Lucene search
+L

8631 matches found

Mend
Mend
•added 2014/11/03 10:00 p.m.•4 views

CVE-2014-0488

APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which allows remote attackers to have unspecified impact via crafted repository data...

6.8CVSS0.02084EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2014/11/03 10:00 p.m.•51 views

CVE-2014-0487

APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors...

7.5CVSS6.5AI score0.01854EPSS
SaveExploits0
Cvelist
Cvelist
•added 2014/11/03 4:00 p.m.•50 views

CVE-2014-5272

libavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x before 2.3.2 allows remote attackers to have unspecified impact via a crafted iff image, which triggers an out-of-bounds array access, related to the rgb8 and rgbn formats...

8.6AI score0.02587EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/03 12:00 a.m.•4 views

CVE-2014-0487: Undefined Security Weakness

APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors...

7.5CVSS5.7AI score0.01854EPSS
SaveExploits0References1
NVD
NVD
•added 2014/10/26 8:55 p.m.•28 views

CVE-2013-7408

F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value...

7.5CVSS7AI score0.02043EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/26 12:00 a.m.•8 views

CVE-2013-7408: Undefined Security Weakness

F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value...

7.5CVSS5.9AI score0.02043EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2014/10/26 12:00 a.m.•5 views

PT-2014-3423

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Analytics versions 11.x before 11.4.0 Description The issue is related to a predictable session cookie, which could allow remote attackers to have an unspecified impact by guessing the cookie value. Recommendations For F5 BIG-IP...

7.5CVSS0.02043EPSS
SaveExploits1References3
Mend
Mend
•added 2014/10/25 9:00 p.m.•4 views

CVE-2014-1929

python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323...

4.9CVSS0.00386EPSS
SaveExploits1References13
Cvelist
Cvelist
•added 2014/10/25 9:00 p.m.•55 views

CVE-2014-1929

python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323...

6.5AI score0.00386EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2014/10/25 12:00 a.m.•44 views

CVE-2014-6251

Stack-based buffer overflow in CPUMiner before 2.4.1 allows remote attackers to have an unspecified impact by sending a mining.subscribe response with a large nonce2 length, then triggering the overflow with a mining.notify request...

7.2AI score0.0102EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2014/10/10 12:00 a.m.•40 views

F5 Networks BIG-IP : OpenSSL vulnerability (SOL15404)

OpenSSL before 0.9.8m does not check for a NULL return value from bnwexpand function calls in 1 crypto/bn/bndiv.c, 2 crypto/bn/bngf2m.c, 3 crypto/ec/ec2smpl.c, and 4 engines/eubsec.c, which has unspecified impact and context-dependent attack vectors. C Tenable Network Security, Inc. The descripti...

10CVSS6.9AI score0.05779EPSS
SaveExploits1References2
NVD
NVD
•added 2014/10/08 10:55 a.m.•30 views

CVE-2014-3189

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...

7.5CVSS7.1AI score0.01252EPSS
SaveExploits0References5
NVD
NVD
•added 2014/10/08 10:55 a.m.•37 views

CVE-2014-3192

Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other...

7.5CVSS9.7AI score0.01683EPSS
SaveExploits0References14
Prion
Prion
•added 2014/10/08 10:55 a.m.•36 views

Design/Logic Flaw

Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other...

7.5CVSS7.5AI score0.01683EPSS
SaveExploits0References14Affected Software9
Prion
Prion
•added 2014/10/08 10:55 a.m.•34 views

Out-of-bounds

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...

7.5CVSS7.5AI score0.01252EPSS
SaveExploits0References5Affected Software5
Debian CVE
Debian CVE
•added 2014/10/08 10:00 a.m.•41 views

CVE-2014-3190

Removed by vendor...

7.5CVSS9.4AI score0.01415EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2014/10/08 10:00 a.m.•45 views

CVE-2014-3192

Removed by vendor...

7.5CVSS9.4AI score0.01683EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2014/10/08 10:00 a.m.•53 views

CVE-2014-3189

Removed by vendor...

7.5CVSS9.4AI score0.01252EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2014/10/08 10:00 a.m.•45 views

CVE-2014-3194

Removed by vendor...

7.5CVSS9.4AI score0.01159EPSS
SaveExploits0
Mend
Mend
•added 2014/10/03 2:00 p.m.•3 views

CVE-2014-6290

The News ttnews extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impact via vectors related to an "insecure unserialize" issue...

7.5CVSS0.01309EPSS
SaveExploits0References2
Rows per page
Query Builder