Lucene search
+L

9435 matches found

Veracode
Veracode
added 2016/12/20 2:55 a.m.21 views

Privilege Escalation

UAA is vulnerable to privilege escalation. A malicious user can gain access to the UAA logs and run a specially crafted application that interacts with the SAML provider...

8.1CVSS8AI score0.01144EPSS
SaveExploits0References3Affected Software3
pwnmalw
pwnmalw
added 2016/12/14 12:0 a.m.556 views

Malware exploit: Citadel Server V1.3.5.1

Type: Remote Code Execution Author: Xylitol import urllib import urllib2 Citadel Backconnect Server 1.3.5.1 Remote Code Execution vulnerability Work only on windows box def requesturl, params=None, method='GET': if method == 'POST': urllib2.urlopenurl, urllib.urlencodeparams.read elif method ==...

0.8AI score
SaveExploits0
OSV
OSV
added 2016/12/13 9:59 p.m.50 views

CVE-2016-6664

mysqldsafe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when...

7CVSS6.7AI score0.04313EPSS
SaveExploits18References15
OSV
OSV
added 2016/12/13 9:59 p.m.13 views

ALPINE-CVE-2016-6664

mysqldsafe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when...

7CVSS6.5AI score0.0308EPSS
SaveExploits10References1
Prion
Prion
added 2016/12/13 9:59 p.m.33 views

Design/Logic Flaw

mysqldsafe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when...

6.9CVSS6.2AI score0.04313EPSS
SaveExploits18References15Affected Software4
UbuntuCve
UbuntuCve
added 2016/12/13 9:59 p.m.38 views

CVE-2016-6664

mysqldsafe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when...

7CVSS7AI score0.0308EPSS
SaveExploits10References3
AlpineLinux
AlpineLinux
added 2016/12/13 9:0 p.m.79 views

CVE-2016-6664

mysqldsafe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when...

7CVSS7AI score0.0308EPSS
SaveExploits10
MariaDBUnix
MariaDBUnix
added 2016/12/13 9:0 p.m.34 views

CVE-2016-6664

Disclaimer: This data contains information about vulnerable...

7CVSS6.6AI score0.0308EPSS
SaveExploits10
Debian CVE
Debian CVE
added 2016/12/13 9:0 p.m.41 views

CVE-2016-6664

Removed by vendor...

7CVSS7.7AI score0.0308EPSS
SaveExploits10
ThreatPost
ThreatPost
added 2016/12/13 9:0 a.m.17 views

Facebook Releases Free Certificate Transparency Monitoring Tool

The movement toward Certificate Transparency CT has brought about a healthy improvement, not only in the way organizations monitor and audit TLS certs, but also in cutting down the number of malicious or mistakenly issued certificates. CT, a framework developed by Google, works because Certificat...

6.9AI score
SaveExploits0References6
Citrix
Citrix
added 2016/12/08 12:0 a.m.11 views

XenMobile: Error during enrollment "could not connect to the server"

During the enrollment for IOS devices you receive the error "Could not connect to the server " during the installation of the Profiles. In the XMS Server debug logs we would see: "UserDeviceLimitExceededException"...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2016/12/01 12:0 a.m.8 views

Error: "Your sign on has expired. Please sign on again to continue." When Accessing XenMobile Store

Error message on SecureHub while accessing WorxStore "Your sign on has expired. Please sign on again to continue.". Screenshot below. Note : This is affecting both iOS and Android users. Error Message in SecureHub Logs "Secure Hub","WARNING 3","AuthControllerImpl:getKeyManager is going to return...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2016/11/29 12:0 a.m.8 views

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11693)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control versions prior to 9.1.3. A remote attacker could exploit the vulnerability by reading error logs to obtain sensitive information...

4.3CVSS6.6AI score0.01007EPSS
SaveExploits0References1
OSV
OSV
added 2016/11/25 8:59 p.m.5 views

CVE-2016-2928

IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs...

4.3CVSS5.8AI score0.01007EPSS
SaveExploits0References3
NVD
NVD
added 2016/11/25 8:59 p.m.21 views

CVE-2016-2928

IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs...

4.3CVSS4.2AI score0.01007EPSS
SaveExploits0References3
Prion
Prion
added 2016/11/25 8:59 p.m.18 views

Design/Logic Flaw

IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs...

4CVSS6.1AI score0.01007EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2016/11/25 8:0 p.m.27 views

CVE-2016-2928

IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs...

4.6AI score0.01007EPSS
SaveExploits0References3
NVD
NVD
added 2016/11/25 3:59 a.m.17 views

CVE-2016-5967

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

5.5CVSS5.3AI score0.00315EPSS
SaveExploits0References3
OSV
OSV
added 2016/11/25 3:59 a.m.4 views

CVE-2016-5967

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

5.5CVSS5.8AI score0.00315EPSS
SaveExploits0References3
Prion
Prion
added 2016/11/25 3:59 a.m.12 views

Information disclosure

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

2.1CVSS6.7AI score0.00315EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder