Lucene search
+L

5740 matches found

OSV
OSV
added 2017/04/13 2:59 p.m.4 views

UBUNTU-CVE-2015-6674

Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This issue exists as an additional issue from an incomplete fix of CVE-2012-1836...

9.8CVSS7.3AI score0.02273EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2017/04/13 2:0 p.m.46 views

CVE-2015-6674

Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This issue exists as an additional issue from an incomplete fix of CVE-2012-1836...

9.8CVSS9.6AI score0.02273EPSS
SaveExploits0
CNVD
CNVD
added 2017/04/13 12:0 a.m.6 views

Ansible Incompletely Fixes Arbitrary Command Execution Vulnerability

Ansible is a computer system configuration manager that can be used to publish, manage, and orchestrate computer systems. An incomplete fix for an arbitrary command execution vulnerability exists in Ansible. An attacker can exploit this vulnerability to execute arbitrary commands on an affected...

8.5CVSS7.8AI score0.03157EPSS
SaveExploits0References1
NVD
NVD
added 2017/04/07 4:59 a.m.18 views

CVE-2017-7578

Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service listswf application crash or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831...

7.8CVSS8.2AI score0.01248EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2017/04/07 4:59 a.m.24 views

CVE-2017-7578

Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service listswf application crash or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831...

7.8CVSS7.2AI score0.01248EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2017/04/07 12:0 a.m.36 views

RedHat Update for curl RHSA-2017:0847-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.17942EPSS
SaveExploits0References2
Veracode
Veracode
added 2017/04/06 8:23 a.m.17 views

Arbitrary File Read

Trytond is vulnerable to arbitrary file reads. Remote authenticated users are able to read files through a root name with a different suffix. This vulnerability exists because of an incomplete fix for CVE-2016-1242...

5.3CVSS5.1AI score0.01819EPSS
SaveExploits0References5Affected Software2
Tenable Nessus
Tenable Nessus
added 2017/04/06 12:0 a.m.68 views

Scientific Linux Security Update : curl on SL6.x i386/x86_64 (20170329)

Security Fixes : - It was found that the fix for CVE-2015-3148 in curl was incomplete. An application using libcurl with HTTP Negotiate authentication could incorrectly re-use credentials for subsequent requests to the same server. CVE-2017-2628 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

9.8CVSS7AI score0.17942EPSS
SaveExploits0References3
NVD
NVD
added 2017/04/04 5:59 p.m.21 views

CVE-2017-0360

fileopen in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242...

5.3CVSS4.8AI score0.01541EPSS
SaveExploits0References4
OSV
OSV
added 2017/04/04 5:59 p.m.8 views

CVE-2017-0360

fileopen in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242...

5.3CVSS4.8AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2017/04/04 5:59 p.m.24 views

CVE-2017-0360

fileopen in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242...

5.3CVSS6.2AI score0.01541EPSS
SaveExploits0References2
OSV
OSV
added 2017/04/04 5:59 p.m.4 views

UBUNTU-CVE-2017-0360

fileopen in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242...

5.3CVSS6.2AI score0.01541EPSS
SaveExploits0References3
OSV
OSV
added 2017/04/04 5:59 p.m.3 views

DEBIAN-CVE-2017-0360

fileopen in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242...

5.3CVSS5AI score0.01541EPSS
SaveExploits0References1
OSV
OSV
added 2017/04/04 5:59 p.m.30 views

PYSEC-2017-97

fileopen in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242...

5.3CVSS5.3AI score0.01541EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2017/04/04 5:0 p.m.29 views

CVE-2017-0360

fileopen in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242...

4.8AI score0.01541EPSS
SaveExploits0References4
CVE
CVE
added 2017/04/04 5:0 p.m.100 views

CVE-2017-0360

CVE-2017-0360 details (details from connected docs) : In Tryton, file_open vulnerability affects 3.x and 4.x up to 4.2.2, allowing remote authenticated users with certain permissions to read arbitrary files by exploiting a “same root name but with a suffix” attack. The issue is noted as stemming ...

5.3CVSS4.6AI score0.01541EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2017/03/31 4:59 p.m.27 views

CVE-2008-7313

The httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...

9.8CVSS7.2AI score0.04544EPSS
SaveExploits0References2
NVD
NVD
added 2017/03/31 4:59 p.m.26 views

CVE-2014-5009

Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008...

9.8CVSS9.8AI score0.04707EPSS
SaveExploits0References13
NVD
NVD
added 2017/03/31 4:59 p.m.21 views

CVE-2008-7313

The httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...

9.8CVSS9.8AI score0.04544EPSS
SaveExploits0References13
Prion
Prion
added 2017/03/31 4:59 p.m.30 views

Design/Logic Flaw

The httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796...

7.5CVSS9.7AI score0.08985EPSS
SaveExploits4References13Affected Software2
Rows per page
Query Builder