Lucene search
+L

7649 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/11/01 7:44 a.m.7 views

The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries

Overview The installer of The Public Certification Service for Individuals "The JPKI user's software" provided by Japan Agency for Local Authority Information Systems J-LIS contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Yuji Tounai of NTT...

9.3CVSS6.8AI score0.01829EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/11/01 12:00 a.m.43 views

JVN#91002412: The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries

The installer of The Public Certification Service for Individuals "The JPKI user's software" provided by Japan Agency for Local Authority Information Systems J-LIS contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact Arbitrary code may be...

9.3CVSS7.7AI score0.01829EPSS
SaveExploits0
Packet Storm
Packet Storm
added 2016/11/01 12:00 a.m.33 views

My Little Forum 2.3.7 Cross Site Request Forgery / Cross Site Scripting

Title: ====== My Little Forum 2.3.7 - Multiple Vulnerability Product & Service Introduction: =============================== My little forum is a simple PHP and MySQL based internet forum that displays the messages in classical threaded view tree structure. It is Open Source licensed under the GN...

7.4AI score
SaveExploits0
ThreatPost
ThreatPost
added 2016/10/28 11:22 a.m.21 views

On the Dyn DDoS Attack, Keen Team, and a Phony Windows Installer

Mike Mimoso and Chris Brook recap the news of the week, including the storylines around last week’s Dyn DDoS attack, Keen Team winning big again at Pwn2Own, and a fake Windows installer. Download: ThreatpostNewsWrapOctober282016.mp3 Music by Chris Gonsalves...

2.1AI score
SaveExploits0References2
PostrgeSql
PostrgeSql
added 2016/10/27 12:00 a.m.1030 views

Vulnerability in packaging (CVE-2016-7048)

Interactive installer downloads software over plain HTTP, then executes it...

9.3CVSS8AI score0.04915EPSS
SaveExploits0References1Affected Software1
zdt
zdt
added 2016/10/27 12:00 a.m.67 views

Apache OpenOffice 4.1.2 Privilege Escalation Vulnerability

Exploit for multiple platform in category local exploits CVE-2016-6804 Apache OpenOffice Advisory Title: Windows Installer Execution of Arbitrary Code with Elevated Privileges Version 1.0 Announced October 11, 2016 Description The Apache OpenOffice installer for Windows contained a defective...

9.3CVSS7.5AI score0.03011EPSS
SaveExploits1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/10/26 6:13 a.m.9 views

Installer of 7-Zip for Windows may insecurely load Dynamic Link Libraries

Overview 7-Zip for Windows is an open source compression and decompression software. The installer of 7-Zip for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Takashi Yoshikawa of Mitsui Bussan Secure Directions reported this...

7.8CVSS6.9AI score0.01811EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/10/26 12:00 a.m.43 views

JVN#76780067: Installer of 7-Zip for Windows may insecurely load Dynamic Link Libraries

7-Zip for Windows is an open source compression and decompression software. The installer of 7-Zip for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact Arbitrary code may be executed with the privilege of the user invoking the...

7.8CVSS7.7AI score0.01811EPSS
SaveExploits0
Metasploit
Metasploit
added 2016/10/25 2:41 p.m.79 views

Windows Manage Persistent EXE Payload Installer

This Module will upload an executable to a remote host and make it Persistent. It can be installed as USER, SYSTEM, or SERVICE. USER will start on user login, SYSTEM will start on system boot but requires privs. SERVICE will create a new service which will start the payload. Again requires privs...

0.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/10/19 6:32 a.m.11 views

Installer of Evernote for Windows may insecurely load Dynamic Link Libraries

Overview The installer of Evernote for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Takashi Yoshikawa of Mitsui Bussan Secure Directions reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informati...

7.8CVSS6.9AI score0.01534EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/10/19 3:29 a.m.6 views

The installer of e-Tax Software may insecurely load Dynamic Link Libraries

Overview The installer of e-Tax Software provided by National Tax Agency contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the...

7.8CVSS7.3AI score0.01534EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/10/18 12:00 a.m.82 views

JVN#63012325: The installer of e-Tax Software may insecurely load Dynamic Link Libraries

The installer of e-Tax Software provided by National Tax Agency contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact This vulnerability can be exploited when the following condition is met. If this vulnerability is exploited, arbitrary co...

7.8CVSS7.8AI score0.01534EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2016/10/04 9:39 p.m.19 views

Apple starts downloading MacOS Sierra automatically to your MacBook — Here's How to Stop It

Are you experiencing slow Internet speed on your MacBook today? — It's not just you! Here's Why: Following in Microsoft's footsteps, Apple has started "pre-downloading" the latest version of its desktop operating system, macOS 10.12 Sierra, in the background, if you are still running OS X El...

6.6AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2016/09/29 12:00 a.m.9 views

September 29, 2016 — KB3194496 (OS Builds 14393.222)

None None...

6.1AI score
SaveExploits0
NVD
NVD
added 2016/09/22 3:59 p.m.30 views

CVE-2016-6340

The kickstart file in Red Hat QuickStart Cloud Installer QCI forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack...

8.4CVSS8.3AI score0.00386EPSS
SaveExploits0References2
NVD
NVD
added 2016/09/22 3:59 p.m.29 views

CVE-2016-6322

Red Hat QuickStart Cloud Installer QCI uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file...

8.4CVSS8.2AI score0.00391EPSS
SaveExploits0References2
Prion
Prion
added 2016/09/22 3:59 p.m.19 views

Design/Logic Flaw

The kickstart file in Red Hat QuickStart Cloud Installer QCI forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack...

2.1CVSS6.9AI score0.00386EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2016/09/22 3:00 p.m.37 views

CVE-2016-6322

Red Hat QuickStart Cloud Installer QCI uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file...

8.2AI score0.00391EPSS
SaveExploits0References2
CVE
CVE
added 2016/09/22 3:00 p.m.51 views

CVE-2016-6322

CVE-2016-6322 affects Red Hat QuickStart Cloud Installer (QCI). The issue is that /etc/qci/answers has world-readable permissions, enabling a local user to read the root password of the deployed system, which can lead to complete confidentiality/integrity/availability compromise of the deployed e...

8.4CVSS8AI score0.00391EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2016/09/22 3:00 p.m.34 views

CVE-2016-6340

The kickstart file in Red Hat QuickStart Cloud Installer QCI forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack...

8.3AI score0.00386EPSS
SaveExploits0References2
Rows per page
Query Builder