Lucene search
+L

8981 matches found

Veracode
Veracode
added 2019/05/02 5:12 a.m.34 views

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way the Linux kernel's XFS file system handled replacing of remote attributes under certain conditions. A local user with access to XFS file system mount could potentially use this fla...

4.7CVSS6.5AI score0.01176EPSS
SaveExploits3References12Affected Software1
Veracode
Veracode
added 2019/05/02 5:03 a.m.44 views

Denial Of Service (DoS)

Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. A race condition was found in the way N...

10CVSS8.5AI score0.06329EPSS
SaveExploits5References31Affected Software3
Veracode
Veracode
added 2019/05/02 5:03 a.m.37 views

Arbitrary Code Execution

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

10CVSS9.6AI score0.05591EPSS
SaveExploits0References21Affected Software2
Veracode
Veracode
added 2019/05/02 5:03 a.m.42 views

Information Disclosure

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to escalate their privileges on...

7.8CVSS6.6AI score0.37233EPSS
SaveExploits24References17Affected Software1
Veracode
Veracode
added 2019/05/02 5:03 a.m.33 views

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. A local, unprivileged user could use this flaw to escalate their privileges on...

7.8CVSS6.6AI score0.37233EPSS
SaveExploits24References20Affected Software1
Veracode
Veracode
added 2019/05/02 5:03 a.m.22 views

Authentication Bypass

Multiple flaws were discovered in the JMX, Libraries, Security, and Serviceability components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...

5CVSS4.5AI score0.03826EPSS
SaveExploits0References39Affected Software3
Veracode
Veracode
added 2019/05/02 5:03 a.m.20 views

Authentication Bypass

Multiple flaws were discovered in the JMX, Libraries, Security, and Serviceability components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...

6.4CVSS4.5AI score0.03826EPSS
SaveExploits0References39Affected Software3
Veracode
Veracode
added 2019/05/02 5:02 a.m.32 views

Credential Disclosure Through A Brute Force Attack

Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller MVC framework for web application development. Action Pack implemen...

7.5CVSS6.3AI score0.53703EPSS
SaveExploits2References7Affected Software2
Veracode
Veracode
added 2019/05/02 5:02 a.m.30 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.07571EPSS
SaveExploits0References14Affected Software2
Veracode
Veracode
added 2019/05/02 5:02 a.m.42 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.07571EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
added 2019/05/02 5:02 a.m.34 views

Denial Of Service (DoS)

Wireshark is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the...

9.3CVSS6.4AI score0.47422EPSS
SaveExploits13References14Affected Software1
Veracode
Veracode
added 2019/05/02 5:01 a.m.12 views

Authorization Bypass

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

9.8CVSS7.9AI score0.83633EPSS
SaveExploits18References17Affected Software2
Veracode
Veracode
added 2019/05/02 5:00 a.m.36 views

Arbitary Code Injection

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2013-5609,...

9.8CVSS9.8AI score0.11076EPSS
SaveExploits14References14Affected Software1
Veracode
Veracode
added 2019/05/02 5:00 a.m.28 views

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to terminate unexpectedly or, potentially, execute...

9.8CVSS9.4AI score0.11076EPSS
SaveExploits8References25Affected Software2
Veracode
Veracode
added 2019/05/02 4:59 a.m.41 views

Denial Of Service (DoS)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A flaw was found in the way the Linux kernel's IPv6 implementation handled certain UDP packets when the UDP Fragmentation Offload UFO feature was enabled. A remot...

6.2CVSS6.9AI score0.03181EPSS
SaveExploits8References40Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.26 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

7.8CVSS6.7AI score0.037EPSS
SaveExploits12References27Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.27 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

7.8CVSS6.7AI score0.037EPSS
SaveExploits12References19Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.34 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

7.8CVSS6.7AI score0.037EPSS
SaveExploits12References31Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.38 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

7.8CVSS6.7AI score0.037EPSS
SaveExploits12References27Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.30 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

7.8CVSS6.7AI score0.037EPSS
SaveExploits12References19Affected Software1
Rows per page
Query Builder