/10 12:00 a.m.•17 views

Brocade NetIron Denial of Service Vulnerability

Brocade NetIron OS is a set of operating systems from Brocade Communications Systems Brocade that run in devices such as switches and routers. A security vulnerability exists in Brocade NetIron versions 05.8.00 through 06.1.00 due to the program failing to properly detect anomalies. An attacker...

7.5CVSS6.7AI score0.01074EPSS
SaveExploits0References1
NVD
NVD
•added 2017/05/08 6:29 p.m.•20 views

CVE-2016-8209

Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service crash and reload of the management module...

7.5CVSS7.5AI score0.01074EPSS
SaveExploits0References2
CVE
CVE
•added 2017/05/08 6:00 p.m.•49 views

CVE-2016-8209

CVE-2016-8209 affects Brocade NetIron NetIron OS Management Module (versions 05.8.00 through 06.1.00). The issue arises from improper checks for unusual/exceptions when the Management Module is continuously scanned on port 22, which can cause a denial-of-service via a crash and reload of the mana...

7.5CVSS7.4AI score0.01074EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/08 12:00 a.m.•9 views

CVE-2016-8209: Improper Check for Unusual or Exceptional Conditions

Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service crash and reload of the management module...

7.5CVSS5.7AI score0.01074EPSS
SaveExploits0References2
OSV
OSV
•added 2017/04/03 5:59 a.m.•14 views

CVE-2016-10217

The pdf14open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted file that is mishandled in the color management module...

5.5CVSS8.9AI score
SaveExploits0References2
Prion
Prion
•added 2017/04/03 5:59 a.m.•28 views

Design/Logic Flaw

The pdf14open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted file that is mishandled in the color management module...

4.3CVSS6.8AI score0.01453EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/03 12:00 a.m.•2 views

CVE-2016-10217: Use After Free

The pdf14open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted file that is mishandled in the color management module...

5.5CVSS7.4AI score0.01453EPSS
SaveExploits1References2
OSV
OSV
•added 2017/04/03 12:00 a.m.•9 views

UBUNTU-CVE-2016-10217

The pdf14open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted file that is mishandled in the color management module...

5.5CVSS6.8AI score0.01453EPSS
SaveExploits1References3
Rows per page
Query Builder