Lucene search
K

10274 matches found

BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.3 views

The vulnerability of Google Chrome’s browser allows a violator to bypass mechanisms designed to protect the integrity of subresources.

The vulnerability of the PendingScript::notifyFinished function in Google Chrome’s WebKit/Source/core/dom/PendingScript.cpp is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass Subresource Integrity SRI protection mechanisms by...

7.5CVSS7.7AI score0.01448EPSS
Exploits0References4Affected Software1
hackapp
hackapp
added 2016/03/10 6:52 p.m.10 views

he.net - Network Tools - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application he.net - Network Tools published at the 'play' market has multiple vulnerabilities...

0.2AI score
Exploits0References1Affected Software1
CNVD
CNVD
added 2016/03/10 12:0 a.m.1 views

Microsoft Windows Library Load Input Validation Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows Vista SP2 and Server 2008 SP2, which stems from a program's failure to properly validate input before loading certain libraries. A remot...

8.4CVSS8.5AI score0.6875EPSS
Exploits3References1
NVD
NVD
added 2016/03/09 11:59 a.m.22 views

CVE-2016-0100

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...

8.4CVSS8.4AI score0.6875EPSS
Exploits3References3
Prion
Prion
added 2016/03/09 11:59 a.m.24 views

Remote code execution

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...

7.2CVSS7.5AI score0.6875EPSS
Exploits3References3
CVE
CVE
added 2016/03/09 11:0 a.m.56 views

CVE-2016-0100

CVE-2016-0100 is a local-privilege-escalation vulnerability in Microsoft Windows (Vista SP2 and Server 2008 SP2) caused by mishandling library loading. A crafted application could leverage improper input validation during library loading to gain elevated privileges. The issue is fixed by MS16-025...

8.4CVSS8.2AI score0.6875EPSS
Exploits3References3Affected Software2
Cvelist
Cvelist
added 2016/03/09 11:0 a.m.26 views

CVE-2016-0100

Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."...

8.4AI score0.6875EPSS
Exploits3References3
OpenVAS
OpenVAS
added 2016/03/09 12:0 a.m.46 views

Microsoft Windows Library Loading Remote Code Execution Vulnerability (3140709)

This host is missing an important security update according to Microsoft Bulletin MS16-025. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

8.4CVSS7.7AI score0.6875EPSS
Exploits3References2
Kitploit
Kitploit
added 2016/03/08 9:53 p.m.11 views

Lobotomy - Android Reverse Engineering Framework & Toolkit

Lobotomy is an Android security toolkit that will automate different Android assessments and reverse engineering tasks. The goal of the Lobotomy toolkit is to provide a console environment, which would allow a user to load their target Android APK once, then have all the necessary tools without...

7.2AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2016/03/08 12:0 a.m.56 views

MS16-025: Security Update for Windows Library Loading to Address Remote Code Execution (3140709)

The remote Windows host is affected by a remote code execution vulnerability due to improper validation of input before loading certain libraries. An authenticated, remote attacker can exploit this, via a specially crafted application, to execute arbitrary code. C Tenable Network Security, Inc...

8.4CVSS8.5AI score0.6875EPSS
Exploits3References2
Check Point Advisories
Check Point Advisories
added 2016/03/08 12:0 a.m.2 views

Microsoft Windows PDF Library Remote Code Execution (MS16-028: CVE-2016-0118)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way Windows improperly validates input before loading libraries. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted PDF file...

9.3CVSS7.9AI score0.47205EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2016/03/07 3:22 a.m.5 views

chromium-browser: SRI Validation Bypass

The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity...

9.8CVSS7.4AI score0.01448EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2016/03/03 12:0 a.m.34 views

Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities (Mac OS X)

The version of Wireshark installed on the remote Mac OS X host is 2.0.x prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities in the following components, which can result in a memory disclosure, a denial of service, or the execution of arbitrary code : - 3GPP TS 32.423 Trace fil...

7.8CVSS7.2AI score0.03685EPSS
Exploits1References13
Tenable Nessus
Tenable Nessus
added 2016/03/03 12:0 a.m.49 views

Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is 2.0.x prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities in the following components, which can result in a memory disclosure, a denial of service, or the execution of arbitrary code : - 3GPP TS 32.423 Trace file...

7.8CVSS7.2AI score0.03685EPSS
Exploits2References20
BDU FSTEC
BDU FSTEC
added 2016/03/02 12:0 a.m.2 views

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to errors during the loading of a library. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

7.2CVSS7.2AI score0.00763EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2016/03/02 12:0 a.m.2 views

The vulnerability of the Windows operating system and the Internet Explorer browser allows attackers to increase their privileges.

The vulnerability of the Windows operating system and the Internet Explorer browser is related to errors in library loading. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

7.2CVSS7.2AI score0.58284EPSS
Exploits3References3Affected Software1
hackapp
hackapp
added 2016/02/25 6:14 p.m.10 views

Banelco MÓVIL - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Banelco MÓVIL published at the 'play' market has multiple vulnerabilities...

0.3AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/02/21 10:15 a.m.10 views

infinitiq - Dynamic Code Loading, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application infinitiq published at the 'play' market has multiple vulnerabilities...

0.9AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/02/18 10:11 a.m.12 views

Viking App Poland (Official) - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Viking App Poland Official published at the 'play' market has multiple vulnerabilities...

0.8AI score
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/02/18 10:9 a.m.9 views

Viking App (Official) - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Viking App Official published at the 'play' market has multiple vulnerabilities...

0.8AI score
Exploits0References1Affected Software1
Rows per page
Query Builder