Lucene search
+L

487 matches found

BDU FSTEC
BDU FSTEC
added 2016/07/06 12:00 a.m.19 views

The vulnerability of the Windows operating system, which allows a perpetrator to increase their privileges or execute arbitrary code

Vulnerability exists in the Message Queue Service MSMQ, the BthPan.sys and MQAC.sys drivers. This allows a malicious individual to elevate their privileges within the system and execute arbitrary code...

7.2CVSS5.8AI score0.23046EPSS
SaveExploits21References6
CNVD
CNVD
added 2016/06/10 12:00 a.m.10 views

IBM WebSphere MQ Arbitrary Command Execution Vulnerability

IBM WebSphere MQ is a messaging middleware product. An arbitrary command execution vulnerability exists in IBM WebSphere MQ, which can be exploited by a local attacker to execute arbitrary commands with elevated privileges...

2.5CVSS7.5AI score0.00332EPSS
SaveExploits0References1
NVD
NVD
added 2016/04/13 4:59 p.m.21 views

CVE-2016-2057

lib/xymondipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions 666 for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue...

3.3CVSS6.4AI score0.00508EPSS
SaveExploits1References4
OSV
OSV
added 2016/04/13 4:59 p.m.9 views

DEBIAN-CVE-2016-2057

lib/xymondipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions 666 for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue...

3.3CVSS6.9AI score0.00508EPSS
SaveExploits1References1
OSV
OSV
added 2016/04/13 4:59 p.m.11 views

UBUNTU-CVE-2016-2057

lib/xymondipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions 666 for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue...

3.3CVSS6.8AI score0.00508EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2016/04/13 4:00 p.m.33 views

CVE-2016-2057

lib/xymondipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions 666 for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue...

6.3AI score0.00508EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2016/04/13 4:00 p.m.57 views

CVE-2016-2057

lib/xymondipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions 666 for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue...

3.3CVSS3.8AI score0.00508EPSS
SaveExploits1
CNVD
CNVD
added 2015/08/19 12:00 a.m.14 views

Cisco Unified Web Interaction Manager Web Interface Denial of Service Vulnerability

Cisco Unified Web Interaction Manager is a WEB interaction manager. An input validation vulnerability in Cisco Unified Web Interaction Manager allows remote attackers to conduct denial of service attacks by deleting the default system folder in the message queue via the WEB interface...

5.5CVSS6.8AI score0.02456EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/08/04 12:00 a.m.8 views

IBM MQ Light Denial of Service Vulnerability (CNVD-2015-05122)

IBM MQ Light is a messaging service from IBM USA based on IBM Bluemix, a PaaS platform for creating, deploying and managing applications on the cloud. A security vulnerability exists in IBM MQ Light versions 1.0 and 1.0.0.1 due to the program failing to properly handle authentication credentials....

7.8CVSS6.9AI score0.01517EPSS
SaveExploits0References1
OSV
OSV
added 2015/06/03 8:59 p.m.13 views

UBUNTU-CVE-2014-9721

libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechanisms via a ZMTP v2 or earlier header...

4.3CVSS7.3AI score0.02529EPSS
SaveExploits0References5
CNVD
CNVD
added 2015/02/21 12:00 a.m.8 views

IBM WebSphere MQ Resource Management Denial of Service Vulnerability

IBM WebSphere MQ is used to provide messaging services in the enterprise. A security vulnerability exists in IBM WebSphere MQ, which can be exploited by remote attackers to cause a denial of service with the 'PCF query' privilege with the help of a specially crafted query...

3.5CVSS6.7AI score0.01594EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2014/12/28 12:00 a.m.39 views

Microsoft Message Queue QMGetRemoteQueueName Buffer Overflow - Ver2 (CVE-2008-3479)

A buffer overflow vulnerability has been reported in Microsoft Windows 2000. An attacker could exploit this vulnerability via a crafted RPC call, related to improper processing of parameters to string APIs. Successful exploitation of this vulnerability could allow a remote attacker to execute...

10CVSS7.3AI score0.44474EPSS
SaveExploits1
securityvulns
securityvulns
added 2014/10/15 12:00 a.m.181 views

Microsoft Windows multiple security vulnerabilities

Restrictions bypass and memory corruptions in Internet Explorer, .Net code execution, TrueType embedded fonts code execution, OLE code execution, message queue service and FAT32 driver privilege escalation...

10CVSS3.4AI score0.87042EPSS
SaveExploits80Affected Software1
OSV
OSV
added 2014/10/08 7:55 p.m.16 views

DEBIAN-CVE-2014-7202

streamengine.cpp in libzmq aka ZeroMQ/C++ 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request...

4.3CVSS9AI score0.02015EPSS
SaveExploits0References1
NVD
NVD
added 2014/08/19 6:55 p.m.32 views

CVE-2014-4615

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...

5CVSS5.9AI score0.02774EPSS
SaveExploits0References9
OSV
OSV
added 2014/08/19 6:55 p.m.13 views

DEBIAN-CVE-2014-4615

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...

5CVSS6.8AI score0.02774EPSS
SaveExploits0References1
OSV
OSV
added 2014/08/19 6:55 p.m.12 views

CVE-2014-4615

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...

5.9AI score
SaveExploits0References9
Prion
Prion
added 2014/08/19 6:55 p.m.27 views

Xxe

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...

5CVSS6.5AI score0.02774EPSS
SaveExploits0References9Affected Software5
Cvelist
Cvelist
added 2014/08/19 6:00 p.m.51 views

CVE-2014-4615

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...

5.8AI score0.02774EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2014/08/19 6:00 p.m.106 views

CVE-2014-4615

The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...

5CVSS6AI score0.02774EPSS
SaveExploits0
Rows per page
Query Builder