Lucene search
+L

1088 matches found

Debian CVE
Debian CVE
•added 2019/01/07 6:00 p.m.•50 views

CVE-2019-5489

The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. Fixing this affects the output of the fincore program. Limited...

5.5CVSS6.6AI score0.00774EPSS
SaveExploits1
CVE
CVE
•added 2019/01/07 6:00 p.m.•436 views

CVE-2019-5489

CVE-2019-5489 affects the Linux kernel mincore() implementation (mm/mincore.c) up to version 4.19.13. It enables a local attacker to observe page cache access patterns of other processes sharing memory, leading to potential information disclosure; the impact is described as partial confidentialit...

5.5CVSS6.6AI score0.00774EPSS
SaveExploits1References32Affected Software1
OSV
OSV
•added 2019/01/07 5:29 p.m.•23 views

UBUNTU-CVE-2019-5489

The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. Fixing this affects the output of the fincore program. Limited...

5.5CVSS6.6AI score0.00774EPSS
SaveExploits1References7
OSV
OSV
•added 2019/01/07 5:29 p.m.•46 views

CVE-2019-5489

The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. Fixing this affects the output of the fincore program. Limited...

5.5CVSS6.7AI score
SaveExploits0References32
NVD
NVD
•added 2019/01/07 5:29 p.m.•35 views

CVE-2019-5489

The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. Fixing this affects the output of the fincore program. Limited...

5.5CVSS6.5AI score0.00774EPSS
SaveExploits1References32
Prion
Prion
•added 2019/01/07 5:29 p.m.•36 views

Design/Logic Flaw

The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. Fixing this affects the output of the fincore program. Limited...

2.1CVSS6AI score0.00774EPSS
SaveExploits1References32Affected Software1
UbuntuCve
UbuntuCve
•added 2019/01/07 5:29 p.m.•74 views

CVE-2019-5489

The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. Fixing this affects the output of the fincore program. Limited...

5.5CVSS6.6AI score0.00774EPSS
SaveExploits1References6
OSV
OSV
•added 2019/01/07 5:29 p.m.•12 views

DEBIAN-CVE-2019-5489

The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. Fixing this affects the output of the fincore program. Limited...

5.5CVSS6.6AI score0.00774EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/07 12:00 a.m.•6 views

CVE-2019-5489: Cleartext Transmission of Sensitive Information

The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. Fixing this affects the output of the fincore program. Limited...

5.5CVSS6.3AI score0.00774EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/01/06 12:00 a.m.•24 views

PT-2019-1115

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.19.13 Description: The issue is related to the mincore function in the Linux kernel, which lacks protection of internal data. This could allow an attacker to disclose protected information by observing page cac...

5.5CVSS6.5AI score0.00774EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2017/09/06 8:36 p.m.•13 views

kernel: ext4 filesystem page fault race condition with fallocate call.

A flaw was found in the Linux kernel when attempting to "punch a hole" in files existing on an ext4 filesystem. When punching holes into a file races with the page fault of the same area, it is possible that freed blocks remain referenced from page cache pages mapped to process' address space...

5.1CVSS7.1AI score0.00351EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2017/08/01 2:22 p.m.•15 views

kernel: ext4 filesystem page fault race condition with fallocate call.

A flaw was found in the Linux kernel when attempting to "punch a hole" in files existing on an ext4 filesystem. When punching holes into a file races with the page fault of the same area, it is possible that freed blocks remain referenced from page cache pages mapped to process' address space...

5.1CVSS7.1AI score0.00351EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2017/08/01 2:13 p.m.•10 views

kernel: ext4 filesystem page fault race condition with fallocate call.

A flaw was found in the Linux kernel when attempting to "punch a hole" in files existing on an ext4 filesystem. When punching holes into a file races with the page fault of the same area, it is possible that freed blocks remain referenced from page cache pages mapped to process' address space...

5.1CVSS7.1AI score0.00351EPSS
SaveExploits0References4
Drupal
Drupal
•added 2015/09/09 12:00 a.m.•25 views

RESTful - Moderately Critical - Access bypass - SA-CONTRIB-2015-147

This module enables you to expose your Drupal backend by generating a RESTful API. The module doesn't sufficiently account for core's page cache generation for anonymous users, when using non-cookie authentication providers. Authenticated users, via one of the authentication providers, can have...

5CVSS6.4AI score0.01276EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2015/01/15 12:00 a.m.•44 views

W3 Total Cache Plugin For WordPress Cache Key XSS

The version of the W3 Total Cache plugin for WordPress hosted on the remote web server fails to properly sanitize user-supplied input to the 'Cache key' in the HTML comments displayed when 'Page cache debug info' is enabled. An attacker can exploit this to execute arbitrary script code within the...

4.3CVSS5.6AI score0.02055EPSS
SaveExploits2References3
Packet Storm
Packet Storm
•added 2014/12/17 12:00 a.m.•73 views

W3 Total Cache 0.9.4 Cross Site Scripting

secuvera-SA-2014-01: Reflected XSS in W3 Total Cache Affected Products W3 Total Cache 0.9.4 older releases have not been tested "The only WordPress Performance Optimization WPO framework; designed to improve user experience and page speed. .. W3 Total Cache improves the user experience of your si...

4.3CVSS6.5AI score0.02055EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2014/04/06 12:00 a.m.•2 views

PT-2014-2521

Name of the Vulnerable Software and Affected Versions Drupal RESTful Web Services RESTWS module versions 7.x-1.x before 7.x-1.3 Drupal RESTful Web Services RESTWS module versions 7.x-2.x before 7.x-2.0-alpha5 Description The issue allows remote attackers to cause a denial of service via a GET...

4.3CVSS0.01336EPSS
SaveExploits0References6
zdt
zdt
•added 2013/09/08 12:00 a.m.•38 views

WordPress Plugin w3-total-cache Stored XSS Vulnerability

Exploit for php platform in category web applications Steps to Produce the Vulnerability : 1 Go to Dashboard. 2 Click on Installed Plugins. 3 Go to W3-Total-Cache Plugin and Click on settings. 4 Go to Reverse Proxy and Click on page cache settings. 5 Go to Cache Preload and Type Vector - ". in...

7.1AI score
SaveExploits0
OSV
OSV
•added 2013/06/08 1:05 p.m.•15 views

DEBIAN-CVE-2011-4098

The fallocate implementation in the GFS2 filesystem in the Linux kernel before 3.2 relies on the page cache, which might allow local users to cause a denial of service by preallocating blocks in certain situations involving insufficient memory...

1.9CVSS5.8AI score0.00481EPSS
SaveExploits0References1
OSV
OSV
•added 2013/06/08 1:05 p.m.•12 views

UBUNTU-CVE-2011-4098

The fallocate implementation in the GFS2 filesystem in the Linux kernel before 3.2 relies on the page cache, which might allow local users to cause a denial of service by preallocating blocks in certain situations involving insufficient memory...

1.9CVSS5.8AI score0.00481EPSS
SaveExploits0References7
Rows per page
Query Builder