Lucene search
+L

9264 matches found

CNVD
CNVD
•added 2015/03/25 12:00 a.m.•14 views

IBM Rational ClearCase Information Disclosure Vulnerability

IBM Rational ClearCase is a suite of software configuration management solutions from IBM in the United States. The solution provides version control, workspace management, parallel development support and build auditing. A security vulnerability exists in the installer for IBM Rational ClearCase...

1.2CVSS6.3AI score0.00332EPSS
SaveExploits0References1
OSV
OSV
•added 2015/01/31 12:00 a.m.•22 views

DSA-3148-1 chromium-browser - end of life

Bulletin has no description...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2015/01/29 12:00 a.m.•17 views

Google Chrome uninstall-survey function unauthorized access vulnerability

Google Chrome is a web browser developed by the American company Google Google. The installer/util/googlechromedistribution.cc file in the uninstall-survey function in Google Chrome 40.0.2214.85 and earlier versions has a ' The...

4.6CVSS6.7AI score0.0026EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/27 12:00 a.m.•4 views

CVE-2014-9646: Undefined Security Weakness

Unquoted Windows search path vulnerability in the GoogleChromeDistribution::DoPostUninstallOperations function in installer/util/googlechromedistribution.cc in the uninstall-survey feature in Google Chrome before 40.0.2214.91 allows local users to gain privileges via a Trojan horse program in the...

4.6CVSS8.1AI score0.0026EPSS
SaveExploits0References2
NVD
NVD
•added 2015/01/17 11:59 a.m.•20 views

CVE-2014-4835

IBM ServerGuide before 9.63, UpdateXpress System Packs Installer UXSPI before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file...

2.1CVSS5.5AI score0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/01/17 12:00 a.m.•3 views

PT-2015-3782

Name of the Vulnerable Software and Affected Versions IBM ServerGuide versions prior to 9.63 UpdateXpress System Packs Installer UXSPI versions prior to 9.63 ToolsCenter Suite versions prior to 9.63 Description The issue allows local users to obtain sensitive information by reading a file, as...

2.1CVSS0.00312EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/17 12:00 a.m.•4 views

CVE-2014-4835: Exposure of Sensitive Information to an Unauthorized Actor

IBM ServerGuide before 9.63, UpdateXpress System Packs Installer UXSPI before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a file...

2.1CVSS5.7AI score0.00312EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2015/01/16 9:04 p.m.•11 views

Important: Red Hat Bug Fix Advisory: Red Hat Satellite 6 server bug fix update

Updated the following packages to fix several bugs in Red Hat Satellite 6: foreman foreman-proxy katello-agent pulp pulp-nodes pulp-puppet pulp-rpm ruby193-rubygem-fog ruby193-rubygem-foreman-tasks packages. These packages are now available in Red Hat Satellite 6. Red Hat Satellite is a system...

7.5CVSS6AI score0.01706EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2015/01/16 1:31 a.m.•23 views

FirePassword - Firefox Username & Password Recovery Tool

FirePassword is first ever tool back in early 2007 released to recover the stored website login passwords from Firefox Browser. Like other browsers, Firefox also stores the login details such as username, password for every website visited by the user at the user consent. All these secret details...

7.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2015/01/12 11:28 p.m.•31 views

Instant PDF Password Protector - Password Protect PDF file

Instant PDF Password Protector is the Free tool to quickly Password Protect PDF file on your system. With a click of button, you can lock or protect any of your sensitive/private PDF documents. You can also use any of the standard Encryption methods - RC4/AES 40-bit, 128-bit, 256-bit based upon t...

7.2AI score
SaveExploits0
Prion
Prion
•added 2015/01/12 7:59 p.m.•24 views

Type confusion

The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via craft...

10CVSS8.4AI score0.04174EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2015/01/12 7:00 p.m.•69 views

CVE-2013-2604

CVE-2013-2604 affects RealNetworks GameHouse RealArcade Installer (ActiveMARK Game Installer) 2.6.0.481 and 3.0.7. The weakness is permissions in the GameHouse Games directory tree that allow local users to place a Trojan horse DLL (e.g., DDRAW.DLL) in an individual game’s directory, enabling pri...

7.2CVSS6.8AI score0.00945EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2015/01/12 12:00 a.m.•2 views

PT-2015-3546

Name of the Vulnerable Software and Affected Versions RealArcade Installer version 2.6.0.481 Description The issue concerns the RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll, which performs unexpected type conversions for invalid parameter types. This allows remote attackers to...

10CVSS0.04174EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2015/01/12 12:00 a.m.•5 views

PT-2015-3547

Name of the Vulnerable Software and Affected Versions RealNetworks GameHouse RealArcade Installer versions 2.6.0.481 through 3.0.7 Description The issue concerns weak permissions set for the GameHouse Games directory tree, allowing local users to gain privileges. This can be achieved by placing a...

7.2CVSS0.00945EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/12 12:00 a.m.•6 views

CVE-2013-2603: Undefined Security Weakness

The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free via craft...

10CVSS6.5AI score0.04174EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/12 12:00 a.m.•6 views

CVE-2013-2604: Undefined Security Weakness

RealNetworks GameHouse RealArcade Installer aka ActiveMARK Game Installer 2.6.0.481 and 3.0.7 uses weak permissions Create Files/Write Data for the GameHouse Games directory tree, which allows local users to gain privileges via a Trojan horse DLL in an individual game's directory, as demonstrated...

7.2CVSS5.8AI score0.00945EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2014/12/03 1:00 a.m.•37 views

CVE-2014-9141

The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program...

7.3AI score0.01209EPSS
SaveExploits2References2
CVE
CVE
•added 2014/12/03 1:00 a.m.•61 views

CVE-2014-9141

CVE-2014-9141 affects Thomson Reuters Fixed Assets CS 13.1.4 and earlier. The installer exposes weak permissions on connectbgdl.exe, enabling a local user to modify the program and achieve arbitrary code execution. The vulnerability scope is local, with no user interaction required stated in the ...

7.2CVSS7.5AI score0.01209EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/12/03 12:00 a.m.•7 views

CVE-2014-9141: Undefined Security Weakness

The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program...

7.2CVSS6.5AI score0.01209EPSS
SaveExploits2References2
PyPA
PyPA
•added 2014/11/24 3:59 p.m.•17 views

PYSEC-2014-11

pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...

2.1CVSS6.4AI score0.00393EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder