Lucene search
+L

497 matches found

The Hacker News
The Hacker News
added 2016/02/05 4:45 a.m.14 views

How to Unlock (and Play) Hidden Chess Game Inside Facebook Messenger

What can you do with Facebook Messenger? Chat with your friends Send GIFs, stickers, and photos Make video calls Send people money in Messenger Have you ever wondered to Play a game while you chat with friends? Yes, it is possible. Facebook had made it to the reality by building a hidden built-in...

6.9AI score
SaveExploits0
OSV
OSV
added 2016/01/04 5:59 a.m.3 views

DEBIAN-CVE-2015-8716

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

5.5CVSS5.3AI score0.01539EPSS
SaveExploits0References1
OSV
OSV
added 2016/01/04 5:59 a.m.5 views

DEBIAN-CVE-2015-8711

epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

5.5CVSS5.1AI score0.01763EPSS
SaveExploits0References1
OSV
OSV
added 2016/01/04 5:59 a.m.1 views

UBUNTU-CVE-2015-8716

The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...

5.5CVSS6.4AI score0.01539EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2016/01/04 2:0 a.m.30 views

CVE-2015-8711

epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

5.5CVSS5.4AI score0.01763EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2015/10/30 10:2 a.m.17 views

CVE-2003-0787

The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, which allows attackers to modify the stack and possibly gain privileges...

7.5CVSS7.1AI score0.0166EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2015/08/14 7:10 p.m.51 views

Security update for MozillaFirefox (important)

update to Firefox 40.0 bnc940806 Added protection against unwanted software downloads Suggested Tiles show sites of interest, based on categories from your recent browsing history Hello allows adding a link to conversations to provide context on what the conversation will be about New style for...

10CVSS1.7AI score0.67326EPSS
SaveExploits10References2
exploitpack
exploitpack
added 2015/06/05 12:0 a.m.31 views

WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 - doupload.php Arbitrary File Upload

WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 - doupload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/53790/info The Nmedia WordPress Member Conversation plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue...

0.3AI score
SaveExploits0
Patchstack
Patchstack
added 2015/06/05 12:0 a.m.16 views

WordPress N-Media Member Conversation Plugin - Arbitrary File Upload

WordPress N-Media Member Conversation plugin's "doubpload.php" is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Other attacks are also possible. Solution Update the plugin...

7.5CVSS5.2AI score0.13647EPSS
SaveExploits2References1Affected Software1
Exploit DB
Exploit DB
added 2015/06/05 12:0 a.m.44 views

WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 - 'doupload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53790/info The Nmedia WordPress Member Conversation plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can...

7.5CVSS5.2AI score0.13647EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2015/04/30 4:9 p.m.8 views

Weld: Limited information disclosure via stale thread state

It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous...

4.3CVSS5.8AI score0.02051EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2015/04/16 4:2 p.m.9 views

Weld: Limited information disclosure via stale thread state

It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous...

4.3CVSS5.8AI score0.02051EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2015/04/16 4:2 p.m.7 views

Weld: Limited information disclosure via stale thread state

It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous...

4.3CVSS5.8AI score0.02051EPSS
SaveExploits0References4
CNVD
CNVD
added 2015/04/06 12:0 a.m.30 views

Cisco Unity Connection SIP Trunking Integrated CuCsMgr Denial of Service Vulnerability

Cisco Unity Connection is a feature-rich voice messaging platform that uses the Linux Unified Communications operating system. A security vulnerability exists in the Connection Conversation Manager CuCsMgr process of Cisco Unity Connection. Allowing an unauthenticated, remote attacker to exploit...

7.1CVSS6.5AI score0.01667EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/06 12:0 a.m.31 views

Cisco Unity Connection SIP Trunking Integration Port UDP 5060 Denial of Service Vulnerability

Cisco Unity Connection is a feature-rich voice messaging platform that uses the Linux Unified Communications operating system. A security vulnerability exists in the Connection Conversation Manager CuCsMgr process of Cisco Unity Connection. It allows an unauthenticated, remote attacker to cause a...

7.1CVSS6.6AI score0.01667EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/03 12:0 a.m.38 views

Cisco Unity Connection SIP Trunk Integration Tailored INVITE Message Denial of Service Vulnerability (CNVD-2015-02193)

Cisco Unity Connection is a feature-rich voice messaging platform that uses the Linux Unified Communications operating system. A security vulnerability exists in the Connection Conversation Manager CuCsMgr process of Cisco Unity Connection. An unauthenticated, remote attacker could trigger a...

7.1CVSS6.7AI score0.01667EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2015/04/01 2:48 p.m.6 views

Weld: Limited information disclosure via stale thread state

It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous...

4.3CVSS5.8AI score0.02051EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2015/03/11 4:51 p.m.4 views

Weld: Limited information disclosure via stale thread state

It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous...

4.3CVSS5.8AI score0.02051EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2015/02/11 8:18 p.m.7 views

Weld: Limited information disclosure via stale thread state

It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous...

4.3CVSS5.8AI score0.02051EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2015/02/11 8:16 p.m.9 views

Weld: Limited information disclosure via stale thread state

It was discovered that under specific conditions the conversation state information stored in a thread-local variable in JBoss Weld was not sanitized correctly when the conversation ended. This could lead to a race condition that could potentially expose sensitive information from a previous...

4.3CVSS5.8AI score0.02051EPSS
SaveExploits0References4
Rows per page
Query Builder