Lucene search
+L

4664 matches found

Prion
Prion
•added 2013/11/04 3:55 p.m.•22 views

Design/Logic Flaw

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...

4.7CVSS6.5AI score0.00452EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2013/11/04 11:00 a.m.•84 views

CVE-2013-2058

The CVE-2013-2058 issue affects the Linux kernel prior to 3.7.4, specifically the host_start function in drivers/usb/chipidea/host.c. Affected code does not properly handle a certain non‑streaming option, enabling a local attacker to trigger a denial of service (system crash) by sending a large a...

4.7CVSS5.8AI score0.00452EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2013/11/04 11:00 a.m.•43 views

CVE-2013-2058

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...

5.7AI score0.00452EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2013/11/04 11:00 a.m.•57 views

CVE-2013-2058

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...

4.7CVSS5.3AI score0.00452EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/11/04 12:00 a.m.•2 views

CVE-2013-2058: Improper Restriction of Operations within the Bounds of a Memory Buffer

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...

4.7CVSS5.8AI score0.00452EPSS
SaveExploits1References2
NVD
NVD
•added 2013/09/27 8:55 p.m.•33 views

CVE-2012-1313

The remote debug shell on the PALO adapter card in Cisco Unified Computing System UCS allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772...

6.5CVSS6.7AI score0.00357EPSS
SaveExploits0References3
Prion
Prion
•added 2013/09/27 8:55 p.m.•31 views

Design/Logic Flaw

The remote debug shell on the PALO adapter card in Cisco Unified Computing System UCS allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772...

6.5CVSS7.2AI score0.00357EPSS
SaveExploits0References3
CVE
CVE
•added 2013/09/27 8:00 p.m.•69 views

CVE-2012-1313

The CVE-2012-1313 entry concerns Cisco UCS PALO adapter cards where the remote debug shell accepts malformed show-macstats parameters, enabling an authenticated, local attacker to gain elevated privileges (potential root access) on the underlying OS. The issue arises from improper handling of cer...

6.5CVSS6.9AI score0.00357EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/09/27 12:00 a.m.•2 views

CVE-2012-1313: Undefined Security Weakness

The remote debug shell on the PALO adapter card in Cisco Unified Computing System UCS allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772...

6.5CVSS5.9AI score0.00357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/09/27 12:00 a.m.•1 views

PT-2013-1523

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the remote debug shell on the PALO adapter card, which allows local users to gain privileges. This is achieved by using malformed show-macstats...

6.5CVSS0.00357EPSS
SaveExploits0References4
Cisco
Cisco
•added 2013/09/26 8:28 p.m.•65 views

Cisco Unified Computing System Arbitrary Command Execution Vulnerability

A vulnerability in the remote debug shell in Cisco Unified Computing System PALO adapter cards could allow an authenticated, local attacker to execute commands on the underlying operating system with elevated privileges. The vulnerability is due to insufficient handling of special characters. An...

6.5CVSS2.9AI score0.00357EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2013/09/16 5:01 p.m.•11 views

Kernel: usb: chipidea: Allow disabling streaming not just in udc mode

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...

4.7CVSS6.2AI score0.00452EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2013/09/04 12:00 a.m.•58 views

Amazon Linux AMI : kernel (ALAS-2012-78)

The rioioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call. C Tenable Network Security, Inc. The descriptive text and package check...

1.2CVSS6.7AI score0.00556EPSS
SaveExploits1References2
n0where
n0where
•added 2013/07/28 7:03 p.m.•38 views

Anonymous Offline File-Sharing and Communications System: PirateBox

PirateBox creates offline wireless networks designed for anonymous file sharing, chatting, message boarding, and media streaming. You can think of it as your very own portable offline Internet in a box! When users join the PirateBox wireless network and open a web browser, they are automatically...

0.6AI score
SaveExploits0
OSV
OSV
•added 2013/07/21 9:01 a.m.•16 views

MGASA-2013-0222 Updated virtualbox package fixes security issue

This virtualbox update provides the 4.2.16 maintenance release, which fixes the following security issue: Thomas Dreibholz has discovered a vulnerability in Oracle VirtualBox, which can be exploited by malicious, local users in a guest virtual machine to cause a DoS Denial of Service. The...

3.8CVSS5.8AI score0.00568EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2013/06/24 12:00 a.m.•15 views

Honeywell Building Network Adapter Detection

Binary data 6914.prm...

7.3AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2013/05/07 12:00 a.m.•43 views

CVE-2013-2058

The hoststart function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service system crash by sending a large amount of network traffic through a USB/Ethernet adapter...

4.7CVSS6.2AI score0.00452EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2013/05/07 12:00 a.m.•8 views

PT-2013-3521 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.7.4 Description: The issue is related to the host start function in the Linux kernel, which does not properly support a certain non-streaming option. This allows local users to cause a denial of service,...

7.1CVSS6.5AI score0.03288EPSS
SaveExploits5References33
Prion
Prion
•added 2013/04/24 10:28 a.m.•26 views

Cross site scripting

Cross-site scripting XSS vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in IBM WebSphere Application Server WAS 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted response...

4.3CVSS5.9AI score0.01812EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2013/04/24 10:00 a.m.•42 views

CVE-2013-0565

Cross-site scripting XSS vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in IBM WebSphere Application Server WAS 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted response...

5.4AI score0.01812EPSS
SaveExploits0References3
Rows per page
Query Builder