Lucene search
K

1188 matches found

Debian CVE
Debian CVE
added 2018/02/02 9:0 a.m.18 views

CVE-2018-6548

Removed by vendor...

9.8CVSS9.4AI score0.00528EPSS
Exploits1
Zero Day Initiative
Zero Day Initiative
added 2017/06/13 12:0 a.m.21 views

Adobe Digital Editions PDF FlateDecode Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS5.9AI score0.02654EPSS
Exploits0References1
Prion
Prion
added 2017/05/12 8:29 p.m.22 views

Null pointer dereference

In function msmpcmplaybackclose in all Android releases from CAF using the Linux kernel, prtd is assigned substream-runtime-privatedata. Later, prtd is freed. However, prtd is not sanitized and set to NULL, resulting in a dangling pointer. There are other functions that access the same memory...

4.6CVSS7.3AI score0.00032EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2017/05/12 8:0 p.m.20 views

CVE-2017-8246

In function msmpcmplaybackclose in all Android releases from CAF using the Linux kernel, prtd is assigned substream-runtime-privatedata. Later, prtd is freed. However, prtd is not sanitized and set to NULL, resulting in a dangling pointer. There are other functions that access the same memory...

7.8CVSS7.9AI score0.00032EPSS
Exploits0
Cvelist
Cvelist
added 2017/05/12 8:0 p.m.16 views

CVE-2017-8246

In function msmpcmplaybackclose in all Android releases from CAF using the Linux kernel, prtd is assigned substream-runtime-privatedata. Later, prtd is freed. However, prtd is not sanitized and set to NULL, resulting in a dangling pointer. There are other functions that access the same memory...

7.3AI score0.00032EPSS
Exploits0References2
seebug.org
seebug.org
added 2017/04/25 12:0 a.m.129 views

MS14-040 Microsoft Windows 7 (x86) - 'afd.sys' Dangling Pointer Privilege Escalation (CVE-2014-1767)

No description provided by source. Exploit Title: MS14-040 - AFD.SYS Dangling Pointer Date: 2016-02-05 Exploit Author: Rick Larabee Vendor Homepage: www.microsoft.com Version: Windows 7, 32 bit Tested on: Win7 x32 afd.sys - 6.1.7600.16385 ntdll.dll - 6.1.7600.16385 CVE : CVE-2014-1767 Category:...

7.2CVSS6.5AI score0.49071EPSS
Exploits8
0day.today
0day.today
added 2017/03/29 12:0 a.m.53 views

Ubuntu 11.10/12.04 - binfmt_script Stack Data Disclosure Vulnerability

Exploit for linux platform in category dos / poc Source: http://www.halfdog.net/Security/2012/LinuxKernelBinfmtScriptStackDataDisclosure/ Introduction Problem description: Linux kernel binfmtscript handling in combination with CONFIGMODULES can lead to disclosure of kernel stack data during execv...

2.1CVSS7.7AI score0.00579EPSS
Exploits1
CNVD
CNVD
added 2016/09/26 12:0 a.m.1 views

OpenSSL Version 1.1.0a Arbitrary Code Execution Vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. An arbitrary code execution vulnerability exists in OpenSSL version 1.1.0a, whereby when a system receives a message larger than...

10CVSS9.7AI score0.28212EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/08/29 12:0 a.m.23 views

Apple OS X DspFuncLib Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the DspFuncLib extension. The issue lies in the...

6.9CVSS3.2AI score0.00058EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/07/12 12:0 a.m.30 views

Adobe Flash StyleSheet Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the StyleSheet...

6.8CVSS5.5AI score0.07714EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2016/07/12 12:0 a.m.26 views

Adobe Reader DC FlateDecode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within FlateDecode. A...

6.8CVSS4.5AI score0.02083EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.11 views

Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within FlateDecode. A...

6.8CVSS7AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/29 12:0 a.m.12 views

Foxit Reader FlateDecode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within FlateDecode. A...

6.8CVSS7AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/06/03 12:0 a.m.23 views

Adobe Flash TextBlock releaseLineCreationData Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the TextBlock object...

6.8CVSS8.7AI score0.13403EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/05/19 12:0 a.m.49 views

(Pwn2Own) Apple Safari TextTrack Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Safari...

6.8CVSS3.1AI score0.00589EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/05/10 12:0 a.m.27 views

Adobe Reader DC FlateDecode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within FlateDecode. A...

6.8CVSS4.3AI score0.02457EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2016/05/10 12:0 a.m.38 views

Adobe Acrobat Pro DC execDialog Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS5.1AI score0.02457EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2016/05/10 12:0 a.m.22 views

Adobe Reader DC XFA prePrint Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS3.1AI score0.02457EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2016/05/10 12:0 a.m.23 views

Adobe Acrobat Pro DC Share For Comments Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the "Share...

6.8CVSS3.5AI score0.02457EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2016/05/10 12:0 a.m.25 views

Adobe Acrobat Pro DC Close Page Action Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

6.8CVSS3.4AI score0.02751EPSS
Exploits1References1
Rows per page
Query Builder