Lucene search
+L

182 matches found

OPENSUSE Linux
OPENSUSE Linux
added 2019/08/15 12:0 a.m.104 views

Security update for java-1_8_0-openjdk (important)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2019:1912-1 Rating: important References: 1115375 1141780 1141782 1141783 1141784 1141785 1141786 1141787 1141789 Cross-References: CVE-2019-2745 CVE-2019-2762 CVE-2019-2766 CVE-2019-2769 CVE-2019-2786...

5.8CVSS8.6AI score0.09393EPSS
SaveExploits3References9
Tenable Nessus
Tenable Nessus
added 2018/11/02 12:0 a.m.47 views

F5 Networks BIG-IP : TMM vulnerability (K34514540)

Malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default 'normalize URI' configuration options used in iRules and/or BIG-IP LTM policies...

7.5CVSS7.2AI score0.01585EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/11/02 12:0 a.m.35 views

F5 Networks BIG-IP : TMM vulnerability (K64208870)

Malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default 'normalize URI' configuration options used in iRules and/or BIG-IP LTM policies. CVE-2018-15319 Impact An attacker may be able to disrupt traffic or cause the...

7.8CVSS7.2AI score0.01859EPSS
SaveExploits0References2
OSV
OSV
added 2018/10/31 2:29 p.m.10 views

CVE-2018-15319

On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default "normalize URI" configuration options used in iRules and/or BIG-IP LTM policies...

7.5CVSS5.8AI score0.01859EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2018/02/21 2:26 p.m.4 views

rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()

A flaw was found in a way Rack processed parameters of incoming requests. An attacker could use this flaw to send a crafted request that would cause an application using Rack to crash...

5CVSS6.6AI score0.07991EPSS
SaveExploits0References4
zdt
zdt
added 2017/09/13 12:0 a.m.46 views

Trend Micro Control Manager - ImportFile Directory Traversal RCE Exploit

Exploit for windows platform in category remote exploits require 'msf/core' require 'msf/core/exploit/phpexe' class MetasploitModule 'Trend Micro Control Manager importFile Directory Traversal RCE', 'Description' = %q This module exploits a directory traversal vulnerability found in Trend Micro...

6.7AI score
SaveExploits0
OSV
OSV
added 2017/03/07 9:59 p.m.9 views

CVE-2016-9245

In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "Normalize URI" configuration options used in...

5.9CVSS5.8AI score0.01377EPSS
SaveExploits0References3
Prion
Prion
added 2017/03/07 9:59 p.m.24 views

Information disclosure

In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "Normalize URI" configuration options used in...

4.3CVSS6.8AI score0.01377EPSS
SaveExploits0References3Affected Software10
RedHat Linux
RedHat Linux
added 2016/08/09 5:1 a.m.12 views

chromium-browser: Use-after-free in Blink

The Web Cryptography API aka WebCrypto implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via crafted JavaScript code,...

9.8CVSS7.5AI score0.01662EPSS
SaveExploits0References5
OSV
OSV
added 2016/08/07 12:0 a.m.6 views

UBUNTU-CVE-2016-5142

The Web Cryptography API aka WebCrypto implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via crafted JavaScript code,...

9.8CVSS7.4AI score0.01662EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2015/11/19 4:43 a.m.5 views

rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()

A flaw was found in a way Rack processed parameters of incoming requests. An attacker could use this flaw to send a crafted request that would cause an application using Rack to crash...

5CVSS6.6AI score0.07991EPSS
SaveExploits0References4
CNVD
CNVD
added 2015/06/26 12:0 a.m.5 views

Rack 'normalize_params()' function denial of service vulnerability

Rack is a Ruby Web server interface that unifies APIs for Web servers, Web frameworks, and middleware, and supports calling them using a single method. A security vulnerability in the Rack 'normalizeparams' function allows remote attackers to conduct denial-of-service attacks that can be exploite...

5CVSS6.9AI score0.07991EPSS
SaveExploits0References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.60 views

Webkit Normalize Bug - Android 2.2

No description provided by source. !-- CVE-2010-1759 webkit normalize bug Tested on Moto Droidx2 running 2.2. Droidx2 running 2.3 is vulnerable but exploit fails due to non-executable heap. Still working on a way around that : 2.1 - 2.3 emulator. The changes needed are documented in the code. The...

9.3CVSS8.8AI score0.15733EPSS
SaveExploits6
OpenVAS
OpenVAS
added 2013/08/01 12:0 a.m.21 views

Fedora Update for nodejs-normalize-package-data FEDORA-2013-11780

Check for the Version of nodejs-normalize-package-data OpenVAS Vulnerability Test Fedora Update for nodejs-normalize-package-data FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

3.3CVSS6.7AI score0.00372EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/08/01 12:0 a.m.13 views

Fedora Update for nodejs-normalize-package-data FEDORA-2013-11780

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.8AI score0.00372EPSS
SaveExploits0References2
Fedora
Fedora
added 2013/07/23 1:2 a.m.18 views

[SECURITY] Fedora 18 Update: nodejs-normalize-package-data-0.2.0-1.fc18

normalize-package-data exports a function that normalizes package metadata. This data is typically found in a package.json file, but in principle could come from any source - for example the npm registry. normalize-package-data is used by read-package-json to normalize the data it reads from a...

3.3CVSS0.6AI score0.00372EPSS
SaveExploits0
seebug.org
seebug.org
added 2012/02/14 12:0 a.m.43 views

Webkit normalize bug for android 2.2 (CVE-2010-1759)

No description provided by source. !-- CVE-2010-1759 webkit normalize bug Tested on Moto Droidx2 running 2.2. Droidx2 running 2.3 is vulnerable but exploit fails due to non-executable heap. Still working on a way around that : 2.1 - 2.3 emulator. The changes needed are documented in the code. The...

9.3CVSS8.8AI score0.15733EPSS
SaveExploits6
Packet Storm
Packet Storm
added 2012/02/02 12:0 a.m.49 views

Android 2.2 Webkit Normalize

LOADING... var elem1 = document.getElementById"test1"; var elem2 = document.getElementById"test2"; var elem3 = document.getElementById"test3"; function spray for var i = 0; i 180000; i++ var s = new Stringunescape"\u0052\u0052"; // "\u0056\u0056" FOR EMULATOR var scode = unescape"\u5200\u5200"; /...

9.3CVSS0.4AI score0.15733EPSS
SaveExploits6
zdt
zdt
added 2012/02/01 12:0 a.m.86 views

Webkit normalize bug for android 2.2 (CVE-2010-1759)

Exploit for Android platform in category remote exploits LOADING... var elem1 = document.getElementById"test1"; var elem2 = document.getElementById"test2"; var elem3 = document.getElementById"test3"; function spray for var i = 0; i 180000; i++ var s = new Stringunescape"\u0052\u0052"; //...

7.1AI score0.15733EPSS
SaveExploits6
exploitpack
exploitpack
added 2012/02/01 12:0 a.m.36 views

Webkit Normalize Bug - Android 2.2

Webkit Normalize Bug - Android 2.2 LOADING... var elem1 = document.getElementById"test1"; var elem2 = document.getElementById"test2"; var elem3 = document.getElementById"test3"; function spray for var i = 0; i 180000; i++ var s = new Stringunescape"\u0052\u0052"; // "\u0056\u0056" FOR EMULATOR va...

9.3CVSS0.5AI score0.15733EPSS
SaveExploits6
Rows per page
Query Builder