Lucene search
+L

2252 matches found

OSV
OSV
•added 2015/12/28 11:59 a.m.•14 views

DEBIAN-CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

4CVSS5.2AI score0.00501EPSS
SaveExploits0References1
CVE
CVE
•added 2015/12/28 11:00 a.m.•177 views

CVE-2015-8374

CVE-2015-8374 affects the Linux kernel prior to 4.3.3. The vulnerability is due to the filesystem driver fs/btrfs/inode.c mishandling compressed inline extents, allowing local users to obtain sensitive pre-truncation data from a file via a clone operation. Affected: Linux kernel up to 4.3.2 (4.3....

4CVSS4.7AI score0.00501EPSS
SaveExploits0References21Affected Software1
Cvelist
Cvelist
•added 2015/12/28 11:00 a.m.•51 views

CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

4.7AI score0.00501EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
•added 2015/12/28 12:00 a.m.•44 views

CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

4CVSS6.7AI score0.00501EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/12/28 12:00 a.m.•5 views

CVE-2015-8374: Exposure of Sensitive Information to an Unauthorized Actor

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

4CVSS6.2AI score0.00501EPSS
SaveExploits0References2
OSV
OSV
•added 2015/12/28 12:00 a.m.•11 views

UBUNTU-CVE-2015-8374

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

4CVSS6.7AI score0.00501EPSS
SaveExploits0References13
Fedora
Fedora
•added 2015/12/20 6:54 a.m.•43 views

[SECURITY] Fedora 23 Update: libsndfile-1.0.25-18.fc23

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

9.3CVSS2.3AI score0.14271EPSS
SaveExploits2
zdt
zdt
•added 2015/12/17 12:00 a.m.•81 views

Libnsgif 0.1.2 Stack Overflow / Out-Of-Bounds Read Exploit

Libnsgif version 0.1.2 suffers from stack overflow and out-of-bounds read vulnerabilities. Overview ======== Libnsgif1 is a decoding library for GIF images. It is primarily developed and used as part of the NetSurf project. As of version 0.1.2, libnsgif is vulnerable to a stack overflow...

7.4AI score0.03126EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2015/12/15 12:00 a.m.•4 views

PT-2015-7779

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3.3 Description The issue concerns the mishandling of compressed inline extents in the Linux kernel, allowing local users to obtain sensitive pre-truncation information from a file via a clone action...

4CVSS0.00501EPSS
SaveExploits0References58
Fedora
Fedora
•added 2015/11/23 10:53 p.m.•37 views

[SECURITY] Fedora 22 Update: libsndfile-1.0.25-17.fc22

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

9.3CVSS2.3AI score0.14271EPSS
SaveExploits2
Fedora
Fedora
•added 2015/11/13 10:57 p.m.•46 views

[SECURITY] Fedora 23 Update: libsndfile-1.0.25-17.fc23

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

9.3CVSS2.3AI score0.14271EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2015/10/30 10:27 a.m.•24 views

CVE-2011-4089

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory...

4.6CVSS8AI score0.01045EPSS
SaveExploits3References2
BDU FSTEC
BDU FSTEC
•added 2015/10/22 12:00 a.m.•16 views

The vulnerability of the Kaspersky Anti-Virus antivirus protection allows a hacker to trigger a service failure.

The vulnerability of Kaspersky Anti-Virus lies in a flaw in its memory processing mechanism when dealing with compressed executable files. Exploiting this vulnerability can allow an attacker to cause service interruptions...

4.3CVSS5.5AI score
SaveExploits0References4Affected Software1
Mageia
Mageia
•added 2015/07/01 12:40 p.m.•41 views

Updated python-tornado package fixes security vulnerability

Security fixes CVE-2014-9720 The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by ...

6.5CVSS6.4AI score0.0251EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2015/07/01 12:00 a.m.•33 views

Apple OS X LZVN DMG Information Disclosure Vulnerabillity

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of DMG...

4.3CVSS5.3AI score0.0133EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2015/07/01 12:00 a.m.•44 views

Apple OS X GZIP DMG Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of DMG...

4.3CVSS6.6AI score0.01449EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2015/06/17 9:05 p.m.•17 views

cups: cupsRasterReadPixels buffer overflow

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way CUPS handled compressed raster image files. An attacker could create a specially crafted image file that, when passed via the CUPS Raster filter, could cause the CUPS filter to crash...

6.8CVSS7.3AI score0.04633EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2015/06/11 12:00 a.m.•24 views

Fedora 21 : python-tornado-3.2.2-1.fc21 (2015-8606)

Security fixes The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by a proxy...

6.5CVSS6.5AI score0.0251EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2015/06/10 12:00 a.m.•26 views

Fedora 22 : python-tornado-3.2.2-1.fc22 (2015-9143)

Security fixes The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by a proxy...

6.5CVSS6.5AI score0.0251EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2015/06/09 12:00 a.m.•62 views

CentOS Update for thunderbird CESA-2015:1012 centos7

Check the version of thunderbird SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882177";...

7.5CVSS7.8AI score0.07227EPSS
SaveExploits0References2
Rows per page
Query Builder