Lucene search
+L

2867 matches found

OSV
OSV
•added 2016/01/04 5:59 a.m.•10 views

UBUNTU-CVE-2015-8721

Buffer overflow in the tvbuncompress function in epan/tvbuffzlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers to cause a denial of service application crash via a crafted packet with zlib compression...

5.5CVSS6.5AI score0.01701EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2016/01/04 2:00 a.m.•47 views

CVE-2015-8721

Buffer overflow in the tvbuncompress function in epan/tvbuffzlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers to cause a denial of service application crash via a crafted packet with zlib compression...

5.5CVSS5.7AI score0.01701EPSS
SaveExploits0
CNVD
CNVD
•added 2015/12/13 12:00 a.m.•14 views

Apple OS X Privilege Bypass Vulnerability

Apple OS X is an operating system developed by Apple Inc. A security vulnerability exists in Apple OS X zlib, which allows an attacker to exploit the vulnerability to install configuration profile files without administrator privileges...

4.6CVSS6.7AI score0.00347EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/12/13 12:00 a.m.•10 views

Apple OS X zlib Arbitrary Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. A memory corruption vulnerability exists in Apple OS X zlib, which allows attackers to exploit the vulnerability to construct a malicious WEB page that can be tricked into loading by the user and can be used to execute arbitrary code...

6.8CVSS7.4AI score0.02809EPSS
SaveExploits0References1
NVD
NVD
•added 2015/12/11 11:59 a.m.•18 views

CVE-2015-7054

zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execute arbitrary code via a crafted web site...

6.8CVSS8.1AI score0.02809EPSS
SaveExploits0References10
Prion
Prion
•added 2015/12/11 11:59 a.m.•20 views

Design/Logic Flaw

zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execute arbitrary code via a crafted web site...

6.8CVSS7.7AI score0.02809EPSS
SaveExploits0References10Affected Software4
CVE
CVE
•added 2015/12/11 11:00 a.m.•84 views

CVE-2015-7054

CVE-2015-7054 affects Apple platforms via the zlib component in the Compression subsystem (iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, watchOS before 2.1). The vulnerability arises because memory is not initialized for an unspecified data structure, allowing remote attackers to execute ...

6.8CVSS8.9AI score0.02809EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
•added 2015/12/11 11:00 a.m.•32 views

CVE-2015-7054

zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execute arbitrary code via a crafted web site...

8.5AI score0.02809EPSS
SaveExploits0References10
OpenVAS
OpenVAS
•added 2015/10/08 12:00 a.m.•41 views

Oracle: Security Advisory (ELSA-2007-0391)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS9.5AI score0.02702EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2015/09/08 12:00 a.m.•50 views

Amazon Linux: Security Advisory (ALAS-2013-171)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.9AI score0.35584EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2015/08/19 12:00 a.m.•19 views

Flash - Issues in DefineBitsLossless and DefineBitsLossless2 Leads to Using Uninitialized Memory

Flash - Issues in DefineBitsLossless and DefineBitsLossless2 Leads to Using Uninitialized Memory Source: https://code.google.com/p/google-security-research/issues/detail?id=326&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for:...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2015/08/19 12:00 a.m.•29 views

Flash - Issues in DefineBitsLossless and DefineBitsLossless2 Leads to Using Uninitialized Memory

Source: https://code.google.com/p/google-security-research/issues/detail?id=326&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Tracking for: https://code.google.com/p/chromium/issues/detail?id=475018 Credit is to bilou, working with the Chromium Vulnerability Rewards...

10CVSS5.1AI score0.47615EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2015/08/04 12:00 a.m.•32 views

Scientific Linux Security Update : sudo on SL6.x i386/x86_64 (20150722)

It was discovered that sudo did not perform any checks of the TZ environment variable value. If sudo was configured to preserve the TZ environment variable, a local user with privileges to execute commands via sudo could possibly use this flaw to achieve system state changes not permitted by the...

3.3CVSS5.8AI score0.0047EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2015/07/30 12:00 a.m.•24 views

Oracle Linux 6 : sudo (ELSA-2015-1409)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1409 advisory. - RHEL-6.7 erratum - added patch for CVE-2014-9680 - added BuildRequires for tzdata Resolves: rhbz1200253 Tenable has extracted the preceding description block...

3.3CVSS5.6AI score0.0047EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2015/07/28 12:00 a.m.•33 views

CentOS 6 : sudo (CESA-2015:1409)

Updated sudo packages that fix one security issue, three bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

3.3CVSS5.8AI score0.0047EPSS
SaveExploits1References2
Oracle linux
Oracle linux
•added 2015/07/28 12:00 a.m.•50 views

sudo security, bug fix, and enhancement update

1.8.6p3-19 - RHEL-6.7 erratum - modified the authlogicfix patch to fix 1144448 - fixed a bug in the ldapusermatchfix patch Resolves: rhbz1144448 Resolves: rhbz1142122 1.8.6p3-18 - RHEL-6.7 erratum - fixed the mantypos-ldap.patch Resolves: rhbz1138267 1.8.6p3-17 - RHEL-6.7 erratum - added patch fo...

2.1CVSS4.3AI score0.0047EPSS
SaveExploits1
Cent OS
Cent OS
•added 2015/07/26 2:12 p.m.•78 views

sudo security update

CentOS Errata and Security Advisory CESA-2015:1409 Updated sudo packages that fix one security issue, three bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability...

3.3CVSS6.2AI score0.0047EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
•added 2015/07/20 2:06 p.m.•52 views

Moderate: Red Hat Security Advisory: sudo security, bug fix, and enhancement update

Updated sudo packages that fix one security issue, three bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

3.3CVSS6.2AI score0.0047EPSS
SaveExploits1References7
F5 Networks
F5 Networks
•added 2015/07/20 12:00 a.m.•47 views

SOL16990 - zlib 1.2.2 vulnerability CVE-2005-1849

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

5CVSS0.9AI score0.04076EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2015/04/28 12:00 a.m.•12 views

The vulnerability of the Red Hat Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the zlib-devel-1.1.4 package for the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

7.5CVSS5.4AI score0.25987EPSS
SaveExploits3References2Affected Software1
Rows per page
Query Builder