Lucene search
+L

906 matches found

Positive Technologies
Positive Technologies
•added 2018/08/15 12:00 a.m.•5 views

PT-2018-1784

Name of the Vulnerable Software and Affected Versions Cisco ASR 9000 Series Aggregation Services Router Software affected versions not specified Description The issue is related to a lack of input validation for Precision Time Protocol PTP traffic. An unauthenticated, remote attacker could exploi...

8.6CVSS0.03964EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2018/01/12 12:00 a.m.•24 views

The vulnerability of the ptp_unpack_OPL function in the libmtp library, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ptpunpackOPL function in the libmtp library exists due to a mistake related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code when a mobile device is connected via a USB cable...

6.8CVSS6AI score0.00766EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2017/06/30 12:00 a.m.•42 views

libmtp ptp-pack.c file integer overflow vulnerability

libmtp is an LGPL library for the Media Transport Protocol. An integer overflow vulnerability exists in the ptp-pack.c file in libmtp 1.1.12 and earlier. A remote attacker could exploit this vulnerability by plugging a mobile device into a PC via the USB port to cause a denial of service...

6.8CVSS7.7AI score0.00766EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/06/30 12:00 a.m.•41 views

Integer Overflow Vulnerability in libmtp 'ptp_unpack_EOS_CustomFuncEx' Function

libmtp is an LGPL library for the Media Transport Protocol. An integer overflow vulnerability exists in the 'ptpunpackEOSCustomFuncEx' function of the ptp-pack.c file in libmtp versions 1.1.12 and earlier. A remote attacker could exploit this vulnerability by plugging a mobile device into a PC vi...

6.8CVSS7.7AI score0.00855EPSS
SaveExploits0References1
OSV
OSV
•added 2017/06/24 12:29 a.m.•12 views

DEBIAN-CVE-2017-9832

An integer overflow vulnerability in ptp-pack.c ptpunpackOPL function of libmtp version 1.1.12 and below allows attackers to cause a denial of service out-of-bounds memory access or maybe remote code execution by inserting a mobile device into a personal computer through a USB cable...

6.8CVSS6.9AI score0.00766EPSS
SaveExploits0References1
OSV
OSV
•added 2017/06/24 12:29 a.m.•7 views

DEBIAN-CVE-2017-9831

An integer overflow vulnerability in the ptpunpackEOSCustomFuncEx function of the ptp-pack.c file of libmtp version 1.1.12 and below allows attackers to cause a denial of service out-of-bounds memory access or maybe remote code execution by inserting a mobile device into a personal computer throu...

6.8CVSS8.2AI score0.00855EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/06/24 12:29 a.m.•24 views

CVE-2017-9832

An integer overflow vulnerability in ptp-pack.c ptpunpackOPL function of libmtp version 1.1.12 and below allows attackers to cause a denial of service out-of-bounds memory access or maybe remote code execution by inserting a mobile device into a personal computer through a USB cable...

6.8CVSS7.3AI score0.00766EPSS
SaveExploits0References4
OSV
OSV
•added 2017/06/24 12:29 a.m.•11 views

UBUNTU-CVE-2017-9832

An integer overflow vulnerability in ptp-pack.c ptpunpackOPL function of libmtp version 1.1.12 and below allows attackers to cause a denial of service out-of-bounds memory access or maybe remote code execution by inserting a mobile device into a personal computer through a USB cable...

6.8CVSS7.3AI score0.00766EPSS
SaveExploits0References5
Prion
Prion
•added 2017/06/24 12:29 a.m.•22 views

Integer overflow

An integer overflow vulnerability in the ptpunpackEOSCustomFuncEx function of the ptp-pack.c file of libmtp version 1.1.12 and below allows attackers to cause a denial of service out-of-bounds memory access or maybe remote code execution by inserting a mobile device into a personal computer throu...

4.6CVSS8.1AI score0.00855EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/24 12:00 a.m.•5 views

CVE-2017-9832: Integer Overflow or Wraparound

An integer overflow vulnerability in ptp-pack.c ptpunpackOPL function of libmtp version 1.1.12 and below allows attackers to cause a denial of service out-of-bounds memory access or maybe remote code execution by inserting a mobile device into a personal computer through a USB cable...

6.8CVSS7.2AI score0.00766EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/03/03 12:00 a.m.•69 views

RHEL 6 : MRG (RHSA-2017:0402)

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.8CVSS7AI score0.11127EPSS
SaveExploits17References3
RedHat Linux
RedHat Linux
•added 2017/03/02 4:04 p.m.•76 views

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.8CVSS6.9AI score0.11127EPSS
SaveExploits17References3
Tenable Nessus
Tenable Nessus
•added 2015/12/02 12:00 a.m.•58 views

CentOS 7 : ntp (CESA-2015:2231)

Updated ntp packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

7.5CVSS6.7AI score0.06135EPSS
SaveExploits0References9
seebug.org
seebug.org
•added 2008/09/10 12:00 a.m.•36 views

ACG-PTP 1.0.6 (adid) Remote SQL Injection Vulnerability

No description provided by source. || | | ACG-PTP 1.0.6 adid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/09/10 12:00 a.m.•40 views

ACG-PTP 'adid' SQL注入漏洞

BUGTRAQ ID: 31005 CNCAN ID:CNCAN-2008090502 ACG-PTP是一款基于PHP的WEB应用程序。 ACG-PTP不正确处理用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'adid'参数缺少过滤,构建恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 DiscountedScripts ACG-PTP 1.0.6 目前没有解决方案提供:...

6.9AI score
SaveExploits0
Prion
Prion
•added 2008/09/05 3:08 p.m.•25 views

Sql injection

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

7.5CVSS9.1AI score0.00967EPSS
SaveExploits2References3Affected Software1
NVD
NVD
•added 2008/09/05 3:08 p.m.•28 views

CVE-2008-3944

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

7.5CVSS8.4AI score0.00967EPSS
SaveExploits2References3
CVE
CVE
•added 2008/09/05 3:00 p.m.•52 views

CVE-2008-3944

The CVE-2008-3944 entry describes a SQL injection vulnerability in the ACG-PTP 1.0.6 application, specifically in index.php where the adid parameter used in an adorder action can be exploited by a remote attacker to execute arbitrary SQL commands. The issue is tied to unsanitized input in adid, e...

7.5CVSS8.4AI score0.00967EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2008/09/05 3:00 p.m.•39 views

CVE-2008-3944

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

8.4AI score0.00967EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/09/05 12:00 a.m.•5 views

CVE-2008-3944: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References2
Rows per page
Query Builder