Lucene search
+L

1585 matches found

Tenable Nessus
Tenable Nessus
•added 2016/07/12 12:00 a.m.•53 views

Symantec Web Gateway Anti-Virus Definition < 20160628.037 Multiple Vulnerabilities (SYM16-010) (credentialed check)

According to its self-reported anti-virus definition version number, the remote web server is hosting a version of Symantec Web Gateway with an anti-virus definition version prior to 20160628.037. It is, therefore, affected by multiple vulnerabilities : - An array indexing error exists in the UnR...

10CVSS8.4AI score0.53402EPSS
SaveExploits12References8
OSV
OSV
•added 2016/06/05 11:59 p.m.•11 views

CVE-2016-1698

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...

6.5CVSS7AI score0.01058EPSS
SaveExploits0References9
NVD
NVD
•added 2016/06/05 11:59 p.m.•37 views

CVE-2016-1698

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...

6.5CVSS7AI score0.01058EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2016/06/05 11:59 p.m.•36 views

CVE-2016-1698

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...

6.5CVSS6.9AI score0.01058EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2016/06/05 11:00 p.m.•63 views

CVE-2016-1698

Removed by vendor...

6.5CVSS8.1AI score0.01058EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/06/05 12:00 a.m.•7 views

CVE-2016-1698: Exposure of Sensitive Information to an Unauthorized Actor

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...

6.5CVSS7.2AI score0.01058EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2016/05/31 12:00 a.m.•31 views

中软华泰防火墙HuaTech-2000 definition/temp/user.txt 敏感信息泄露漏洞

No description provided by source...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2016/05/26 8:35 a.m.•12 views

mysql: unspecified vulnerability related to Server:DDL (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL...

4CVSS7.2AI score0.03691EPSS
SaveExploits0References5
CNVD
CNVD
•added 2016/05/07 12:00 a.m.•5 views

PHP has an unspecified vulnerability (CNVD-2016-02887)

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. PHP allows overriding of 'one definition' values, and no detailed vulnerability details are currently provided...

9.8CVSS8.5AI score0.06063EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2016/05/02 12:36 p.m.•14 views

mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL...

5.5CVSS7.2AI score0.0185EPSS
SaveExploits0References5
CNVD
CNVD
•added 2016/04/24 12:00 a.m.•7 views

Oracle MySQL Server: Unspecified Vulnerability in DDL Subcomponent

Oracle MySQL is an open source relational database management system. A security vulnerability exists in the Server:DDL subcomponent of Oracle MySQL, which allows remote attackers to exploit the vulnerability to affect system availability...

5.5CVSS7.2AI score0.0185EPSS
SaveExploits0References1
OSV
OSV
•added 2016/04/13 2:59 p.m.•11 views

CVE-2016-4007

Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."...

9.8CVSS6AI score0.02474EPSS
SaveExploits0References5
NVD
NVD
•added 2016/04/13 2:59 p.m.•39 views

CVE-2016-4007

Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."...

10CVSS9.9AI score0.02474EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2016/03/31 9:50 p.m.•11 views

mysql: unspecified vulnerability related to Server:DDL (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL...

4CVSS7.2AI score0.03691EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2016/02/24 12:00 a.m.•33 views

AVG Internet Security 2015.5736 Address Space Layout Disclosure

The AVG Internet Security application installed on the remote Windows host is a version between 2015.5315 through 2015.5751, inclusive, with a virus definition database prior to version 9364. It is, therefore, affected by an information disclosure vulnerability due to insecure allocation of memor...

6.4CVSS5.7AI score0.0135EPSS
SaveExploits1References4
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•15 views

Unspecified Vulnerability in Oracle E-Business Suite Oracle E-Business Intelligence Definition Component (CNVD-2016-00642)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle E-Business Intelligence Definition component, which allows remote attackers to exploit the vulnerability to submit special requests to...

6.4CVSS6.8AI score0.01817EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•22 views

Unspecified Vulnerability in Oracle E-Business Suite Oracle E-Business Intelligence Definition Component (CNVD-2016-00603)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle E-Business Intelligence Definition component, which allows remote attackers to exploit the vulnerability to submit special requests to...

5.5CVSS6.8AI score0.01412EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•14 views

Unspecified Vulnerability in Oracle E-Business Suite Oracle E-Business Intelligence Definition Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle E-Business Intelligence Common component, which could be exploited by remote attackers to submit a special request to access and modify...

6.4CVSS6.8AI score0.01817EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2015/12/30 12:00 a.m.•34 views

SUSE SLED11 / SLES11 Security Update : xfsprogs (SUSE-SU-2015:2383-1)

xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150 - Fix segfault during xfsrepair run bsc911866 - Fix definition of leaf attribute block to avoid gcc optimization xfsprogs-fix-leaf-block-definition No...

5CVSS5.4AI score0.04498EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2015/11/05 12:00 a.m.•15 views

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

Vulnerability of the Server sub-component: The DDL operations of the MySQL database management system are related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

4CVSS7AI score0.03691EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder