Lucene search
+L

76 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•37 views

Esri ArcReader PMF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS6.2AI score0.01952EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•43 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•34 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
NCSC
NCSC
•added 2021/03/30 12:00 a.m.•62 views

Vulnerabilities fixed in Esri ArcReader

Esri has fixed multiple vulnerabilities in ArcReader, ArcGIS Desktop, ArcGIS Engine and ArcGIS Pro. A malicious party could vulnerabilities potentially exploit them to execute arbitrary code execute arbitrary code under application privileges. To do so, the malicious party needs to induce an...

7.8CVSS7.9AI score0.02412EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•38 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•49 views

Esri ArcReader PMF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•37 views

Esri ArcReader PMF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS6.2AI score0.01952EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•51 views

Esri ArcReader PMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.6AI score0.01522EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•34 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•45 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•32 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/03/30 12:00 a.m.•44 views

Esri ArcReader PMF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/12/09 12:00 a.m.•84 views

SUSE SLED15 / SLES15 Security Update : wpa_supplicant (SUSE-SU-2020:3380-1) (KRACK)

This update for wpasupplicant fixes the following issues : Security issue fixed : CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass bsc1150934. Non-security issues fixed : Enable SAE support jscSLE-14992. Limit P2PDEVICE name to appropriate ifname size. Fix wicked wlan bsc11569...

8.1CVSS7.1AI score0.04989EPSS
SaveExploits1References67
Tenable Nessus
Tenable Nessus
•added 2020/11/30 12:00 a.m.•254 views

openSUSE Security Update : wpa_supplicant (openSUSE-2020-2059) (KRACK)

This update for wpasupplicant fixes the following issues : Security issue fixed : - CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass bsc1150934. Non-security issues fixed : - Enable SAE support jscSLE-14992. - Limit P2PDEVICE name to appropriate ifname size. - Fix wicked wlan...

8.1CVSS7.1AI score0.04989EPSS
SaveExploits1References44
Tenable Nessus
Tenable Nessus
•added 2020/11/30 12:00 a.m.•69 views

openSUSE Security Update : wpa_supplicant (openSUSE-2020-2053) (KRACK)

This update for wpasupplicant fixes the following issues : Security issue fixed : - CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass bsc1150934. Non-security issues fixed : - Enable SAE support jscSLE-14992. - Limit P2PDEVICE name to appropriate ifname size. - Fix wicked wlan...

8.1CVSS7.1AI score0.04989EPSS
SaveExploits1References44
OPENSUSE Linux
OPENSUSE Linux
•added 2020/11/27 12:00 a.m.•70 views

Security update for wpa_supplicant (moderate)

openSUSE Security Update: Security update for wpasupplicant Announcement ID: openSUSE-SU-2020:2059-1 Rating: moderate References: 1131644 1131868 1131870 1131871 1131872 1131874 1133640 1144443 1150934 1156920 1166933 1167331 930077 930078 930079 Cross-References: CVE-2015-4141 CVE-2015-4142...

8.1CVSS6.6AI score0.04989EPSS
SaveExploits1References15
OPENSUSE Linux
OPENSUSE Linux
•added 2020/11/26 12:00 a.m.•55 views

Security update for wpa_supplicant (moderate)

openSUSE Security Update: Security update for wpasupplicant Announcement ID: openSUSE-SU-2020:2053-1 Rating: moderate References: 1131644 1131868 1131870 1131871 1131872 1131874 1133640 1144443 1150934 1156920 1166933 1167331 930077 930078 930079 Cross-References: CVE-2015-4141 CVE-2015-4142...

8.1CVSS6.6AI score0.04989EPSS
SaveExploits1References15
OpenVAS
OpenVAS
•added 2020/09/29 12:00 a.m.•24 views

Huawei EulerOS: Security Advisory for wpa_supplicant (EulerOS-SA-2020-2144)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.01214EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/09/28 12:00 a.m.•36 views

EulerOS 2.0 SP3 : wpa_supplicant (EulerOS-SA-2020-2144)

According to the version of the wpasupplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address...

6.5CVSS6.5AI score0.01214EPSS
SaveExploits0References2
Prion
Prion
•added 2020/09/08 10:15 a.m.•31 views

Buffer overflow

u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...

10CVSS9.5AI score0.01052EPSS
SaveExploits0References1
Rows per page
Query Builder