Lucene search
+L

12103 matches found

Zero Day Initiative
Zero Day Initiative
added 2015/12/08 12:00 a.m.38 views

Schneider Electric ProClima F1BookView ActiveX Control DefinedName Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Schneider Electric ProClima. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS6.6AI score0.05734EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/12/08 12:00 a.m.20 views

Schneider Electric ProClima F1BookView ActiveX Control ODBCPrepareEx Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Schneider Electric ProClima. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS6.6AI score0.05734EPSS
SaveExploits0References1
myhack58
myhack58
added 2015/12/07 12:00 a.m.28 views

Adobe Flash AS2 MovieClip setMask after the release of the heavy interest with a remote code execution vulnerability(CVE-2 0 1 5-7 6 6 0)-vulnerability warning-the black bar safety net

CVECAN ID: CVE-2 0 1 5-7 6 6 0 FlashPlayer is a high-performance, lightweight and extremely expressive client runtime player. Adobe Flash setMask method in the presence of security vulnerabilities. By manipulating the transfer to the setMask method's parameter, the attacker can force the use of h...

0.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2015/11/26 1:41 p.m.8 views

Mozilla: CORS preflight is bypassed when non-standard Content-Type headers are received (MFSA 2015-127)

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross-origin request algorithm for the POST method in situations involving an unspecified Content-Type header manipulation, which allows remote attackers to bypass the Same Origin Policy by leveraging the lack...

7.5CVSS7.5AI score0.02841EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2015/11/26 12:00 a.m.11 views

The vulnerabilities of Adobe Integrated Runtime and Flash Player software allow a perpetrator to execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using the getBounds method...

9.3CVSS6AI score0.06171EPSS
SaveExploits0References3Affected Software2
RedHat Linux
RedHat Linux
added 2015/11/25 9:15 p.m.10 views

OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860...

10CVSS7.3AI score0.06284EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/11/25 9:15 p.m.9 views

OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883...

10CVSS7.3AI score0.06284EPSS
SaveExploits0References5
OSV
OSV
added 2015/11/25 5:02 p.m.9 views

USN-2818-1 openjdk-7 vulnerability

It was discovered that rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed. Am attacker could use this to expose sensitive information or possibly execute arbitrary code...

5.8CVSS6.5AI score0.0304EPSS
SaveExploits0References2
CNVD
CNVD
added 2015/11/24 12:00 a.m.10 views

Tibbo Technology AggreGate Elevation of Privilege Vulnerability

Tibbo Technology AggreGate is Tibbo Technology's integrated IoT platform for controlling, configuring, monitoring and servicing different electronic devices through advanced networking technologies. A security vulnerability exists in the agserverservice.exe file in the AggreGate Server Service of...

7.2CVSS7.3AI score0.00402EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2015/11/23 12:56 p.m.11 views

OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883...

10CVSS7.3AI score0.06284EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/11/23 12:56 p.m.13 views

OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI...

5CVSS7.3AI score0.03955EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/11/23 12:56 p.m.10 views

OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)

Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries...

5.8CVSS7.2AI score0.0304EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/11/23 12:56 p.m.8 views

OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883...

10CVSS7.3AI score0.06284EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/11/23 12:40 p.m.10 views

OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883...

10CVSS7.3AI score0.06284EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/11/23 12:40 p.m.10 views

OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)

Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries...

5.8CVSS7.2AI score0.0304EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/11/23 12:40 p.m.11 views

OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI...

5CVSS7.3AI score0.03955EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/11/23 12:39 p.m.10 views

OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860...

10CVSS7.3AI score0.06284EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/11/23 12:39 p.m.10 views

OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883...

10CVSS7.3AI score0.06284EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2015/11/23 12:39 p.m.11 views

OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI...

5CVSS7.3AI score0.03955EPSS
SaveExploits0References5
OSV
OSV
added 2015/11/22 12:00 a.m.14 views

DSA-3401-1 openjdk-7 - security update

Bulletin has no description...

5.8CVSS5.6AI score0.0304EPSS
SaveExploits0
Rows per page
Query Builder