CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

267 matches found

Rapid7 Vulnerability Database (full)•added 2018/03/29 12:00 a.m.•3 views

CVE-2015-2001: Incorrect Access of Indexable Resource

The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function...

9.8CVSS8.7AI score0.01983EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/03/29 12:00 a.m.•6 views

CVE-2015-2000: Incorrect Access of Indexable Resource

The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function...

9.8CVSS8.7AI score0.01983EPSS

SaveExploits0References2

Positive Technologies•added 2018/03/29 12:00 a.m.•4 views

PT-2018-4358

Name of the Vulnerable Software and Affected Versions GraceNote GNSDK SDK versions prior to SVN Changeset 1.1.7 Description The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to...

9.8CVSS0.01983EPSS

SaveExploits0References3

Positive Technologies•added 2018/03/29 12:00 a.m.•2 views

PT-2018-4356

Name of the Vulnerable Software and Affected Versions ESRI ArcGis Runtime SDK versions prior to 10.2.6-2 for Android Description The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the improper passing of an...

9.8CVSS0.02261EPSS

SaveExploits0References3

Positive Technologies•added 2018/03/29 12:00 a.m.•4 views

PT-2018-4357

Name of the Vulnerable Software and Affected Versions PJSUA2 SDK versions prior to SVN Changeset 51322 for Android Description The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer...

9.8CVSS0.01983EPSS

SaveExploits0References3

Positive Technologies•added 2018/03/29 12:00 a.m.•2 views

PT-2018-4355

Name of the Vulnerable Software and Affected Versions MetaIO SDK versions prior to 6.0.2.1 Description The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the class improperly passing an attacker-controlled pointer to a nati...

9.8CVSS0.01983EPSS

SaveExploits0References3

Positive Technologies•added 2018/03/29 12:00 a.m.•5 views

PT-2018-4360

Name of the Vulnerable Software and Affected Versions MyScript SDK versions prior to 1.3 for Android Description The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the class improperly passing an attacker-controlled pointer...

9.8CVSS0.02739EPSS

SaveExploits1References3

Citrix•added 2017/11/24 12:00 a.m.•45 views

App Layering - Shutdown for Finalize Error, "A RunOnce script is outstanding"

In any layer, when creating it, you must double-click on the Shutdown for Finalize script, where we determine that there are no pending Windows operations that need to complete before we finalize. When you run this, you may see this: Layer Finalize is BLOCKED, The outstanding items are: 'a RunOnc...

7AI score

SaveExploits0

appercut•added 2016/05/13 12:00 a.m.•556 views

Allfresco Community Edition: source code security analysis report

Several vulnerabilities were discovered in Alfresco Software 'Allfresco Community Edition' software: Утечка пользовательских данных между сессиями Использование XSL трансформации для исполнения произвольного кода Использование метода finalize Отсутствие верификации цифровой подписи исполняемых...

0.6AI score

SaveExploits0References1Affected Software1