Lucene search
+L

7564 matches found

UbuntuCve
UbuntuCve
added 2012/12/21 5:46 a.m.40 views

CVE-2012-1712

Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown impact and attack vectors...

10CVSS5.9AI score0.02077EPSS
SaveExploits0References2
Prion
Prion
added 2012/12/21 5:46 a.m.23 views

Directory traversal

Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown impact and attack vectors...

10CVSS6.7AI score0.02077EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2012/12/21 2:00 a.m.51 views

CVE-2012-1712

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2012-1712.

10CVSS6.3AI score0.02077EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2012/12/21 2:00 a.m.37 views

CVE-2012-1712

Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown impact and attack vectors...

6.2AI score0.02077EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2012/12/17 10:37 a.m.17 views

Korean Cyber espionage attack Targets Russia

Ask an expert on cyber espionage and he for sure he will speak of China, the most active and advanced country in this sector, this time a clamorous campaign apparently originated from Korea has been discovered. Security company FireEye collected evidences of a cyber espionage campaign, named...

6.6AI score
SaveExploits0
Metasploit
Metasploit
added 2012/12/15 12:00 a.m.51 views

TWiki MAKETEXT Remote Command Execution

This module exploits a vulnerability in the MAKETEXT Twiki variable. By using a specially crafted MAKETEXT, a malicious user can execute shell commands since user input is passed to the Perl "eval" command without first being sanitized. The problem is caused by an underlying security issue in the...

7.5CVSS7.3AI score0.63488EPSS
SaveExploits13
ThreatPost
ThreatPost
added 2012/12/10 6:01 p.m.12 views

Team Ghostshell Allegedly Dumps 1.6 M Aerospace, Nanotechnology Records

Hacktivist collective Team Ghostshell is claiming this morning to have spilled 1.6 million accounts from a handful of companies in the aerospace, nanotechnology, banking, law, education and government realm, a hack the group deems Project White Fox. The group claims White Fox is its “final stand”...

0.4AI score
SaveExploits0References4
Metasploit
Metasploit
added 2012/12/03 12:00 a.m.120 views

Foswiki MAKETEXT Remote Command Execution

This module exploits a vulnerability in the MAKETEXT Foswiki variable. By using a specially crafted MAKETEXT, a malicious user can execute shell commands since the input is passed to the Perl "eval" command without first being sanitized. The problem is caused by an underlying security issue in th...

5.5AI score
SaveExploits0
securityvulns
securityvulns
added 2012/12/02 12:00 a.m.78 views

APPLE-SA-2012-11-29-1 Apple TV 5.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-11-29-1 Apple TV 5.1.1 Apple TV 5.1.1 is now available and addresses the following: Apple TV Available for: Apple TV 2nd generation and later Impact: Compromised applications may be able to determine addresses in the kernel Description: ...

5.1CVSS0.2AI score0.16676EPSS
SaveExploits3
The Hacker News
The Hacker News
added 2012/12/01 6:26 p.m.11 views

Malware Swipes Rocket Data from Japanese space agency

Japan's space agency says it is investigating a possible leak of data about its Epsilon rocket due to a computer virus. Malware Case : The Japan Aerospace Exploration Agency said the virus, in a computer at its Tsukuba Space Centre, north-east of Tokyo, was found to be secretly collecting data an...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2012/12/01 5:29 p.m.13 views

European Space Agency SQL vulnerability exploited

The European Space Agency ESA is an intergovernmental organisation dedicated to the exploration of space. Hacker going by name "SlixMe" find and exploit SQL Injection vulnerability on a sub domain of website. Hacker upload dump on his website, where he disclose the SQLi vulnerable link and Databa...

8.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2012/11/30 2:15 p.m.22 views

Syria suffers nationwide communications outage

The Syrian situation is getting worse day by day, the regime is attacking dissident mercilessly meanwhile the world wide community is standing by and watch helplessly stopped by prohibition of military intervention imposed by Russia and China, historical allies of Damascus. Syria regime is fierce...

6.9AI score
SaveExploits0
Debian CVE
Debian CVE
added 2012/11/24 8:00 p.m.36 views

CVE-2012-3433

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service domain 0 VCPU hang and kernel panic by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown...

4.9CVSS4.7AI score0.00416EPSS
SaveExploits0
Cvelist
Cvelist
added 2012/11/24 8:00 p.m.34 views

CVE-2012-3433

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service domain 0 VCPU hang and kernel panic by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown...

3.3AI score0.00416EPSS
SaveExploits0References10
Prion
Prion
added 2012/11/23 8:55 p.m.34 views

Design/Logic Flaw

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."...

7.2CVSS7.1AI score0.00528EPSS
SaveExploits0References41Affected Software13
Debian CVE
Debian CVE
added 2012/11/23 8:00 p.m.29 views

CVE-2012-3515

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."...

7.2CVSS6.6AI score0.00528EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2012/11/09 12:00 a.m.40 views

RedHat Update for kernel RHSA-2012:1426-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2012:1426-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.6CVSS0.4AI score0.0781EPSS
SaveExploits4References2
Cent OS
Cent OS
added 2012/11/07 12:15 p.m.82 views

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2012:1426 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring...

7.6CVSS7AI score0.0781EPSS
SaveExploits4References7
Positive Technologies
Positive Technologies
added 2012/11/06 12:00 a.m.11 views

PT-2013-1527 · Red Hat +3 · Fedora +4

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux RHEL versions 5 and 6 Fedora versions 15 and 16 Description: The ExecShield feature in a certain Red Hat patch for the Linux kernel does not properly handle use of many shared libraries by a 32-bit executable file. Th...

7.6CVSS8.1AI score0.0781EPSS
SaveExploits6References27
The Hacker News
The Hacker News
added 2012/10/26 6:37 p.m.10 views

Hacker leaks source code of NASA website belongs to US Government computer

A Hacker going by name - "LegitHacker97" claiming that he successfully access a NASA subdomain website , that actually belongs to a US Government computer, as mentioned on homepage. WARNING This is a US Government computer Hacker also dump a 82.51 MB compressed or 337 MB uncompressed Archive five...

6.9AI score
SaveExploits0
Rows per page
Query Builder