6802 matches found
CVE-2016-1161
Cross-site request forgery CSRF vulnerability in ManageEngine Password Manager Pro before 8.5 Build 8500...
BELL-CVE-2017-6505 CVE-2017-6505 does not affect BellSoft software
Bulletin has no description...
DEBIAN-CVE-2016-10189
BitlBee before 3.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list...
CVE-2017-6798
Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208...
Design/Logic Flaw
Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208...
OpenSSL Denial of Service Vulnerability (CNVD-2017-01532)
OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...
Google Pixel NVIDIA GPU Driver elevation of privilege vulnerability (CNVD-2017-00175)
The Google Pixel C is a tablet computer from Google, U.S. The NVIDIA GPU is an NVIDIA graphics processor driver component used in... An elevation of privilege vulnerability exists in Google Nexus. An attacker can exploit the vulnerability to execute arbitrary code with elevated privileges in the...
BELL-CVE-2016-7948 CVE-2016-7948 does not affect BellSoft software
Bulletin has no description...
Google Android Mediaserver Information Disclosure Vulnerability (CNVD-2016-11143)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An information disclosure vulnerability exists in Mediaserver in Android. A local attacker can exploit this...
CVE-2016-6321
creationtimestamp| type| source ---|---|--- 2016-10-26 23:42:19+00:00| published-proof-of-concept| https://t.me/FullDisclosure/209 2016-10-28 17:43:27+00:00| seen| https://t.me/itsecalert/49 2016-10-30 15:23:59+00:00| published-proof-of-concept| https://t.me/FullDisclosure/216...
Lepton memory corruption vulnerability (CNVD-2016-05180)
Lepton is a set of tools for lossless compression of JPEG format files. A memory corruption vulnerability exists in Lepton, which can be exploited by attackers to obtain sensitive information and cause a denial of service...
CVE-2016-4505
Resource Data Management RDM Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passwords via unspecified vectors...
Operation Technology ETAP 14.1.0 - Local Privilege Escalation
Operation Technology ETAP 14.1.0 Local Privilege Escalation Vendor: Operation Technology, Inc. Product web page: http://www.etap.com Affected version: 14.1.0.0 Summary: Enterprise Software Solution for Electrical Power Systems. ETAP is the most comprehensive electrical engineering software...
Linux kernel denial of service vulnerability (CNVD-2016-03217)
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel that can be exploited by attackers to cause a denial of service...
CVE-2016-2244
HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors...
CVE-0216-0777
creationtimestamp| type| source ---|---|--- 2016-01-20 11:57:40+00:00| seen| https://t.me/ictsecurity/107...
UBUNTU-CVE-2015-7200
The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key...
CVE-2014-6272
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...