Lucene search
+L

244 matches found

OSV
OSV
•added 2016/09/25 10:59 a.m.•3 views

CVE-2016-4715

The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app...

3.3CVSS7.3AI score0.00834EPSS
SaveExploits0References4
Prion
Prion
•added 2016/09/25 10:59 a.m.•20 views

Code injection

The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app...

4.3CVSS6.1AI score0.00834EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2016/09/25 10:0 a.m.•49 views

CVE-2016-4715

CVE-2016-4715 concerns the Date & Time Pref Pane in macOS OS X before 10.12. A crafted application can abuse the handling of the .GlobalPreferences file to disclose the user’s location. The entry is tied to a local attack vector with user interaction required, and the impact is described as infor...

4.3CVSS5.1AI score0.00834EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2016/09/23 12:0 a.m.•81 views

macOS < 10.12 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...

10CVSS7.9AI score0.15484EPSS
SaveExploits23References71
PyPA
PyPA
•added 2015/12/07 8:59 p.m.•7 views

PYSEC-2015-11

The getformat function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRETKEY...

5CVSS6.8AI score0.04284EPSS
SaveExploits0References15Affected Software1
OSV
OSV
•added 2015/12/07 8:59 p.m.•13 views

PYSEC-2015-11

The getformat function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRETKEY...

5CVSS7.1AI score0.04284EPSS
SaveExploits0References15
UbuntuCve
UbuntuCve
•added 2015/11/24 5:0 p.m.•26 views

CVE-2015-8213

The getformat function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRETKEY...

5CVSS7.1AI score0.04284EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2015/09/08 12:0 a.m.•10 views

The vulnerability of the Mac OS X operating system, which allows a hacker to manipulate timestamps

The vulnerability of the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to forge timestamps due to errors in restricting access to the date and time settings panel...

2.1CVSS7.2AI score0.00339EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2015/08/16 11:59 p.m.•18 views

Code injection

Apple OS X before 10.10.5 does not properly restrict access to the Date & Time preferences pane, which allows local users to spoof the time by visiting this pane...

2.1CVSS6.1AI score0.00339EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2015/08/16 11:0 p.m.•78 views

CVE-2015-3757

CVE-2015-3757 affects Apple OS X up to macOS Yosemite, specifically OS X before 10.10.5. The Date & Time preference pane could be accessed locally to spoof system time, enabling a local user to alter time settings via that pane. Connected sources confirm this is addressed by Apple’s OS X 10.10.5 ...

2.1CVSS7.7AI score0.00339EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2015/08/16 11:0 p.m.•21 views

CVE-2015-3757

Apple OS X before 10.10.5 does not properly restrict access to the Date & Time preferences pane, which allows local users to spoof the time by visiting this pane...

8AI score0.00339EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2015/07/09 5:1 p.m.•5 views

php: use after free vulnerability in unserialize() with DateTimeZone

A use-after-free flaw was found in the unserialize function of PHP's DateTimeZone implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...

7.5CVSS6.6AI score0.42911EPSS
SaveExploits9References4
RedHat Linux
RedHat Linux
•added 2015/06/04 8:2 a.m.•3 views

php: use after free vulnerability in unserialize() with DateTimeZone

A use-after-free flaw was found in the unserialize function of PHP's DateTimeZone implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...

7.5CVSS6.6AI score0.42911EPSS
SaveExploits9References4
BDU FSTEC
BDU FSTEC
•added 2015/04/28 12:0 a.m.•7 views

The vulnerability of the CentOS operating system, which allows a malicious attacker to compromise the accessibility of protected information

The vulnerability of the boost-date-time-1.41.0 package on the CentOS operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

5CVSS7.3AI score0.03889EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2015/04/28 12:0 a.m.•7 views

The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the boost-date-time-1.41.0 package of the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

5CVSS7.2AI score0.03889EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
•added 2015/03/08 12:0 a.m.•18 views

PHP Date Time Object Unserialize Memory Corruption (CVE-2015-0273)

A code execution vulnerability has been reported in PHP. The vulnerability is due to a use-after-free error when handling serialized Date/Time objects within the unserialize function. A remote attacker can exploit the vulnerability by sending crafted serialized data to a web application running a...

7.5CVSS4.7AI score0.42911EPSS
SaveExploits9
CNVD
CNVD
•added 2015/02/26 12:0 a.m.•2 views

PHP Memory Error Referencing Remote Code Execution Vulnerability

PHP is a popular web programming language. PHP unserialize handles DateTimeZone with a memory error referencing a remote code execution vulnerability, which allows attackers to exploit the vulnerability to crash the application or execute arbitrary code...

7.5CVSS8.5AI score0.42911EPSS
SaveExploits9References1
Fedora
Fedora
•added 2014/08/21 9:47 a.m.•32 views

[SECURITY] Fedora 20 Update: drupal7-date-2.8-1.fc20

This Drupal module contains both a flexible date/time field type and a Date API that other modules can use...

3.5CVSS2AI score0.01417EPSS
SaveExploits0
Fedora
Fedora
•added 2014/08/21 9:42 a.m.•29 views

[SECURITY] Fedora 19 Update: drupal7-date-2.8-1.fc19

This Drupal module contains both a flexible date/time field type and a Date API that other modules can use...

3.5CVSS2AI score0.01417EPSS
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:0 a.m.•74 views

PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow

No description provided by source. From: Maksymilian Arciemowicz cxib securityreason com Date: Fri, 10 Dec 2010 14:43:32 +0100 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow Author: Maksymilian Arciemowicz http://securityreason.com/...

5CVSS0.18878EPSS
SaveExploits5
Rows per page
Query Builder