Lucene search
+L

1412 matches found

Cvelist
Cvelist
added 2017/03/14 9:2 a.m.27 views

CVE-2014-8688

An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file...

7.2AI score0.0134EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2017/03/14 12:0 a.m.6 views

VulnCheck KEV: CVE-2017-0147

The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet...

7.5CVSS6.9AI score0.99693EPSS
SaveExploits26References1
UbuntuCve
UbuntuCve
added 2017/03/03 4:59 p.m.26 views

CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

5.5CVSS6.5AI score0.00452EPSS
SaveExploits0References3
OSV
OSV
added 2017/03/03 4:59 p.m.9 views

CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

5.5CVSS6.4AI score
SaveExploits0References5
CVE
CVE
added 2017/03/03 4:0 p.m.191 views

CVE-2016-7409

Dropbear SSH (dbclient and server) before 2016.74 is vulnerable when built with DEBUG_TRACE: local users can read process memory via the -v argument due to a failed remote ident. This CVE affects Dropbear versions prior to 2016.74; remediation is to upgrade to 2016.74 or newer. No exploit details...

5.5CVSS6.7AI score0.00452EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2017/03/03 4:0 p.m.43 views

CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

6.9AI score0.00452EPSS
SaveExploits0References5
NVD
NVD
added 2017/02/20 8:59 a.m.17 views

CVE-2016-7643

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of servi...

8.1CVSS6.9AI score0.01353EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2017/02/20 8:59 a.m.18 views

CVE-2016-7598

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process...

6.5CVSS7AI score0.01705EPSS
SaveExploits0References3
OSV
OSV
added 2017/02/20 8:59 a.m.8 views

UBUNTU-CVE-2016-4743

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process...

7.1CVSS7.2AI score0.01021EPSS
SaveExploits0References4
OSV
OSV
added 2017/02/20 8:59 a.m.3 views

UBUNTU-CVE-2016-7598

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process...

6.5CVSS7AI score0.01705EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2017/02/20 8:35 a.m.22 views

CVE-2016-7598

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process...

5.6AI score0.01705EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2017/02/20 8:35 a.m.24 views

CVE-2016-7598

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process...

6.5CVSS6.5AI score0.01705EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2017/01/26 12:0 a.m.12 views

The vulnerability of the Internet Explorer browser allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process’s memory through a specially crafted web page...

4.3CVSS6.6AI score0.14972EPSS
SaveExploits0References4Affected Software1
Apple
Apple
added 2017/01/23 5:36 a.m.40 views

About the security content of tvOS 10 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

10CVSS0.8AI score0.08628EPSS
SaveExploits0Affected Software1
UbuntuCve
UbuntuCve
added 2017/01/21 1:59 a.m.25 views

CVE-2017-5545

The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via Apple Property List data that is too short...

9.1CVSS7.2AI score0.03799EPSS
SaveExploits0References1
NVD
NVD
added 2017/01/11 4:59 p.m.14 views

CVE-2017-5209

The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service buffer over-read via split encoded Apple Property List data...

9.1CVSS8.4AI score0.02851EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2016/12/27 12:0 a.m.7 views

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the atmfd.dll library in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information from the process’s memory...

4.3CVSS6.6AI score0.09335EPSS
SaveExploits0References5
NVD
NVD
added 2016/12/20 6:59 a.m.23 views

CVE-2016-7290

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service...

7.1CVSS6.6AI score0.22765EPSS
SaveExploits1References3
OSV
OSV
added 2016/12/20 6:59 a.m.4 views

CVE-2016-7295

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information from...

5.5CVSS5.8AI score0.02712EPSS
SaveExploits0References3
OSV
OSV
added 2016/12/20 6:59 a.m.4 views

CVE-2016-7284

Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

4.3CVSS5.8AI score0.14972EPSS
SaveExploits0References3
Rows per page
Query Builder