Lucene search
+L

6755 matches found

CVE
CVE
added 2016/06/24 5:0 p.m.65 views

CVE-2016-5021

CVE-2016-5021 affects F5 BIG-IP/iControl REST across multiple product families (e.g., BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, PEM; Big-IP DNS; GTM; BIG-IQ variants). An authenticated administrator with access to iControl REST can cause information disclosure by crafting malici...

4.9CVSS4.5AI score0.01237EPSS
SaveExploits0References2Affected Software1
CISA
CISA
added 2016/06/24 12:0 a.m.13 views

IRS Announces Safeguards to Protect Taxpayer Information

The Internal Revenue Service IRS has issued two news releases addressing new safeguards to protect taxpayers and strengthen authentication requirements. The electronic filing e-File PIN, an alternative signature verification tool used to assist with electronic tax filing, will no longer be...

6.8AI score
SaveExploits0References3
CISA
CISA
added 2016/06/16 12:0 a.m.12 views

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Adobe AIR. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. The critical vulnerability in Flash Player is being used in limited, targeted attack...

6.9AI score
SaveExploits0References3
Prion
Prion
added 2016/06/14 2:59 p.m.27 views

Information disclosure

The megasasctrlgetinfo function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information...

2.1CVSS5.9AI score0.00428EPSS
SaveExploits0References9Affected Software3
Cvelist
Cvelist
added 2016/06/14 2:0 p.m.35 views

CVE-2016-5337

The megasasctrlgetinfo function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information...

6.5AI score0.00428EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2016/06/14 2:0 p.m.42 views

CVE-2016-5337

The megasasctrlgetinfo function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information...

5.5CVSS6.5AI score0.00428EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2016/06/14 2:0 p.m.47 views

CVE-2016-5238

The getcmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash via vectors related to reading from the information transfer buffer in non-DMA mode...

4.4CVSS6.4AI score0.00421EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2016/06/14 2:0 p.m.47 views

CVE-2016-5338

The 1 espregread and 2 espregwrite functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service QEMU process crash or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer...

7.8CVSS7.7AI score0.00496EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2016/06/14 12:0 a.m.32 views

CVE-2016-5238

The getcmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash via vectors related to reading from the information transfer buffer in non-DMA mode...

4.4CVSS6.8AI score0.00421EPSS
SaveExploits0References3
OSV
OSV
added 2016/06/14 12:0 a.m.7 views

UBUNTU-CVE-2016-5337

The megasasctrlgetinfo function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information...

5.5CVSS6.8AI score0.00428EPSS
SaveExploits0References4
NVD
NVD
added 2016/06/13 2:59 p.m.31 views

CVE-2016-2174

SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/plugins/policies/eventTime...

7.2CVSS7.3AI score0.01884EPSS
SaveExploits1References2
Prion
Prion
added 2016/06/13 2:59 p.m.22 views

Sql injection

SQL injection vulnerability in the policy admin tool in Apache Ranger before 0.5.3 allows remote authenticated administrators to execute arbitrary SQL commands via the eventTime parameter to service/plugins/policies/eventTime...

6.5CVSS8.5AI score0.01884EPSS
SaveExploits1References2Affected Software1
myhack58
myhack58
added 2016/06/11 12:0 a.m.16 views

The plant controller has a remote vulnerability and no patch-vulnerability warning-the black bar safety net

Power station use of an industrial control system has not patched the vulnerability, an attacker can remotely exploit it to gain network control. Remedy method? Turning off the function or replace the equipment. Power station use of an industrial control system has not patched the vulnerability, ...

0.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/06/10 12:0 a.m.28 views

F5 Networks BIG-IP : iControl REST vulnerability (K99998454)

The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF3; BIG-IP DNS 12.x before 12.0.0 HF3; BIG-IP GTM 11.5.x before 11.5.4 and 11.6.x before 11.6.1; BIG-IQ Cloud and Security 4.0.0...

4.9CVSS5.3AI score0.01237EPSS
SaveExploits0References2
NVD
NVD
added 2016/06/07 2:6 p.m.13 views

CVE-2016-4962

The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service resource consumption or management facility confusion or gain host OS privileges by manipulating information in guest controlled areas of xenstore...

6.8CVSS6.9AI score0.00399EPSS
SaveExploits0References5
OSV
OSV
added 2016/06/07 2:6 p.m.2 views

DEBIAN-CVE-2016-4962

The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service resource consumption or management facility confusion or gain host OS privileges by manipulating information in guest controlled areas of xenstore...

6.7CVSS7AI score0.00399EPSS
SaveExploits0References1
Prion
Prion
added 2016/06/07 2:6 p.m.24 views

Design/Logic Flaw

The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service resource consumption or management facility confusion or gain host OS privileges by manipulating information in guest controlled areas of xenstore...

6.8CVSS6.8AI score0.00399EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2016/06/07 2:6 p.m.6 views

UBUNTU-CVE-2016-4962

The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service resource consumption or management facility confusion or gain host OS privileges by manipulating information in guest controlled areas of xenstore...

6.7CVSS7AI score0.00399EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2016/06/07 2:0 p.m.54 views

CVE-2016-4962

The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service resource consumption or management facility confusion or gain host OS privileges by manipulating information in guest controlled areas of xenstore...

6.8CVSS5.2AI score0.00399EPSS
SaveExploits0
NVD
NVD
added 2016/06/05 1:59 a.m.18 views

CVE-2016-1212

Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors...

4CVSS3.7AI score0.02289EPSS
SaveExploits0References3
Rows per page
Query Builder