Lucene search
K

9211 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/05/09 12:0 a.m.23 views

(0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

8.8CVSS3.6AI score0.01591EPSS
Exploits0
Veracode
Veracode
added 2019/05/02 6:2 a.m.46 views

Denial Of Service (DoS) Through Memory Corruption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.74663EPSS
Exploits78References16Affected Software3
Veracode
Veracode
added 2019/05/02 6:2 a.m.24 views

Arbitrary Code Execution

php56 is vulnerable to arbitrary code execution. The vulnerability exists due to a flaw in the regular expression parser...

7.8CVSS6.5AI score0.01115EPSS
Exploits1References7Affected Software4
Veracode
Veracode
added 2019/05/02 5:39 a.m.47 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...

7.5CVSS9.2AI score0.8832EPSS
Exploits43References24Affected Software6
Veracode
Veracode
added 2019/05/02 5:39 a.m.23 views

Heap-based Buffer Overflow

PHP is vulnerable to heap-based buffer overflow. Attackers are able to execute arbitrary code via a large regular expression...

6.8CVSS7AI score0.22421EPSS
Exploits1References24Affected Software7
Veracode
Veracode
added 2019/05/02 5:39 a.m.48 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.8832EPSS
Exploits32References52Affected Software6
Veracode
Veracode
added 2019/05/02 5:39 a.m.40 views

Remote Code Execution (RCE) Via Memory Corruption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.8832EPSS
Exploits32References24Affected Software6
Veracode
Veracode
added 2019/05/02 5:39 a.m.45 views

Out-Of-Bounds Read

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.8832EPSS
Exploits32References22Affected Software5
Veracode
Veracode
added 2019/05/02 5:34 a.m.30 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists when parsing a malicious regular expression...

9.8CVSS6.7AI score0.06404EPSS
Exploits0References37Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.30 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through the parsing of a malicious regular expression...

7.5CVSS6.6AI score0.04176EPSS
Exploits0References23Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.20 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

7.5CVSS6.6AI score0.03462EPSS
Exploits0References19Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.33 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

7.5CVSS6.6AI score0.03462EPSS
Exploits0References19Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.25 views

Denial Of Service (DoS)

PCRE is vulneraable to denial of service DoS. The vulnerability exists through the parsing of a malicious regular expression...

9.8CVSS6.8AI score0.0752EPSS
Exploits0References26Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.14 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

7.5CVSS6.6AI score0.05145EPSS
Exploits0References23Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.24 views

Denial Of Service (DoS)

pcre is vulnerable to denial of service DoS. The vulnerability exists as remote attackers can supply malicious regular expression to cause DoS attacks...

7.5CVSS5.7AI score0.03462EPSS
Exploits1References32Affected Software4
Veracode
Veracode
added 2019/05/02 4:46 a.m.51 views

Privilege Escalation

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.5129EPSS
Exploits7References36Affected Software63
Veracode
Veracode
added 2019/05/02 4:46 a.m.61 views

Information Disclosure

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.5129EPSS
Exploits7References42Affected Software63
Veracode
Veracode
added 2019/05/02 4:46 a.m.44 views

Weak Authentication

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.5129EPSS
Exploits7References40Affected Software63
Veracode
Veracode
added 2019/05/02 4:46 a.m.49 views

Information Disclosure

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.5129EPSS
Exploits7References36Affected Software63
Veracode
Veracode
added 2019/05/02 4:45 a.m.32 views

Denial Of Service (DoS)

Tcl Tool Command Language provides a powerful platform for creating integration applications that tie together diverse applications, protocols, devices, and frameworks. When paired with the Tk toolkit, Tcl provides a fast and powerful way to create cross-platform GUI applications. Two denial of...

6.8CVSS8.7AI score0.00412EPSS
Exploits2References43Affected Software2
Rows per page
Query Builder