Lucene search
+L

9854 matches found

myhack58
myhack58
•added 2016/12/01 12:00 a.m.•18 views

Simple App to-end security vulnerability of the backup function is enabled and a local denial of service vulnerability-vulnerability warning-the black bar safety net

The last description about the App end to sensitive information leaks, then the App end what security vulnerability is worth the developers food for thought and attention? When an App installed in A mobile phone, the user Joe Smith to login through the App, the login data is stored in the mobile...

6.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2016/11/18 9:47 a.m.•40 views

CVE-2016-9372

In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rtc-one.c by rejecting input with too many I/O objects...

5.9CVSS5.6AI score0.02072EPSS
SaveExploits0References2
OSV
OSV
•added 2016/11/17 5:59 a.m.•13 views

UBUNTU-CVE-2016-9372

In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rtc-one.c by rejecting input with too many I/O objects...

5.9CVSS6.6AI score0.02072EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2016/11/17 5:48 a.m.•47 views

CVE-2016-9372

In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rtc-one.c by rejecting input with too many I/O objects...

5.9CVSS1.8AI score0.02072EPSS
SaveExploits0
seebug.org
seebug.org
•added 2016/11/10 12:00 a.m.•313 views

Win32k elevation of privilege vulnerability MS16-135)(CVE-2016-7255)

If the Windows kernel-mode drivers do not properly handle objects in memory, then there will be multiple elevation of Privilege vulnerabilities. Successful exploitation of this vulnerability an attacker can run in kernel mode arbitrary code. An attacker could then install programs; view, change, ...

7.2CVSS7.9AI score0.80968EPSS
SaveExploits24
CNVD
CNVD
•added 2016/11/09 12:00 a.m.•16 views

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-10978)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the implementation of the Windows Common Log File System CLFS driver that does not properly handle memory objects. Successful exploitation could allow an attacker to run processes with...

9.3CVSS7AI score0.12625EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/11/09 12:00 a.m.•19 views

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-11013)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Windows Common Log File System CLFS driver that does not properly handle memory objects. An attacker could be allowed to exploit the vulnerability t...

9.3CVSS7AI score0.06767EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/11/09 12:00 a.m.•28 views

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-10977)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the implementation of the Windows Common Log File System CLFS driver that does not properly handle memory objects. Successful exploitation could allow an attacker to run processes with...

9.3CVSS7AI score0.12625EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/11/09 12:00 a.m.•26 views

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-10980)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the implementation of the Windows Common Log File System CLFS driver that does not properly handle memory objects. Successful exploitation could allow an attacker to run processes with...

9.3CVSS7AI score0.06767EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2016/11/09 12:00 a.m.•39 views

Microsoft Office PowerPoint Viewer Remote Code Execution Vulnerability (3199168)

This host is missing an important security update according to Microsoft Bulletin MS16-133. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS7.2AI score0.18419EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2016/11/08 8:00 a.m.•57 views

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

7.8CVSS3.5AI score0.80968EPSS
SaveExploits24
Microsoft CVE
Microsoft CVE
•added 2016/11/08 8:00 a.m.•43 views

Microsoft Edge Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory. An attacker who successfully exploited this vulnerability could trick a user into allowing access to the user’s My Documents folder. For an attack to be successful, an attacker must persuade a...

4.3CVSS1.1AI score0.11441EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2016/11/08 8:00 a.m.•36 views

Windows Common Log File System Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have...

9.3CVSS7.7AI score0.12625EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2016/11/08 8:00 a.m.•52 views

Windows Bowser.sys Information Disclosure Vulnerability

An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could potentially disclose contents of System memory to which they should not have access. ...

5.8CVSS2.3AI score0.03457EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2016/11/08 8:00 a.m.•32 views

Windows Common Log File System Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have...

9.3CVSS7.7AI score0.12625EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2016/11/08 12:00 a.m.•28 views

Adobe Flash TextField Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

9.3CVSS1.9AI score0.07101EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/11/08 12:00 a.m.•32 views

Adobe Flash LocalConnection Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

9.3CVSS1.9AI score0.0724EPSS
SaveExploits0References1
Kaspersky
Kaspersky
•added 2016/11/08 12:00 a.m.•159 views

KLA10902 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Out-of-bounds read can be exploited remotely via a specially designed...

9.3CVSS8.2AI score0.28282EPSS
SaveExploits0References42
CNVD
CNVD
•added 2016/10/30 12:00 a.m.•19 views

Alienvault OSSIM and USM PHP Object Injection Vulnerabilities

AlienVault OSSIM is an open source security information management system.USM is a security management platform that provides security monitoring, security event management and reporting, and a threat awareness system. An object injection vulnerability exists in Alienvault OSSIM and USM, which...

9.8CVSS7.4AI score0.06861EPSS
SaveExploits5References1
Positive Technologies
Positive Technologies
•added 2016/10/21 12:00 a.m.•4 views

PT-2017-8641

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux Desktop versions 6 through 7 Red Hat Enterprise Linux HPC Node versions 6 through 7 Red Hat Enterprise Linux Server versions 6 through 7 Red Hat Enterprise Linux Workstation versions 6 through 7 Description The issue...

7.8CVSS0.0629EPSS
SaveExploits0References30
Rows per page
Query Builder