Lucene search
+L

6754 matches found

Positive Technologies
Positive Technologies
•added 2013/06/07 12:00 a.m.•10 views

PT-2013-3551 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.34 Description: The issue is related to the tcp read sock function in the Linux kernel, which does not properly manage skb consumption. This allows local users to cause a denial of service, resulting in a...

7.2CVSS5.7AI score0.01018EPSS
SaveExploits6References57
Positive Technologies
Positive Technologies
•added 2013/05/27 12:00 a.m.•4 views

PT-2013-4063

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Data Growth for Oracle E-Business Suite versions 6.x through 9.x before 9.1.0.3 Description The issue concerns the transmission of login credentials in an unencrypted manner, allowing remote attackers to intercept sensitiv...

5CVSS0.01173EPSS
SaveExploits0References3
zdt
zdt
•added 2013/05/06 12:00 a.m.•24 views

D-Link DSL-320B - Multiple Vulnerabilities

D-Link DSL-320B suffers from persistent cross site scripting and multiple authentication bypass bypass vulnerabilities. Device: DSL-320B Firmware Version: EUDSL-320B v1.23 date: 28.12.2010 Vendor URL:...

7.1AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2013/05/06 12:00 a.m.•9 views

OPC UA Publish Request Command

...

7AI score
SaveExploits0
seebug.org
seebug.org
•added 2013/04/13 12:00 a.m.•73 views

Discuz点触验证码插件验证绕过+密码明文传输

简要描述: 部分DZ论坛启用点触验证码后验证码完全没有起作用。同时由于更改了登录逻辑,还会造成论坛登录密码明文传输。 详细说明: 由于点触验证码插件的验证逻辑有问题,启用验证码之后可以简单绕过。同时由于更改了登录逻辑,会将DZ原本的md5传输的密文变成明文传输。 漏洞证明: 将红框中的display: none; 去掉,然后可以看到多了一个登录按钮。 这个按钮是没有启用验证逻辑的。直接输入用户名密码就可以登录。同时这样登录的话POST提交的是正常的md5加密后的密码。 但是如果输入验证码提交的话,POST数据就变成了: 其中可以看到明文的密码字段。...

7.1AI score
SaveExploits0
NVD
NVD
•added 2013/04/03 12:55 a.m.•32 views

CVE-2012-6129

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...

7.5CVSS7.9AI score0.05098EPSS
SaveExploits1References6
OSV
OSV
•added 2013/04/03 12:55 a.m.•9 views

DEBIAN-CVE-2012-6129

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...

7.5CVSS8.2AI score0.05098EPSS
SaveExploits1References1
Prion
Prion
•added 2013/04/03 12:55 a.m.•24 views

Stack overflow

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...

7.5CVSS8.7AI score0.05098EPSS
SaveExploits1References6Affected Software3
Cvelist
Cvelist
•added 2013/04/03 12:00 a.m.•39 views

CVE-2012-6129

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...

7.8AI score0.05098EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2013/04/03 12:00 a.m.•2 views

PT-2013-1908

Name of the Vulnerable Software and Affected Versions Transmission versions prior to 2.74 Description The issue is a stack-based buffer overflow in the utp.cpp file of libutp, which can be exploited by remote attackers through crafted micro transport protocol packets. This can lead to a denial of...

7.5CVSS0.05098EPSS
SaveExploits1References10
Debian CVE
Debian CVE
•added 2013/04/03 12:00 a.m.•39 views

CVE-2012-6129

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...

7.5CVSS8.1AI score0.05098EPSS
SaveExploits1
Mend
Mend
•added 2013/04/03 12:00 a.m.•3 views

CVE-2012-6129

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...

7.5CVSS0.05098EPSS
SaveExploits1References6
CVE
CVE
•added 2013/04/03 12:00 a.m.•93 views

CVE-2012-6129

CVE-2012-6129 is a stack-based buffer overflow in utp.cpp of libutp, affecting Transmission (and related products) prior to version 2.74. The vulnerability allows a remote attacker to crash the application (DoS) and potentially execute arbitrary code by sending crafted micro-transport protocol pa...

7.5CVSS8AI score0.05098EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/04/03 12:00 a.m.•6 views

CVE-2012-6129: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...

7.5CVSS6.6AI score0.05098EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/03/19 12:00 a.m.•46 views

Fedora Update for krb5 FEDORA-2013-3116

Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2013-3116 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

9.3CVSS7.7AI score0.04814EPSS
SaveExploits0References2
ThreatPost
ThreatPost
•added 2013/03/15 2:03 a.m.•17 views

Reuters Editor Indicted for Helping Hackers Break Into Tribune Co.

A Reuters social media editor on Thursday was charged with helping hackers break into the Tribune Co.’s network shortly after he was fired from a Sacramento television station in Fall 2010. A U.S. Eastern District grand jury in Sacramento handed down a three-count indictment against Matthew Keys,...

0.9AI score
SaveExploits0References2
OSV
OSV
•added 2013/03/07 3:55 p.m.•8 views

DEBIAN-CVE-2013-2475

The TCP dissector in Wireshark 1.8.x before 1.8.6 allows remote attackers to cause a denial of service application crash via a malformed packet...

3.3CVSS7.3AI score0.01139EPSS
SaveExploits0References1
Fedora
Fedora
•added 2013/03/05 11:33 p.m.•65 views

[SECURITY] Fedora 17 Update: rubygem-json-1.6.8-1.fc17

This is a implementation of the JSON specification according to RFC 4627 in Ruby. You can think of it as a low fat alternative to XML, if you want to store data to disk or transmit it over a network rather than use a verbose markup language...

7.5CVSS7AI score0.13911EPSS
SaveExploits0
Fedora
Fedora
•added 2013/03/05 11:31 p.m.•63 views

[SECURITY] Fedora 18 Update: rubygem-json-1.6.8-1.fc18

This is a implementation of the JSON specification according to RFC 4627 in Ruby. You can think of it as a low fat alternative to XML, if you want to store data to disk or transmit it over a network rather than use a verbose markup language...

7.5CVSS7AI score0.13911EPSS
SaveExploits0
securityvulns
securityvulns
•added 2013/03/02 12:00 a.m.•46 views

Transmission memory corruption

micro transport packets parsing memory corruption...

7.5CVSS4.3AI score0.05098EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder