Lucene search
+L

3981 matches found

Tenable Nessus
Tenable Nessus
added 2007/03/07 12:0 a.m.24 views

Mandrake Linux Security Advisory : util-linux (MDKSA-2007:053)

Umount allows local users to trigger a NULL dereference and application crash by invoking the program with a pathname for a USB pen drive that was mounted and then physically removed, which might allow the users to obtain sensitive information, including core file contents. Updated packages have...

1.9CVSS5.3AI score0.0041EPSS
SaveExploits1References1
Prion
Prion
added 2007/02/07 8:28 p.m.18 views

Design/Logic Flaw

umount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to trigger a NULL dereference and application crash by invoking the program with a pathname for a USB pen drive that was mounted and then physically removed, which might allow the users to obtain sensiti...

1.9CVSS6.2AI score0.0041EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2007/02/07 8:28 p.m.30 views

CVE-2007-0822

umount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to trigger a NULL dereference and application crash by invoking the program with a pathname for a USB pen drive that was mounted and then physically removed, which might allow the users to obtain sensiti...

1.9CVSS6AI score0.0041EPSS
SaveExploits1References6
CVE
CVE
added 2007/02/07 8:0 p.m.62 views

CVE-2007-0822

CVE-2007-0822 describes a local-denial crash in umount when run on Linux kernel 2.6.15 with Slackware 10.2, triggered by passing a pathname to a USB pen drive that was mounted and then removed; this can lead to a NULL dereference and potential exposure of sensitive data such as core contents. Mul...

1.9CVSS5.9AI score0.0041EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
added 2007/02/07 8:0 p.m.62 views

CVE-2007-0822

umount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to trigger a NULL dereference and application crash by invoking the program with a pathname for a USB pen drive that was mounted and then physically removed, which might allow the users to obtain sensiti...

1.9CVSS2AI score0.0041EPSS
SaveExploits1
Cvelist
Cvelist
added 2007/02/07 8:0 p.m.33 views

CVE-2007-0822

umount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to trigger a NULL dereference and application crash by invoking the program with a pathname for a USB pen drive that was mounted and then physically removed, which might allow the users to obtain sensiti...

5.9AI score0.0041EPSS
SaveExploits1References6
CVE
CVE
added 2006/12/10 11:0 a.m.50 views

CVE-2006-6441

CVE-2006-6441 affects Xerox WorkCentre/WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue allows local users to bypass security controls and boot into Alchemy via certain alternate boot media, demonstrated by a USB thumb drive. The connected s...

4.6CVSS6.8AI score0.003EPSS
SaveExploits0References2Affected Software6
NVD
NVD
added 2006/11/15 3:7 p.m.18 views

CVE-2006-5902

viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References1
CVE
CVE
added 2006/11/15 3:0 p.m.62 views

CVE-2006-5902

The CVE-2006-5902 issue affects the viksoe GMail Drive shell extension. The vulnerability allows remote attackers to perform virtual filesystem actions by sending specially crafted e-mail messages with certain subject lines (e.g., GMAILFS: [13;a;1], which can inject a new file; GMAILFS: [13;a;1] ...

7.5CVSS7.1AI score0.01262EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2006/11/15 3:0 p.m.24 views

CVE-2006-5902

viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...

6.7AI score0.01262EPSS
SaveExploits0References1
myhack58
myhack58
added 2006/11/06 12:0 a.m.27 views

Do a good Defense: virus destroy hardware there are seven large-loss trick-vulnerability warning-the black bar safety net

CIH virus has turned everyone's panic, set off no small waves. Previous various virus only up to destroy hard drive data, and CIH was able to invade the on-Board Flash BIOS, the destruction of its contents and to make the Board scrapped. CIH lesson tells us:do not despise viruses to hardware...

SaveExploits0
myhack58
myhack58
added 2006/10/07 12:0 a.m.25 views

The Common Market encrypted disc crack not full tricks big secret-vulnerability warning-the black bar safety net

Now on the market there are many encrypted discs, these discs are a special form of burn. Put it into drive, it will appear a software installation screen want you to enter the serial number, if serial number is correct it will appear a file browser window, the error then jumps back to the deskto...

SaveExploits0
myhack58
myhack58
added 2006/09/22 12:0 a.m.11 views

The cafe's invasion and the cafe boss fight-bug warning-the black bar safety net

We're and the owner of the cafe fight to the end to succeed must know ourselves to win every battle. First let's take a look at the cafe owners now generally under some kind of obstacle to it: The primary 1. Prohibition of“Run”; 2. The prohibition of the use of the menu bar on the right keys; 3....

0.5AI score
SaveExploits0
securityvulns
securityvulns
added 2006/08/15 12:0 a.m.48 views

Unauthorized SmartLine DeviceLock disk access

In specific configuration local user can access content of any logical drive...

3.4AI score
SaveExploits0References1Affected Software1
myhack58
myhack58
added 2006/08/10 12:0 a.m.20 views

Several home malicious code-vulnerability warning-the black bar safety net

Here to say a few page malicious code:"not is to let everybody put these code into your homepage! Just want everyone to be able to understand the malicious code, play a better protective effect!" A, The Loop code: "Put the following code added to the page, you can achieve the above effects" img...

7AI score
SaveExploits0
Symantec
Symantec
added 2006/08/01 8:0 a.m.30 views

Symantec On-Demand Protection Encrypted Data Exposure

SUMMARY Symantec On-Demand Agent SODA and Symantec On-Demand Protection SODP provide a Virtual Desktop environment to secure Web-based applications and services. Files created while in the virtual desktop are encrypted as they are saved to a hard drive or removable media, if that option is enable...

2.1CVSS0.9AI score0.00228EPSS
SaveExploits0Affected Software1
Prion
Prion
added 2006/07/21 2:3 p.m.23 views

Directory traversal

Absolute path directory traversal vulnerability in a MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and b VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the 1 language parameter in...

5CVSS7AI score0.1037EPSS
SaveExploits4References14Affected Software3
CVE
CVE
added 2006/07/10 10:0 p.m.55 views

CVE-2006-3488

The CVE-2006-3488 entry concerns an absolute path traversal in VirtuaStore 2.0, specifically the administrador.asp component. According to the provided documents, the vulnerability allows remote attackers to read arbitrary directories or files by supplying an absolute path with a Windows drive le...

5CVSS7.2AI score0.01175EPSS
SaveExploits0References1Affected Software1
myhack58
myhack58
added 2006/05/28 12:0 a.m.18 views

Easily get to the cafe-the new Internet cafe billing management system---punwin-vulnerability warning-the black bar safety net

| Mae ping and Vientiane is already the past, now there is the emergence of some new Internet cafe billing management system---punwin, Oh, in the online search a bit on the crack pubwin of the method, how? Is not few and far between for? We here opened a new cafe, just a billing management system...

7.4AI score
SaveExploits0
NVD
NVD
added 2006/05/17 10:6 a.m.29 views

CVE-2006-1953

Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" encoded drive letter in a URL...

7.8CVSS6.7AI score0.02716EPSS
SaveExploits1References10
Rows per page
Query Builder