Lucene search
+L

3254 matches found

Prion
Prion
•added 2010/11/29 4:00 p.m.•19 views

Design/Logic Flaw

The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the 1 compatsyssemctl, 2 compatsysmsgctl, and 3 compatsysshmctl functions in...

1.9CVSS6AI score0.01478EPSS
SaveExploits8References34Affected Software7
CVE
CVE
•added 2010/11/29 3:00 p.m.•140 views

CVE-2010-4072

CVE-2010-4072 affects the Linux kernel: the copy_shmid_to_user function in ipc/shm.c (pre-2.6.37-rc1) does not initialize a certain structure, enabling local users to leak potentially sensitive information from kernel stack memory via the shmctl interface and the old shm interface. Affected produ...

1.9CVSS5.8AI score0.00387EPSS
SaveExploits0References39Affected Software1
Cvelist
Cvelist
•added 2010/11/29 3:00 p.m.•34 views

CVE-2010-4073

The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the 1 compatsyssemctl, 2 compatsysmsgctl, and 3 compatsysshmctl functions in...

5.9AI score0.01478EPSS
SaveExploits8References34
CVE
CVE
•added 2010/11/29 3:00 p.m.•164 views

CVE-2010-4073

CVE-2010-4073 affects the Linux kernel IPC compatibility code: before 2.6.37-rc1, several compat syscall handlers (ipc/compat.c and ipc/compat_mq.c) fail to initialize certain structures, enabling local attackers to read potentially sensitive kernel stack memory via vectors in compat_sys_semctl, ...

1.9CVSS6.2AI score0.01478EPSS
SaveExploits8References34Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/11/29 12:00 a.m.•4 views

CVE-2010-4073: Exposure of Sensitive Information to an Unauthorized Actor

The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the 1 compatsyssemctl, 2 compatsysmsgctl, and 3 compatsysshmctl functions in...

1.9CVSS5.9AI score0.01478EPSS
SaveExploits8References2
UbuntuCve
UbuntuCve
•added 2010/11/29 12:00 a.m.•49 views

CVE-2010-4073

The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the 1 compatsyssemctl, 2 compatsysmsgctl, and 3 compatsysshmctl functions in...

1.9CVSS6.2AI score0.01478EPSS
SaveExploits8References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/11/29 12:00 a.m.•3 views

CVE-2010-4072: Exposure of Sensitive Information to an Unauthorized Actor

The copyshmidtouser function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."...

1.9CVSS5.9AI score0.00387EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2010/09/01 12:00 a.m.•39 views

Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability - Cisco Systems

Cisco 10000, uBR10012 and uBR7200 series devices use a User Datagram Protocol UDP based Inter-Process Communication IPC channel that is externally reachable. An attacker could exploit this vulnerability to cause a denial of service DoS condition on affected devices. No other platforms are affecte...

8.5CVSS5.4AI score0.03299EPSS
SaveExploits1References4
myhack58
myhack58
•added 2010/03/20 12:00 a.m.•36 views

Online official is to be brush library-vulnerability warning-the black bar safety net

This and modify the score the same way. Today comparing the stuffy, just up ripped two sentences, with regard to the brush library on this thing The brush Gallery, is update money=1 0 0 0 0 0 0, a businessman used to call the brush points, sounds like a very NB, looks worship, in fact, also just...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/10/23 12:00 a.m.•39 views

Get all Windows Shares over WMI (win)

Get all Windows Shares over WMI. and check the Networkaccess for Anonymous IPC$ NullSession OpenVAS Vulnerability Test $Id: GSHBWMIgetShares.nasl 7061 2017-09-05 11:50:40Z teissa $ Get all Windows Shares over WMI win Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH,...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/10/23 12:00 a.m.•21 views

Get all Windows Shares over WMI - Windows

Get all Windows Shares over WMI and check the Networkaccess for Anonymous IPC$ NullSession. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.3AI score
SaveExploits0
CVE
CVE
•added 2009/10/06 10:00 p.m.•66 views

CVE-2009-3527

CVE-2009-3527: Concrete details exist in connected docs. A race condition in FreeBSD 6.3/6.4’s Pipe (IPC) close function can lead to a use-after-free via kqueues, causing local denial of service (crash) or privilege gain through NULL pointer dereference/memory corruption. Affected software: FreeB...

6.9CVSS6.4AI score0.00554EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2009/10/06 10:00 p.m.•48 views

CVE-2009-3527

Race condition in the Pipe IPC close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service crash or gain privileges via vectors related to kqueues, which triggers a use after free, leading to a NULL pointer dereference or memory corruption...

6.4AI score0.00554EPSS
SaveExploits2References5
NVD
NVD
•added 2009/05/07 5:30 p.m.•32 views

CVE-2009-1441

Heap-based buffer overflow in the ParamTraits::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service application crash or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel...

9.3CVSS7.9AI score0.02036EPSS
SaveExploits1References8
Prion
Prion
•added 2009/05/07 5:30 p.m.•37 views

Heap overflow

Heap-based buffer overflow in the ParamTraits::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service application crash or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel...

9.3CVSS8.5AI score0.02036EPSS
SaveExploits1References8Affected Software1
Debian CVE
Debian CVE
•added 2009/05/07 5:00 p.m.•83 views

CVE-2009-1441

Removed by vendor...

9.3CVSS6.7AI score0.02036EPSS
SaveExploits1
Cvelist
Cvelist
•added 2009/05/07 5:00 p.m.•42 views

CVE-2009-1441

Heap-based buffer overflow in the ParamTraits::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service application crash or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel...

7.8AI score0.02036EPSS
SaveExploits1References8
OpenVAS
OpenVAS
•added 2009/04/24 12:00 a.m.•35 views

Novell NetIdentity Agent Pointer Dereference Remote Code Execution Vulnerability

The host is installed with Novell NetIdentity Agent and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodnovellnetidntycodeexecvuln.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell NetIdentity Agent Pointer Dereference Remote Code Execution Vulnerability...

10CVSS0.7AI score0.65934EPSS
SaveExploits7References4
NVD
NVD
•added 2009/04/21 4:24 p.m.•39 views

CVE-2009-1350

Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer...

10CVSS7.4AI score0.65934EPSS
SaveExploits7References7
CVE
CVE
•added 2009/04/21 4:00 p.m.•141 views

CVE-2009-1350

CVE-2009-1350 affects Novell NetIdentity Client (xtagent.exe). A remote attacker can trigger a dereference of an arbitrary pointer via the XTIERRPCPIPE named pipe by sending crafted RPC messages, leading to remote code execution. Affected product/version: Novell Client NetIdentity Agent prior to ...

10CVSS7.5AI score0.65934EPSS
SaveExploits7References7Affected Software1
Rows per page
Query Builder