Lucene search
+L

7441 matches found

OSV
OSV
added 2017/11/29 6:29 p.m.9 views

ALPINE-CVE-2017-8818

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library...

9.8CVSS7.4AI score0.03337EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/29 6:29 p.m.6 views

DEBIAN-CVE-2017-8818

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library...

9.8CVSS9.6AI score0.03337EPSS
SaveExploits0References1
OSV
OSV
added 2017/11/29 6:29 p.m.8 views

DEBIAN-CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS10AI score0.07802EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2017/11/29 6:00 p.m.49 views

CVE-2017-8818

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library...

9.8CVSS10AI score0.03337EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2017/11/29 6:00 p.m.54 views

CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS9.7AI score0.07802EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2017/11/29 6:00 p.m.76 views

CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

9.8CVSS8.2AI score0.07802EPSS
SaveExploits0
Cvelist
Cvelist
added 2017/11/29 6:00 p.m.32 views

CVE-2017-8816

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service integer overflow and resultant buffer overflow, and application crash or possibly have unspecified other impact via vectors involving long user and password fields...

7.9AI score0.07802EPSS
SaveExploits0References8
AlpineLinux
AlpineLinux
added 2017/11/29 6:00 p.m.92 views

CVE-2017-8818

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library...

9.8CVSS9.9AI score0.03337EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2017/11/28 8:40 p.m.9 views

OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

5.3CVSS7.4AI score0.03305EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2017/11/27 6:04 p.m.9 views

OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacke...

5.3CVSS7.3AI score0.03305EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2017/11/27 4:56 a.m.19 views

Feds Seize Over 20,500 Domain Names For Selling Counterfeit Products

In a coordinated International cyber operation, law enforcement agencies have seized over 20,520 website domains for illegally selling counterfeit products, including luxury products, sportswear, electronics, pharmaceuticals and online piracy on e-commerce platforms and social networks...

6.9AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2017/11/22 6:47 p.m.24 views

Terdot Trojan likes social media

We usually advise people that have fallen victim to banker Trojans to change all their passwords, especially the ones that are related to their financial sites and apps. Besides the dangers of re-used passwords, there are other reasons why this is important. This advice is especially applicable t...

6.8AI score
SaveExploits0
Hewlett-Packard
Hewlett-Packard
added 2017/11/22 12:00 a.m.103 views

HPSBHF03571 rev. 6 - Intel Management Engine Cumulative Security update and fix for WPA2 vulnerability

Potential Security Impact Potential denial of service or escalation of privilege. Source: Intel Reported By: Intel VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain versions of Intel Active Management Technology, Management Engine Firmware, and Management...

8.3CVSS1.4AI score0.02362EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2017/11/15 8:29 a.m.33 views

CVE-2017-16830

The printgnupropertynote function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service segmentation violation and application crash or possibly have unspecified other impact via a crafted ELF...

7.8CVSS6.9AI score0.03509EPSS
SaveExploits1References1
OSV
OSV
added 2017/11/15 8:29 a.m.19 views

CVE-2017-16830

The printgnupropertynote function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service segmentation violation and application crash or possibly have unspecified other impact via a crafted ELF...

7.8CVSS7.4AI score
SaveExploits0References4
Prion
Prion
added 2017/11/15 8:29 a.m.22 views

Integer overflow

The printgnupropertynote function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service segmentation violation and application crash or possibly have unspecified other impact via a crafted ELF...

6.8CVSS7.8AI score0.03509EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2017/11/15 3:29 a.m.3 views

CVE-2017-11834

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further...

5.3CVSS5.8AI score0.0648EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2017/11/15 3:29 a.m.7 views

CVE-2017-11853

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to log in and run a specially crafted application due to the Windo...

5.5CVSS5.5AI score0.06459EPSS
SaveExploits0References4
OSV
OSV
added 2017/11/15 3:29 a.m.4 views

CVE-2017-11791

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709...

3.1CVSS5.8AI score0.06731EPSS
SaveExploits0References4
OSV
OSV
added 2017/11/13 3:29 a.m.4 views

DEBIAN-CVE-2017-13798

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote...

8.8CVSS8.8AI score0.06963EPSS
SaveExploits6References1
Rows per page
Query Builder