Lucene search
+L

171 matches found

CNVD
CNVD
added 2017/08/17 12:00 a.m.8 views

Joyent Node.js Express web framework cross-site scripting vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. Express web framework is one of the lightweight Web framework. A cross-site scripting vulnerability exists in Joyent Node.js in the Express web framework versions...

6.1CVSS5.9AI score0.01135EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/07/07 12:00 a.m.40 views

Joyent Smart Data Center Docker API Zone Escape Privilege Escalation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

9CVSS5.1AI score0.05423EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/02/06 12:00 a.m.7 views

Joyent SmartOS Denial of Service Vulnerability

SmartOS is a unix-like operating system. A security vulnerability exists in the SmartOS Hyprlofs file system, which allows an attacker to exploit the vulnerability to conduct a denial-of-service attack on the system by triggering a buffer overflow via an ioctl system call that invokes the...

6.2CVSS7.3AI score0.00516EPSS
SaveExploits2References1
Prion
Prion
added 2017/01/31 9:59 p.m.18 views

Design/Logic Flaw

An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploited this will resul...

4.9CVSS7.3AI score0.00516EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2017/01/31 9:59 p.m.9 views

CVE-2016-9039

An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploited this will resul...

5.5CVSS6AI score0.00516EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2017/01/31 9:00 p.m.35 views

CVE-2016-9039

An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploited this will resul...

6.2CVSS6.1AI score0.00516EPSS
SaveExploits2References2
CVE
CVE
added 2017/01/31 9:00 p.m.77 views

CVE-2016-9039

CVE-2016-9039 affects Joyent SmartOS Hyprlofs fs. The vulnerability exists in the IOCTL HYPRLOFS_ADD_ENTRIES path where buffers are allocated (kmem_alloc) and may not be freed on error, enabling memory exhaustion through repeated exploitation and resulting in a denial of service on affected Smart...

6.2CVSS5.6AI score0.00516EPSS
SaveExploits2References2Affected Software1
Talos
Talos
added 2016/12/16 12:00 a.m.41 views

Joyent SmartOS Hyprlofs FS IOCTL Add Entries Native File System Denial of Service Vulnerability

Summary An exploitable denial of service exists in the the Joylent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploit...

6.2CVSS6AI score0.00516EPSS
SaveExploits2
CNVD
CNVD
added 2016/12/16 12:00 a.m.8 views

Joyent SmartOS Local Integer Overflow Vulnerability

Joyent SmartOS is a set of open source operating system from Joyent, USA. A local integer overflow vulnerability exists in Joyent SmartOS. An attacker can exploit the vulnerability to execute arbitrary code in the context of a user running an affected application. A failed exploit attempt could...

7.8CVSS7.5AI score0.00488EPSS
SaveExploits3References1
CNVD
CNVD
added 2016/12/16 12:00 a.m.30 views

Joyent SmartOS Local Stack Buffer Overflow Vulnerability

Joyent SmartOS is a set of open source operating system from Joyent, Inc. in the United States. A buffer overflow vulnerability exists in the Hyprlofs file system in Joyent SmartOS version 20161110T013148Z. An attacker can exploit the vulnerability to gain elevated privileges with the help of...

7CVSS7.4AI score0.00528EPSS
SaveExploits3References1
CNVD
CNVD
added 2016/12/16 12:00 a.m.10 views

Joyent SmartOS Local Stack Buffer Overflow Vulnerability (CNVD-2016-12717)

Joyent SmartOS is a set of open source operating system from Joyent, Inc. in the United States. A buffer overflow vulnerability exists in the Hyprlofs file system in Joyent SmartOS version 20161110T013148Z. An attacker can exploit the vulnerability to gain elevated privileges with the help of...

7CVSS7.4AI score0.00528EPSS
SaveExploits3References1
CNVD
CNVD
added 2016/12/16 12:00 a.m.7 views

Joyent SmartOS Hyprlofs File Local Stack Buffer Overflow Vulnerability

Joyent SmartOS is a set of open source operating system from Joyent, USA. A local stack buffer overflow vulnerability exists in the Hyprlofs file system in Joyent SmartOS version 20161110T013148Z. The vulnerability allows an attacker to execute arbitrary code using elevated privileges. A failed...

7CVSS7.8AI score0.00544EPSS
SaveExploits3References1
CNVD
CNVD
added 2016/12/16 12:00 a.m.32 views

Joyent SmartOS Local Stack Buffer Overflow Vulnerability

Joyent SmartOS is a set of open source operating system from Joyent, Inc. in the United States. A local stack buffer overflow vulnerability exists in the Hyprlofs file system in Joyent SmartOS version 20161110T013148Z. An attacker can exploit the vulnerability to execute arbitrary code in the...

7CVSS7.7AI score0.00528EPSS
SaveExploits3References1
OSV
OSV
added 2016/12/14 5:59 p.m.11 views

CVE-2016-9035

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in th...

7CVSS6.1AI score0.00544EPSS
SaveExploits4References2
NVD
NVD
added 2016/12/14 5:59 p.m.37 views

CVE-2016-9035

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in th...

7CVSS7.2AI score0.00544EPSS
SaveExploits3References2
OSV
OSV
added 2016/12/14 5:59 p.m.10 views

CVE-2016-9034

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with 32-bit file systems. An attacker can craft an input that can cause a buffer overflow in th...

7CVSS6.1AI score0.00528EPSS
SaveExploits3References2
NVD
NVD
added 2016/12/14 5:59 p.m.28 views

CVE-2016-9034

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with 32-bit file systems. An attacker can craft an input that can cause a buffer overflow in th...

7CVSS7.2AI score0.00528EPSS
SaveExploits3References2
OSV
OSV
added 2016/12/14 5:59 p.m.6 views

CVE-2016-9033

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in th...

7CVSS6.1AI score0.00528EPSS
SaveExploits3References2
NVD
NVD
added 2016/12/14 5:59 p.m.15 views

CVE-2016-9033

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in th...

7CVSS7.2AI score0.00528EPSS
SaveExploits3References2
OSV
OSV
added 2016/12/14 5:59 p.m.5 views

CVE-2016-9032

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer overflow in th...

7CVSS6.1AI score0.00528EPSS
SaveExploits3References2
Rows per page
Query Builder