Lucene search
+L

1161 matches found

osv_cve
osv_cve
•added 2018/08/15 5:29 p.m.•12 views

CVE-2018-8343

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT...

7.8CVSS6AI score0.01291EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/15 12:00 a.m.•9 views

CVE-2018-8343: Buffer Copy without Checking Size of Input

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT...

7.8CVSS7.6AI score0.01291EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/08/15 12:00 a.m.•23 views

Microsoft Windows NDIS Local Elevation of Privilege Vulnerability

Microsoft Windows Network Driver Interface Specification NDIS is a component of Microsoft's Network Driver Interface Specification for use in Windows systems. A local elevation of privilege vulnerability exists in Microsoft Windows NDIS, which stems from ndis.sys not detecting the length of a...

7.8CVSS8AI score0.01291EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/15 12:00 a.m.•9 views

CVE-2018-8342: Buffer Copy without Checking Size of Input

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID...

7.8CVSS7.5AI score0.01291EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2018/08/14 7:00 a.m.•51 views

Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

7.8CVSS2.7AI score0.01291EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/08/14 7:00 a.m.•45 views

Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

7.8CVSS2.7AI score0.01291EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2018/08/14 12:00 a.m.•171 views

KB4343909: Windows 10 Version 1803 and Windows Server Version 1803 August 2018 Security Update (Foreshadow)

The remote Windows host is missing security update 4343909. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...

9.3CVSS7.9AI score0.72621EPSS
SaveExploits18References47
Tenable Nessus
Tenable Nessus
•added 2018/08/14 12:00 a.m.•183 views

KB4343897: Windows 10 Version 1709 And Windows Server Version 1709 August 2018 Security Update (Foreshadow)

The remote Windows host is missing security update 4343897. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...

9.3CVSS7.9AI score0.72621EPSS
SaveExploits18References44
BDU FSTEC
BDU FSTEC
•added 2018/07/27 12:00 a.m.•30 views

Qualcomm WLAN Driver Privilege Escalation

The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is due to an overflow in the buffer in the “stack”. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

9.3CVSS7.5AI score0.00448EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2018/05/17 12:00 a.m.•21 views

Intel Online Connect Access NDIS filter driver denial of service vulnerability

Intel Online Connect Access is a two-factor authentication program from Intel Corporation USA. The program is used to protect identity information, login information, etc. NDIS filter driver is one of the NDIS Network Driver Interface Speification filter driver. A security vulnerability exists in...

5.5CVSS5.4AI score0.00293EPSS
SaveExploits0References1
osv_usn
osv_usn
•added 2018/04/04 7:44 p.m.•27 views

USN-3620-1 linux vulnerabilities

It was discovered that the netlink 802.11 configuration interface in the Linux kernel did not properly validate some attributes passed from userspace. A local attacker with the CAPNETADMIN privilege could use this to cause a denial of service system crash or possibly execute arbitrary code...

10CVSS7.1AI score0.05233EPSS
SaveExploits0References9
CNVD
CNVD
•added 2018/02/26 12:00 a.m.•18 views

Google Android Kernel Network Driver Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Kernel Network driver is one of the kernel network drivers. Kernel Network driver is one of the kernel network driver. An...

7.5CVSS6.1AI score0.00514EPSS
SaveExploits0References1
NVD
NVD
•added 2018/02/12 7:29 p.m.•28 views

CVE-2017-13246

A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469...

7.5CVSS6.9AI score0.00514EPSS
SaveExploits0References2
Prion
Prion
•added 2018/02/12 7:29 p.m.•25 views

Information disclosure

A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469...

5CVSS7.2AI score0.00514EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/02/12 7:00 p.m.•37 views

CVE-2017-13246

A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469...

6.5AI score0.00514EPSS
SaveExploits0References2
CVE
CVE
•added 2018/02/12 7:00 p.m.•66 views

CVE-2017-13246

CVE-2017-13246 affects the Android kernel network driver (Upstream kernel). It is described as an information‑disclosure vulnerability in the Network driver, with the Pixel/Nexus Android bulletin listing it under Kernel components as a Moderate‑severity issue. No concrete patch version or remedia...

7.5CVSS6.4AI score0.00514EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/12 12:00 a.m.•8 views

CVE-2017-13246: Exposure of Sensitive Information to an Unauthorized Actor

A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel. ID: A-36279469...

7.5CVSS7.3AI score0.00514EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/02/12 12:00 a.m.•10 views

PT-2018-5533

Name of the Vulnerable Software and Affected Versions: Android kernel Description: A information disclosure vulnerability exists in the Upstream kernel network driver, which may lead to sensitive data exposure. Recommendations: At the moment, there is no information about a newer version that...

7.5CVSS0.00514EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/02/09 12:00 a.m.•63 views

CVE-2018-1000026

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pa...

7.7CVSS6.7AI score0.04017EPSS
SaveExploits0References14
osv_ubuntu
osv_ubuntu
•added 2018/02/09 12:00 a.m.•10 views

UBUNTU-CVE-2018-1000026

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pa...

7.7CVSS6.4AI score0.04017EPSS
SaveExploits0References15
Rows per page
Query Builder