Lucene search
+L

9954 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/05/09 12:00 a.m.32 views

(0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

8.8CVSS3.6AI score0.0364EPSS
SaveExploits0
Veracode
Veracode
added 2019/05/02 6:02 a.m.55 views

Denial Of Service (DoS) Through Memory Corruption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...

9.8CVSS9AI score0.36974EPSS
SaveExploits79References16Affected Software3
Veracode
Veracode
added 2019/05/02 6:02 a.m.32 views

Arbitrary Code Execution

php56 is vulnerable to arbitrary code execution. The vulnerability exists due to a flaw in the regular expression parser...

7.8CVSS6.5AI score0.02959EPSS
SaveExploits1References7Affected Software4
Veracode
Veracode
added 2019/05/02 5:39 a.m.76 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits44References24Affected Software6
Veracode
Veracode
added 2019/05/02 5:39 a.m.57 views

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References52Affected Software6
Veracode
Veracode
added 2019/05/02 5:39 a.m.50 views

Remote Code Execution (RCE) Via Memory Corruption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References24Affected Software6
Veracode
Veracode
added 2019/05/02 5:39 a.m.26 views

Heap-based Buffer Overflow

PHP is vulnerable to heap-based buffer overflow. Attackers are able to execute arbitrary code via a large regular expression...

6.8CVSS7AI score0.08407EPSS
SaveExploits1References24Affected Software7
Veracode
Veracode
added 2019/05/02 5:39 a.m.51 views

Out-Of-Bounds Read

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References22Affected Software5
Veracode
Veracode
added 2019/05/02 5:34 a.m.35 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists when parsing a malicious regular expression...

9.8CVSS6.7AI score0.06404EPSS
SaveExploits0References37Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.34 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through the parsing of a malicious regular expression...

7.5CVSS6.6AI score0.06587EPSS
SaveExploits0References23Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.24 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

7.5CVSS6.6AI score0.03764EPSS
SaveExploits0References19Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.37 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

7.5CVSS6.6AI score0.03764EPSS
SaveExploits0References19Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.19 views

Denial Of Service (DoS)

PCRE is vulnerable to denial of service DoS. The vulnerability exists through parsing a malicious regular expression...

7.5CVSS6.6AI score0.05623EPSS
SaveExploits0References23Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.31 views

Denial Of Service (DoS)

PCRE is vulneraable to denial of service DoS. The vulnerability exists through the parsing of a malicious regular expression...

9.8CVSS6.8AI score0.07059EPSS
SaveExploits0References26Affected Software4
Veracode
Veracode
added 2019/05/02 5:34 a.m.29 views

Denial Of Service (DoS)

pcre is vulnerable to denial of service DoS. The vulnerability exists as remote attackers can supply malicious regular expression to cause DoS attacks...

7.5CVSS5.7AI score0.06169EPSS
SaveExploits1References32Affected Software4
Veracode
Veracode
added 2019/05/02 4:46 a.m.64 views

Privilege Escalation

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.15561EPSS
SaveExploits8References36Affected Software63
Veracode
Veracode
added 2019/05/02 4:46 a.m.70 views

Information Disclosure

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.15561EPSS
SaveExploits8References42Affected Software63
Veracode
Veracode
added 2019/05/02 4:46 a.m.49 views

Weak Authentication

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.15561EPSS
SaveExploits8References40Affected Software63
Veracode
Veracode
added 2019/05/02 4:46 a.m.57 views

Information Disclosure

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

5.9CVSS7AI score0.15561EPSS
SaveExploits8References36Affected Software63
Veracode
Veracode
added 2019/05/02 4:45 a.m.38 views

Denial Of Service (DoS)

Tcl Tool Command Language provides a powerful platform for creating integration applications that tie together diverse applications, protocols, devices, and frameworks. When paired with the Tk toolkit, Tcl provides a fast and powerful way to create cross-platform GUI applications. Two denial of...

6.8CVSS8.7AI score0.03855EPSS
SaveExploits2References43Affected Software2
Rows per page
Query Builder