Lucene search
+L

844 matches found

RedHat Linux
RedHat Linux
•added 2017/11/30 1:14 p.m.•78 views

Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

5.5CVSS6.5AI score0.00721EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2017/08/08 6:50 p.m.•142 views

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.8CVSS6.7AI score0.00519EPSS
SaveExploits0References6
Citrix
Citrix
•added 2017/07/19 12:00 a.m.•14 views

Application launch using Anonymous user account resets the Session Limit Timer to 10

While launching an application for unauthenticated/Anonymous user, the idle tab for the Anon account might default back to 10 minutes even after manually setting it to some other value. The following steps can be followed to test the behavior: From a VDA running 7.9 or higher, run the below .exe ...

7AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2017/07/18 12:00 a.m.•8 views

July 18, 2017—KB4025335 (Preview of Monthly Rollup)

None None...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/05/26 8:29 a.m.•10 views

idle-empire.com XSS vulnerability

Open Bug Bounty ID: OBB-241620 Description| Value ---|--- Affected Website:| idle-empire.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
hackapp
hackapp
•added 2017/04/27 10:29 a.m.•56 views

Idle Heroes - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Idle Heroes published at the 'play' market has multiple vulnerabilities...

1.3AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2017/04/13 7:59 p.m.•16 views

CVE-2016-8712

An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds...

8.1CVSS5.7AI score0.01353EPSS
SaveExploits2References1
Prion
Prion
•added 2017/04/13 7:59 p.m.•24 views

Authentication flaw

An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds...

4.3CVSS7.4AI score0.01353EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2017/04/13 7:00 p.m.•37 views

CVE-2016-8712

An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds...

5.9CVSS8.3AI score0.01353EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2017/04/13 12:00 a.m.•15 views

PT-2017-9755 · Moxa · Moxa Awk-3131A Wireless Ap

Name of the Vulnerable Software and Affected Versions: Moxa AWK-3131A Wireless AP version 1.1 Description: An exploitable nonce reuse vulnerability exists in the Web Application functionality. The device uses one nonce for all session authentication requests and only changes the nonce if the web...

8.1CVSS6.1AI score0.01353EPSS
SaveExploits2References3
CNVD
CNVD
•added 2017/03/27 12:00 a.m.•7 views

Android WiFi Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A denial of service vulnerability exists in Android WiFi. The vulnerability arises due to the system-level Intent mechanism "com.android.server.WifiManager.action.DEVICEIDLE" in...

6.8AI score
SaveExploits0
Fedora
Fedora
•added 2016/07/23 9:06 p.m.•63 views

[SECURITY] Fedora 23 Update: kf5-kidletime-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 integration module for idle time detection...

7.5CVSS2.4AI score0.04429EPSS
SaveExploits1
Fedora
Fedora
•added 2016/07/23 7:07 p.m.•27 views

[SECURITY] Fedora 24 Update: kf5-kidletime-5.24.0-1.fc24

KDE Frameworks 5 Tier 1 integration module for idle time detection...

7.5CVSS2.4AI score0.04429EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•18 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the idle package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information...

4.6CVSS5.5AI score0.00491EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2016/01/12 7:59 p.m.•9 views

DEBIAN-CVE-2015-8659

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

10CVSS9.1AI score0.03964EPSS
SaveExploits0References1
NVD
NVD
•added 2016/01/12 7:59 p.m.•30 views

CVE-2015-8659

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

10CVSS7.5AI score0.03964EPSS
SaveExploits0References15
Prion
Prion
•added 2016/01/12 7:59 p.m.•29 views

Design/Logic Flaw

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

10CVSS9.5AI score0.03964EPSS
SaveExploits0References15Affected Software5
OSV
OSV
•added 2016/01/12 7:59 p.m.•11 views

UBUNTU-CVE-2015-8659

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

10CVSS7.4AI score0.03964EPSS
SaveExploits0References3
Mend
Mend
•added 2016/01/12 7:00 p.m.•2 views

CVE-2015-8659

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

10CVSS0.03964EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/01/12 12:00 a.m.•5 views

CVE-2015-8659: Improper Restriction of Operations within the Bounds of a Memory Buffer

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug...

10CVSS8.3AI score0.03964EPSS
SaveExploits0References2
Rows per page
Query Builder