Lucene search
+L

5706 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/27 12:00 a.m.•5 views

CVE-2018-14612: NULL Pointer Dereference

An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfsrootnode when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfsreadblockgroups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks i...

7.1CVSS5.8AI score0.02557EPSS
SaveExploits1References2
OSV
OSV
•added 2018/07/27 12:00 a.m.•14 views

UBUNTU-CVE-2018-14613

An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in ioctlmappage when mounting and operating a crafted btrfs image, because of a lack of block group item validation in checkleafitem in fs/btrfs/tree-checker.c...

5.5CVSS6.7AI score0.02479EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2018/07/26 12:00 a.m.•3 views

PT-2018-3518

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.17.10 Description: The issue is related to an invalid pointer dereference in the io ctl map page function when mounting and operating a crafted btrfs image. This is due to a lack of block group item validation...

7.1CVSS0.02479EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2018/07/26 12:00 a.m.•2 views

PT-2018-3519

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.17.11 Description: The issue is related to an invalid pointer dereference in the btrfs root node function when mounting a crafted btrfs image. This is due to a lack of chunk block group mapping validation in...

9.3CVSS0.04438EPSS
SaveExploits5References111
Prion
Prion
•added 2018/07/09 6:29 a.m.•14 views

Integer overflow

The mintToken function of a smart contract implementation for MoneyTree TREE, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

5CVSS7.7AI score0.01024EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/09 12:00 a.m.•7 views

CVE-2018-13554: Integer Overflow or Wraparound

The mintToken function of a smart contract implementation for MoneyTree TREE, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

7.5CVSS7.3AI score0.01024EPSS
SaveExploits0References2
NVD
NVD
•added 2018/07/06 5:29 p.m.•27 views

CVE-2018-5890

If the fdttotalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

7.8CVSS7.4AI score0.00172EPSS
SaveExploits0References2
Prion
Prion
•added 2018/07/06 5:29 p.m.•27 views

Design/Logic Flaw

If the fdttotalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

4.6CVSS7.8AI score0.00172EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/07/06 5:00 p.m.•41 views

CVE-2018-5890

If the fdttotalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

7.4AI score0.00172EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/07/06 12:00 a.m.•4 views

PT-2018-17218

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to security patch level 2018-06-05 Description: The issue concerns a bypass of an error check for a valid device tree in Android releases using the Linux kernel. This occurs when the fdt totalsize is reported as 0...

7.8CVSS0.00172EPSS
SaveExploits0References3
NVD
NVD
•added 2018/07/05 2:29 a.m.•20 views

CVE-2018-13208

The sell function of a smart contract implementation for MoneyTree TREE, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

7.5CVSS7.7AI score0.00988EPSS
SaveExploits0References2
Prion
Prion
•added 2018/07/05 2:29 a.m.•25 views

Integer overflow

The sell function of a smart contract implementation for MoneyTree TREE, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

5CVSS7.7AI score0.00988EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/05 12:00 a.m.•9 views

CVE-2018-13208: Integer Overflow or Wraparound

The sell function of a smart contract implementation for MoneyTree TREE, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

7.5CVSS7.3AI score0.00988EPSS
SaveExploits0References2
Check Point Advisories
Check Point Advisories
•added 2018/06/28 12:00 a.m.•7 views

Fuzzer SMB Tree Connect Server Name - Ver2

A vulnerability exists in Fuzzer:. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

5.1AI score
SaveExploits0
CNVD
CNVD
•added 2018/06/20 12:00 a.m.•10 views

Olive Tree Ftp Server application for Android Information Disclosure Vulnerability

Olive Tree Ftp Server application for Android is an application for building FTP servers on the Android platform. A security vulnerability exists in the Olive Tree Ftp Server application for Android platform. An attacker can exploit the vulnerability to access sensitive data...

9.8CVSS9.4AI score0.01141EPSS
SaveExploits0References1
Prion
Prion
•added 2018/06/15 4:29 p.m.•22 views

Design/Logic Flaw

The Olive Tree Ftp Server application 1.32 for Android has a "Sensitive Data on the Clipboard" vulnerability, as demonstrated by reading the "User password" field with the Drozer post.capture.clipboard module...

5CVSS9.1AI score0.01141EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2018/06/15 4:29 p.m.•18 views

CVE-2018-12481

The Olive Tree Ftp Server application 1.32 for Android has a "Sensitive Data on the Clipboard" vulnerability, as demonstrated by reading the "User password" field with the Drozer post.capture.clipboard module...

9.8CVSS5.8AI score0.01141EPSS
SaveExploits0References1
CVE
CVE
•added 2018/06/15 4:00 p.m.•56 views

CVE-2018-12481

The Olive Tree Ftp Server application for Android (version 1.32) is affected by a Sensitive Data on the Clipboard disclosure vulnerability. According to the CVE and cross-referenced reports, an attacker can read the password stored in the clipboard (e.g., the “User password” field) using the Droz...

9.8CVSS9.1AI score0.01141EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/06/15 4:00 p.m.•39 views

CVE-2018-12481

The Olive Tree Ftp Server application 1.32 for Android has a "Sensitive Data on the Clipboard" vulnerability, as demonstrated by reading the "User password" field with the Drozer post.capture.clipboard module...

9.3AI score0.01141EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/15 12:00 a.m.•5 views

CVE-2018-12481: Exposure of Sensitive Information to an Unauthorized Actor

The Olive Tree Ftp Server application 1.32 for Android has a "Sensitive Data on the Clipboard" vulnerability, as demonstrated by reading the "User password" field with the Drozer post.capture.clipboard module...

9.8CVSS8.1AI score0.01141EPSS
SaveExploits0References2
Rows per page
Query Builder