Lucene search
+L

1285 matches found

OSV
OSV
added 2016/04/25 6:59 p.m.12 views

CVE-2016-1202

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line...

7.8CVSS7.6AI score
SaveExploits0References4
Prion
Prion
added 2016/04/25 6:59 p.m.12 views

Design/Logic Flaw

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line...

7.2CVSS6.9AI score0.00431EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2016/04/25 6:0 p.m.48 views

CVE-2016-1202

CVE-2016-1202 affects Electron up to version before 0.33.5, where untrusted search path logic allows local attackers to escalate privileges by placing a malicious Node.js module in a parent directory of a require path. Core issue: Electron does not restrict the search path for loading Node module...

7.8CVSS7.5AI score0.00431EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2016/04/25 6:0 p.m.33 views

CVE-2016-1202

Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line...

7.6AI score0.00431EPSS
SaveExploits0References4
CNVD
CNVD
added 2016/04/24 12:0 a.m.3 views

Apple QuickTime moov atom arbitrary code execution vulnerability

Apple QuickTime is a multimedia playback software. A buffer overflow vulnerability in Apple QuickTime's handling of media files containing a special moov atom allows remote attackers to construct malicious media files that can be tricked into being parsed by an application, which can crash the...

7.6AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/04/20 12:0 a.m.44 views

Apple QuickTime < 7.7.8 Multiple Vulnerabilities

Binary data 9305.prm...

7.5CVSS9.7AI score0.0364EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2016/04/18 12:0 a.m.12 views

Apple QuickTime Multiple Remote Code Execution Vulnerabilities (Apr 2016) - Windows

Apple QuickTime is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.2AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2016/04/15 12:0 a.m.29 views

Apple QuickTime Unsupported on Windows

Apple no longer supports any version of QuickTime on Windows. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. Note that the last version of QuickTime released for Windows had known...

6.1AI score
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2016/04/14 12:0 a.m.23 views

(0Day) Apple QuickTime moov Atom Heap Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the moov atom. B...

6.8CVSS7.1AI score
SaveExploits0References1
NVD
NVD
added 2016/04/12 2:59 p.m.18 views

CVE-2015-8537

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed...

5.3CVSS5.4AI score0.01931EPSS
SaveExploits0References3
OSV
OSV
added 2016/04/12 2:59 p.m.1 views

DEBIAN-CVE-2015-8537

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed...

5.3CVSS5.3AI score0.01931EPSS
SaveExploits0References1
OSV
OSV
added 2016/04/12 2:59 p.m.7 views

CVE-2015-8537

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed...

5.3CVSS5.7AI score
SaveExploits0References4
Prion
Prion
added 2016/04/12 2:59 p.m.11 views

Information disclosure

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed...

5CVSS6.5AI score0.01931EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2016/04/12 2:59 p.m.2 views

UBUNTU-CVE-2015-8537

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed...

5.3CVSS6.4AI score0.01931EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2016/04/12 2:59 p.m.16 views

CVE-2015-8537

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed...

5.3CVSS6.5AI score0.01931EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2016/04/12 2:0 p.m.20 views

CVE-2015-8537

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed...

5.3CVSS5.4AI score0.01931EPSS
SaveExploits0
Cvelist
Cvelist
added 2016/04/12 2:0 p.m.19 views

CVE-2015-8537

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed...

5.4AI score0.01931EPSS
SaveExploits0References3
hackapp
hackapp
added 2016/04/01 9:18 a.m.9 views

Black mechanic Atom Theme - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Black mechanic Atom Theme published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2016/03/26 12:0 a.m.4 views

Redmine Atom Feed Information Disclosure Vulnerability

Redmine is a set of open source Web-based project management and defect tracking tools . A security vulnerability exists in Redmine versions prior to 2.6.9. An attacker can exploit the vulnerability to obtain sensitive information...

5.3CVSS6.6AI score0.01931EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2016/02/25 9:51 p.m.162 views

Appie v3 - Android Pentesting Portable Integrated Environment

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual MachineVM or dualboot. It is completely portable and can be carried on USB stick or your smartphone. It is one of its kind Android...

7.3AI score
SaveExploits0References3
Rows per page
Query Builder