Lucene search
+L

153 matches found

OSV
OSV
added 2017/11/22 7:29 p.m.6 views

CVE-2017-2706

Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service...

7.1CVSS5.8AI score0.00866EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/11/22 7:0 p.m.22 views

CVE-2017-2706

Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service...

6.8AI score0.00866EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2017/07/14 12:0 a.m.6 views

The vulnerability of the EMC Avamar backup system allows a perpetrator to access confidential information, update software, or otherwise affect the application.

The vulnerability of the EMC Avamar backup system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to access confidential information, update software, or perform any other service-related operations...

7.5CVSS7.8AI score0.03286EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2017/07/13 12:0 a.m.7 views

Huawei Mate 9 Push module directory traversal vulnerability

Huawei Mate 9 is a smartphone from Chinese company Huawei.Push module is one of the message push modules. A directory traversal vulnerability exists in the Push module in Huawei Mate 9 version MHA-AL00AC00B125 due to the program not checking the file name when compressing the file. An attacker...

7.1CVSS6.6AI score0.00866EPSS
Exploits0References1
OSV
OSV
added 2016/07/20 12:0 a.m.5 views

UBUNTU-CVE-2016-3486

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS...

6.5CVSS6.9AI score0.04162EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2016/06/09 12:0 a.m.7 views

The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.

The vulnerability of the exifprocessTIFFinJPEG function ext/exif/exif.c in the PHP interpreter is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially other effects such as out-of-memory reading through specially crafted...

7.5CVSS7.9AI score0.06689EPSS
Exploits1References6Affected Software1
RedHat Linux
RedHat Linux
added 2016/05/02 12:36 p.m.5 views

mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to Security: Privileges...

5.5CVSS7.3AI score0.01623EPSS
Exploits0References5
CNVD
CNVD
added 2015/10/22 12:0 a.m.3 views

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2015-06823)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. An unspecified vulnerability exists in Oracle MySQL Server 5.6.26 and earlier versions. Allows an authenticated...

2.1CVSS7.5AI score0.01983EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2014/12/02 4:59 p.m.4 views

mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR...

4CVSS6.5AI score0.03911EPSS
Exploits0References5
OSV
OSV
added 2011/08/29 3:55 p.m.5 views

UBUNTU-CVE-2011-2827

Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text searching...

7.5CVSS5.9AI score0.01807EPSS
Exploits1References2
OSV
OSV
added 2011/03/11 2:1 a.m.3 views

UBUNTU-CVE-2011-1195

Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "document script lifetime handling."...

7.5CVSS5.9AI score0.01631EPSS
Exploits1References2
Cvelist
Cvelist
added 2011/02/22 6:0 p.m.29 views

CVE-2011-1059

Use-after-free vulnerability in WebCore in WebKit before r77705, as used in Google Chrome before 11.0.672.2 and other products, allows user-assisted remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that entice a user to resubmit...

7.1AI score0.01421EPSS
Exploits1References7
securityvulns
securityvulns
added 2003/12/11 12:0 a.m.27 views

Cisco Security Advisory: Vulnerability in Authentication Library for ACNS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability in Authentication Library for ACNS Revision 1.0 For Public Release 2003 December 10 16:00 UTC GMT - -------------------------------------------------------------------------- Summary ======= By entering an overly...

0.1AI score
Exploits0
Rows per page
Query Builder