Lucene search
K

2402 matches found

Prion
Prion
added 2018/06/11 9:29 p.m.15 views

Information disclosure

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

5CVSS7.3AI score0.00979EPSS
Exploits1References11Affected Software10
Debian CVE
Debian CVE
added 2018/06/11 9:0 p.m.34 views

CVE-2017-7749

A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...

9.8CVSS9.6AI score0.01874EPSS
Exploits0
Prion
Prion
added 2018/06/07 12:29 p.m.9 views

Race condition

A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Firmware could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of...

7.8CVSS7.5AI score0.01134EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2018/06/07 12:0 p.m.1 views

CVE-2018-0316

A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Firmware could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of...

5.8AI score0.01134EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2018/06/07 12:0 a.m.40 views

Cisco ASA Directory Traversal

A vulnerability in the web interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. It is also possible on certain software releases that the ASA will...

7.5CVSS1.1AI score0.94404EPSS
In wildExploits18References7
OSV
OSV
added 2018/05/08 4:29 a.m.2 views

CVE-2018-10798

A hang issue was discovered in Brave before 0.14.0 on, for example, Linux. The vulnerability is caused by mishandling of JavaScript code that triggers the reload of a page continuously with an interval of 1 second...

6.5CVSS5.8AI score0.00238EPSS
Exploits1References1
CVE
CVE
added 2018/05/07 2:0 p.m.39 views

CVE-2018-10798

CVE-2018-10798 affects Brave

6.5CVSS6.5AI score0.00238EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2018/05/07 2:0 p.m.19 views

CVE-2018-10798

A hang issue was discovered in Brave before 0.14.0 on, for example, Linux. The vulnerability is caused by mishandling of JavaScript code that triggers the reload of a page continuously with an interval of 1 second...

6.5AI score0.00238EPSS
Exploits1References1
CNVD
CNVD
added 2018/05/04 12:0 a.m.1 views

Denial of Service Vulnerability in Cisco Wireless LAN Controller

The Cisco 3500, 5500, and 8500 Series Wireless LAN Controller Software are wireless LAN control software from Cisco. A resource management error vulnerability exists in the IP Version 4 IPv4 fragment reassembly feature in the Cisco 3500, 5500, and 8500 Series Wireless LAN Controller Software, whi...

8.6CVSS6.8AI score0.00484EPSS
Exploits0References1
OSV
OSV
added 2018/05/02 10:29 p.m.1 views

CVE-2018-0235

A vulnerability in the 802.11 frame validation functionality of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is due to incomplete input...

7.4CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2018/04/25 1:29 p.m.1 views

UBUNTU-CVE-2017-7652

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available default limit...

7.5CVSS7.1AI score0.23134EPSS
Exploits1References3
OSV
OSV
added 2018/04/25 1:29 p.m.3 views

ALPINE-CVE-2017-7652

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available default limit...

7.5CVSS6.8AI score0.01004EPSS
Exploits0References1
OSV
OSV
added 2018/04/25 1:29 p.m.2 views

DEBIAN-CVE-2017-7652

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available default limit...

7.5CVSS7.4AI score0.01004EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2018/04/25 1:0 p.m.26 views

CVE-2017-7652

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available default limit...

7.5CVSS7.6AI score0.01004EPSS
Exploits0
CVE
CVE
added 2018/04/25 1:0 p.m.93 views

CVE-2017-7652

CVE-2017-7652 affects Eclipse Mosquitto (notably around version 1.4.14) where reloading configuration on SIGHUP can exhaust file descriptors/sockets, preventing opening the config file. Publicly documented impact includes potential configuration reload failures due to FD exhaustion. Remediation g...

7.5CVSS7.2AI score0.01004EPSS
Exploits0References5Affected Software1
AlpineLinux
AlpineLinux
added 2018/04/25 1:0 p.m.29 views

CVE-2017-7652

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available default limit...

7.5CVSS7.4AI score0.01004EPSS
Exploits0
OSV
OSV
added 2018/04/19 8:29 p.m.3 views

CVE-2018-0231

A vulnerability in the Transport Layer Security TLS library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service DoS condition...

8.6CVSS6.1AI score0.00488EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2018/04/18 12:0 a.m.2 views

PT-2018-1301 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Transport Layer Security TLS library could allow an...

8.6CVSS8.6AI score0.00488EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2018/04/17 12:0 a.m.161 views

Cisco IOS DHCP Multiple Vulnerabilities

According to its self-reported version, the Cisco IOS software running on the remote device is affected by multiple denial of service vulnerabilities in the DHCP client implementation when parsing DHCP packets. An unauthenticated, remote attacker can exploit these issues, via specially crafted DH...

8.6CVSS7.8AI score0.0619EPSS
Exploits0References10
CNVD
CNVD
added 2018/04/03 12:0 a.m.1 views

Cisco IOS Software and IOS XE Software Input Validation Vulnerability

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the Internet Key Exchange Version 1 IKEv1 feature implementation in Cisco IOS Software and IOS XE Software, which arises from the program faili...

7.8CVSS6.7AI score0.06968EPSS
Exploits0References1
Rows per page
Query Builder