Lucene search
K

7 matches found

Openbugbounty
Openbugbounty
added 2018/01/19 12:16 a.m.10 views

xn--ces30xxjez9pl3t.tw XSS vulnerability

Open Bug Bounty ID: OBB-531324 Description| Value ---|--- Affected Website:| xn--ces30xxjez9pl3t.tw Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

6.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/06/22 12:0 a.m.53 views

openSUSE Security Update : the Linux Kernel (openSUSE-2016-753)

The openSUSE Leap 42.1 kernel was updated to 4.1.26 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-1583: Prevent the usage of mmap when the lower file system does not allow it. This could have lead to local privilege escalation when ecryptfs-utils wa...

10CVSS6.7AI score0.19535EPSS
Exploits30References55
OSV
OSV
added 2016/05/16 5:25 p.m.2 views

USN-2977-1 linux-lts-vivid vulnerability

Philip Pettersson discovered that the Linux kernel's ASN.1 DER decoder did not properly process certificate files with tags of indefinite length. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privilege...

7.8CVSS7AI score0.0015EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2016/05/12 7:58 a.m.2 views

kernel: tags with indefinite length can corrupt pointers in asn1_find_indefinite_length()

A flaw was found in the way the Linux kernel's ASN.1 DER decoder processed certain certificate files with tags of indefinite length. A local, unprivileged user could use a specially crafted X.509 certificate DER file to crash the system or, potentially, escalate their privileges on the system...

7.8CVSS6.8AI score0.0015EPSS
Exploits0References4
NVD
NVD
added 2008/05/06 3:20 p.m.8 views

CVE-2008-2080

Stack-based buffer overflow in the Read32s64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format CDF library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags...

7.5CVSS7.6AI score0.01082EPSS
Exploits3References9
Prion
Prion
added 2008/05/06 3:20 p.m.10 views

Stack overflow

Stack-based buffer overflow in the Read32s64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format CDF library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags...

7.5CVSS8.3AI score0.01082EPSS
Exploits3References9Affected Software1
Cvelist
Cvelist
added 2008/05/06 3:0 p.m.18 views

CVE-2008-2080

Stack-based buffer overflow in the Read32s64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format CDF library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags...

7.5AI score0.01082EPSS
Exploits3References9
Rows per page
Query Builder