CVE-2012-0262

creationtimestamp| type| source ---|---|--- 2015-01-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41687 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/op5welcome.rb 2025-02-06 03:13:40+00:00| seen|...

CVE-2014-9583

creationtimestamp| type| source ---|---|--- 2015-01-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35688 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44524 2018-05-29 15:50:33+00:00| seen|...

Microsoft Windows Agent ACF File Handling Memory Corruption (MS06-068) - Ver2 (CVE-2006-3445)

A remote code execution vulnerability exists in Microsoft Agent. Microsoft Agent is a software technology that enables an enriched form of user interaction that can make using and learning to use a computer easier and more natural. . The vulnerability is due to a memory corruption error in the...

Fedora Update for kernel FEDORA-2014-17283

Check the version of kernel SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868627";...

Juniper Junos Space GNU Bash Command Injection Vulnerability (JSA10648) (Shellshock)

According to its self-reported version number, the remote Junos Space version is prior to 14.1R2, and may be affected by a command injection vulnerability in GNU Bash known as Shellshock. The vulnerability is due to the processing of trailing strings after function definitions in the values of...

Citrix XenServer Shellshock Security Update (CTX200223)

A number of security vulnerabilities have been identified in the bash SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-4936

creationtimestamp| type| source ---|---|--- 2014-12-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41701 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/malwarebytesupdateexec.rb 2025-02-06...

UBUNTU-CVE-2014-9163

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014...

flash-plugin: Multiple code-execution flaws (APSB14-27)

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014...

CVE-2014-9163

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014. Recent assessments: gwillcox-...

PT-2014-2027 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 13.0.0.259 Adobe Flash Player versions 14.x Adobe Flash Player versions 15.x prior to 15.0.0.246 Adobe Flash Player versions prior to 11.2.202.425 on Linux Description: The issue is related to a stack-base...

ManageEngine Netflow Analyzer / IT360 - Arbitrary File Download

Arbitrary file download in ManageEngine Netflow Analyzer and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 30/11/2014 / Last updated: 3/12/2014 Background on the affected produc...

[The ManageOwnage Series, part IX]: 0-day arbitrary file download in NetFlow Analyzer and IT360

Hi, This is part 9 of the ManageOwnage series. For previous parts see 1. Today we have yet another 0 day - an arbitrary file download vulnerability that be exploited unauthenticated in NetFlow Analyzer and authenticated in IT360. I'm releasing this as a 0 day because ManageEngine have been making...

Siemens Patches WinCC Vulnerabilities Likely Being Exploited

Global industrial supplier Siemens has patched two critical vulnerabilities that it believes are likely being exploited. Organizations running products using the Siemens WinCC application are urged to apply available patches immediately; the company said it is working on updates for any remaining...

Google Chrome < 39.0.2171.71 Flash Player Remote Code Execution

The version of Google Chrome installed on the remote Windows host is prior to 39.0.2171.71. It is, therefore, affected by a remote code execution vulnerability in the included Flash Player plugin, which is due to the processing of a dereferenced memory pointer. %NASLMINLEVEL 70300 C Tenable Netwo...

Netgear WNR500 Wireless Router - 'webproc?getpage' Traversal Arbitrary File Access

Netgear Wireless Router WNR500 Parameter Traversal Arbitrary File Access Exploit Vendor: NETGEAR Product web page: http://www.netgear.com Affected version: WNR500 firmware: 1.0.7.2 Summary: The NETGEAR compact N150 classic wireless router WNR500 improves your legacy Wireless-G network. It is a...

Zenario CMS 7.0.2d Cross Site Scripting / Open Redirect

Zenario CMS 7.0.2d Reflected XSS and Open Redirect Vulnerabilities Vendor: Tribal Ltd. Product web page: http://www.zenar.io Affected version: 7.0.2d Community Edition Summary: Zenario is a web-based content management system for sites with one or many languages. It is simple to use, and can grow...

Microsoft Windows Kerberos Checksum Remote Privilege Escalation Vulnerability (3011780)

This host is missing an important security update according to Microsoft Bulletin MS14-068. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2014-8598

creationtimestamp| type| source ---|---|--- 2014-11-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41685 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/mantisbtphpexec.rb 2025-02-06 03:13:42+00:00| seen|...

CVE-2014-7146

creationtimestamp| type| source ---|---|--- 2014-11-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41685 2014-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35283 2018-05-29 15:50:33+00:00| seen|...