Lucene search
+L

23252 matches found

NVD
NVD
•added 2018/01/21 10:29 p.m.•22 views

CVE-2018-5958

In Zillya! Antivirus 3.0.2230.0, the driver file zef.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402424...

7.8CVSS8AI score0.00331EPSS
SaveExploits0References1
Prion
Prion
•added 2018/01/21 10:29 p.m.•26 views

Input validation

In Zillya! Antivirus 3.0.2230.0, the driver file zef.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402414...

6.1CVSS7.9AI score0.00331EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2018/01/20 12:29 a.m.•23 views

Design/Logic Flaw

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users...

2.1CVSS7.5AI score0.00378EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/01/20 12:00 a.m.•23 views

CVE-2017-15112

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users...

7.6AI score0.00378EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/20 12:00 a.m.•6 views

CVE-2017-15112: Exposure of Sensitive Information to an Unauthorized Actor

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users...

7.8CVSS6.5AI score0.00378EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2018/01/16 7:29 p.m.•21 views

CVE-2017-16552

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

7.8CVSS5.9AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
•added 2018/01/16 7:29 p.m.•28 views

CVE-2017-16552

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

7.8CVSS7.6AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
•added 2018/01/16 7:29 p.m.•27 views

CVE-2017-16556

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

5.5CVSS5.5AI score0.00271EPSS
SaveExploits0References1
Prion
Prion
•added 2018/01/16 7:29 p.m.•32 views

Memory corruption

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

2.1CVSS5.5AI score0.00271EPSS
SaveExploits0References1Affected Software5
Prion
Prion
•added 2018/01/16 7:29 p.m.•32 views

Code injection

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

4.4CVSS6.8AI score0.00267EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
•added 2018/01/16 7:00 p.m.•41 views

CVE-2017-16557

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

7.2AI score0.00267EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/01/16 7:00 p.m.•41 views

CVE-2017-16556

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

6.1AI score0.00271EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/01/16 12:00 a.m.•3 views

PT-2018-6295

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to write to arbitrary memory locations using user-controlled input. Recommendations: For versions prior to 15.1.0.53, update to version 15.1.0.53 or...

5.5CVSS0.00271EPSS
SaveExploits0References3
Prion
Prion
•added 2018/01/14 4:29 a.m.•26 views

Code injection

The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /var/log/magicspam/mslog...

2.1CVSS3.9AI score0.00396EPSS
SaveExploits3References2Affected Software1
osv_cve
osv_cve
•added 2018/01/14 4:29 a.m.•19 views

CVE-2018-5693

The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /var/log/magicspam/mslog...

3.3CVSS5.8AI score0.00396EPSS
SaveExploits3References2
CVE
CVE
•added 2018/01/14 4:00 a.m.•79 views

CVE-2018-5693

The CVE affects LinuxMagic MagicSpam extension for Plesk, versions before 2.0.14-1. Local attackers can disclose mailbox names by reading /var/log/magicspam/mslog, enabling information disclosure on the host. Remediation: upgrade to 2.0.14-1 or newer (as indicated by the vulnerability description).

3.3CVSS5.4AI score0.00396EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
•added 2018/01/14 4:00 a.m.•35 views

CVE-2018-5693

The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /var/log/magicspam/mslog...

3.8AI score0.00396EPSS
SaveExploits3References2
NVD
NVD
•added 2018/01/12 5:29 p.m.•31 views

CVE-2016-0327

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows local users to gain administrator privileges via unspecified vectors. IBM X-Force ID: 111643...

7.8CVSS7AI score0.00313EPSS
SaveExploits0References2
Prion
Prion
•added 2018/01/10 6:29 p.m.•26 views

Code injection

chef/travis-cookbooks/cienvironment/perlbrew/recipes/default.rb in the ciborg gem 3.0.0 for Ruby allows local users to write to arbitrary files and gain privileges via a symlink attack on /tmp/perlbrew-installer...

2.1CVSS7.1AI score0.00379EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2018/01/10 6:29 p.m.•18 views

Command injection

The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...

2.1CVSS6.4AI score0.00522EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder