CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3727 matches found

Prion•added 2018/05/25 3:29 p.m.•26 views

Privilege escalation

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222060 by the tmnciesc.sys driver. An attacker must first obtain the abilit...

7.2CVSS8.1AI score0.00486EPSS

SaveExploits0References2Affected Software4

RedHat Linux•added 2018/05/14 9:12 a.m.•19 views

haproxy: Heap buffer overflow in mux_h2.c:h2_process_demux() can allow attackers to cause a denial of service

An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the maxframesize setting instead of being checked against the bufsize. The maxframesize only applies to outgoing traffic and not to incoming, so if a large enough frame size is advertised in the...

7.5CVSS6.3AI score0.08302EPSS

SaveExploits0References4

Cvelist•added 2018/05/09 7:00 a.m.•109 views

CVE-2018-10184

8AI score0.08302EPSS

SaveExploits0References3

Openbugbounty•added 2018/04/18 1:51 a.m.•25 views

zuerioberland-tourismus.ch XSS vulnerability

Open Bug Bounty ID: OBB-603483 Description| Value ---|--- Affected Website:| zuerioberland-tourismus.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0

CNVD•added 2018/04/02 12:00 a.m.•16 views

Linux kernel 'perf_cpu_time_max_percent_handler' function denial of service vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'perfcputimemaxpercenthandler' function in the kernel/events/core.c file in Linux kernel versions prior to 4.11. A local attacke...

7.8CVSS7.2AI score0.00388EPSS

SaveExploits0References1

Openbugbounty•added 2018/03/24 11:25 a.m.•12 views

max-ingatlan.hu XSS vulnerability

Open Bug Bounty ID: OBB-586957 Description| Value ---|--- Affected Website:| max-ingatlan.hu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score

SaveExploits0

Tenable Nessus•added 2018/03/12 12:00 a.m.•64 views

Fedora 26 : php (2018-e8bc8d2784)

PHP version 7.1.15 01 Mar 2018 Apache2Handler: - Fixed bug php75882 a simple way for segfaults in threadsafe php just with configuration. Anatol Date: - Fixed bug php75857 Timezone gets truncated when formatted. carusogabriel - Fixed bug php75928 Argument 2 for DateTimeZone::listIdentifiers shoul...

9.8CVSS7.5AI score0.87348EPSS

SaveExploits4References2

osv-debian•added 2018/02/27 10:29 p.m.•15 views

DEBIAN-CVE-2016-10714

In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATHMAX characters...

9.8CVSS7.1AI score0.02134EPSS

SaveExploits0References1

Openbugbounty•added 2018/02/27 4:47 p.m.•9 views

max-protect.com XSS vulnerability

Open Bug Bounty ID: OBB-569940 Description| Value ---|--- Affected Website:| max-protect.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score

SaveExploits0

NVD•added 2018/02/15 4:29 p.m.•36 views

CVE-2017-17291

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

5.5CVSS5.3AI score0.00207EPSS

SaveExploits0References1

Prion•added 2018/02/15 4:29 p.m.•38 views

Input validation

2.1CVSS4.4AI score0.00207EPSS

SaveExploits0References1Affected Software26

Cvelist•added 2018/02/15 4:00 p.m.•44 views

CVE-2017-15331

5.3AI score0.01532EPSS

SaveExploits0References1

Cvelist•added 2018/02/15 4:00 p.m.•50 views

CVE-2017-17292

4.5AI score0.00207EPSS

SaveExploits0References1

CVE•added 2018/02/15 4:00 p.m.•83 views

CVE-2017-15332

CVE-2017-15332 corresponds to a memory-leak vulnerability in the H323 protocol across multiple Huawei products (e.g., AR, ARS, SRG, NetEngine, Secospace USG, etc.). The issue arises from insufficient verification/checks of H323 packets, allowing an unauthenticated, remote attacker to send crafted...

5.3CVSS5.3AI score0.01532EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2018/02/15 4:00 p.m.•50 views

CVE-2017-17294

4.4AI score0.00207EPSS

SaveExploits0References1

CVE•added 2018/02/15 4:00 p.m.•76 views

CVE-2017-17291

CVE-2017-17291 is a memory-leak vulnerability in a wide range of Huawei enterprise devices (e.g., AR/AR1200/AR3200/SRG/NetEngine lines, TE/DP300/MAX PRESENCE, etc.). The issue arises when parsing crafted XML files: the software fails to free allocated memory, leading to a memory leak. An authenti...

5.5CVSS5.2AI score0.00207EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2018/02/15 4:00 p.m.•39 views

CVE-2017-17291

5.3AI score0.00207EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2018/02/15 12:00 a.m.•8 views

CVE-2017-15331: Out-of-bounds Read

5.3CVSS6AI score0.01532EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/02/15 12:00 a.m.•9 views

CVE-2017-17294: NULL Pointer Dereference

3.3CVSS5.3AI score0.00207EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/02/15 12:00 a.m.•8 views

CVE-2017-17292: Improper Input Validation

3.3CVSS5.6AI score0.00207EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by