Lucene search
+L

1175 matches found

NVD
NVD
added 2009/09/18 10:30 a.m.21 views

CVE-2009-1883

The z90cryptunlockedioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage...

4.4CVSS5.2AI score0.00342EPSS
SaveExploits1References9
Prion
Prion
added 2009/09/18 10:30 a.m.32 views

Design/Logic Flaw

The z90cryptunlockedioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage...

4.4CVSS6.5AI score0.00342EPSS
SaveExploits1References9Affected Software1
CVE
CVE
added 2009/09/18 10:0 a.m.96 views

CVE-2009-1883

CVE-2009-1883 affects the Linux kernel z90crypt driver, where a missing capability check in the z90crypt_unlocked_ioctl for the Z90QUIESCE operation can let a local user with an effective UID of 0 bypass restrictions, potentially forcing a driver outage and enabling privilege escalation. The issu...

4.4CVSS5.5AI score0.00342EPSS
SaveExploits1References9Affected Software1
Cvelist
Cvelist
added 2009/09/18 10:0 a.m.43 views

CVE-2009-1883

The z90cryptunlockedioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage...

5.5AI score0.00342EPSS
SaveExploits1References9
RedHat Linux
RedHat Linux
added 2009/09/15 8:19 a.m.7 views

kernel: missing capability check in z90crypt

The z90cryptunlockedioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage...

4.4CVSS5.8AI score0.00342EPSS
SaveExploits1References4
F5 Networks
F5 Networks
added 2009/09/07 12:0 a.m.192 views

SOL10509 - Sockstress DoS tool vulnerability CVE-2008-4609

Sockstress DoS tool CVE-2008-4609. The TCP implementation in 1 Linux, 2 platforms based on BSD Unix, 3 Microsoft Windows, 4 Cisco products, and probably other operating systems allows remote attackers to cause a denial of service connection queue exhaustion via multiple vectors that manipulate...

7.1CVSS9.3AI score0.32123EPSS
SaveExploits1
NVD
NVD
added 2009/08/27 5:0 p.m.21 views

CVE-2009-2054

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

7.8CVSS6.5AI score0.03403EPSS
SaveExploits0References6
Prion
Prion
added 2009/08/27 5:0 p.m.21 views

Code injection

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12 allows remote attackers to cause a denial of service file-descriptor exhaustion and SCCP outage via a flood of TCP packets, aka Bug ID CSCsx32236...

7.8CVSS7.1AI score0.03406EPSS
SaveExploits0References6Affected Software1
Prion
Prion
added 2009/08/27 5:0 p.m.22 views

Design/Logic Flaw

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

7.8CVSS7.1AI score0.03403EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2009/08/27 4:31 p.m.64 views

CVE-2009-2054

CVE-2009-2054 affects Cisco Unified Communications Manager (CUCM) 4.x, 5.x (before 5.1(3g)), 6.x (before 6.1(4)), 7.0 (before 7.0(2a)su1) and 7.1 (before 7.1(2a)su1). It enables remote attackers to cause a denial of service via a flood of TCP packets, leading to file-descriptor exhaustion and SIP...

7.8CVSS6.8AI score0.03403EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2009/08/27 4:31 p.m.30 views

CVE-2009-2054

Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02asu1, and 7.1 before 7.12asu1 allows remote attackers to cause a denial of service file-descriptor exhaustion and SIP outage via a flood of TCP packets, aka Bug ID CSCsx23689...

6.5AI score0.03403EPSS
SaveExploits0References6
CVE
CVE
added 2009/07/16 4:0 p.m.52 views

CVE-2009-2490

CVE-2009-2490 affects Sun Ray Server Software (SRSS) 4.0, specifically the utaudiod daemon when Solaris Trusted Extensions is enabled. The issue allows local users to cause a denial of service (audio outage) and potentially gain privileges due to resource leaks. The provided description does not ...

1.9CVSS6.9AI score0.00326EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2009/07/16 4:0 p.m.22 views

CVE-2009-2490

Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service audio outage or possibly gain privileges via unknown vectors related to "resource leaks."...

6.8AI score0.00326EPSS
SaveExploits0References5
Prion
Prion
added 2009/06/10 6:0 p.m.19 views

Memory corruption

Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode ADAM on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service memory consumption and service outage via 1 LDAP or...

7.8CVSS7AI score0.3913EPSS
SaveExploits1References9
Debian CVE
Debian CVE
added 2009/04/28 4:0 p.m.44 views

CVE-2008-6767

wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service application outage, via a direct request...

10CVSS5.8AI score0.04584EPSS
SaveExploits1
CVE
CVE
added 2009/04/28 4:0 p.m.73 views

CVE-2008-6767

CVE-2008-6767 affects WordPress (wp-admin/upgrade.php) and, per the provided description, could allow remote attackers to trigger an application upgrade and possibly cause a denial of service. Connected documents supply Debian security advisories (DSA-1871-1/DSA-1871-2) and OSV references that en...

10CVSS6.5AI score0.04584EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.35 views

Mandriva Update for xscreensaver MDKSA-2007:097 (xscreensaver)

Check for the Version of xscreensaver OpenVAS Vulnerability Test Mandriva Update for xscreensaver MDKSA-2007:097 xscreensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

4.6CVSS6.4AI score0.00413EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.28 views

Mandriva Update for xscreensaver MDKSA-2007:097 (xscreensaver)

Check for the Version of xscreensaver OpenVAS Vulnerability Test Mandriva Update for xscreensaver MDKSA-2007:097 xscreensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

4.6CVSS0.00413EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.39 views

Mandriva Update for gnome-screensaver MDVSA-2008:132 (gnome-screensaver)

Check for the Version of gnome-screensaver OpenVAS Vulnerability Test Mandriva Update for gnome-screensaver MDVSA-2008:132 gnome-screensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

4.7CVSS0.1AI score0.01336EPSS
SaveExploits2References2
ThreatPost
ThreatPost
added 2009/04/06 2:49 p.m.9 views

Web sites disrupted by attack on Register.com

From Washington Post Brian Krebs Web site host and domain name registrar Register.com has been the target of a sustained attack this week washingtonpost.com, disrupting service for thousands of customers. The attacks began on Wednesday, causing a three-hour outage for many Web sites that rely on...

2.6AI score
SaveExploits0References4
Rows per page
Query Builder