Lucene search
+L

2378 matches found

OSV
OSV
added 2019/10/03 4:15 p.m.6 views

DEBIAN-CVE-2018-16451

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN...

7.5CVSS6.4AI score0.04134EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2019/10/03 3:57 p.m.3 views

CVE-2018-16451

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN...

7AI score0.04134EPSS
SaveExploits0References16
Cvelist
Cvelist
added 2019/10/03 3:57 p.m.45 views

CVE-2018-16451

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN...

8.7AI score0.04134EPSS
SaveExploits0References16
CVE
CVE
added 2019/10/03 3:57 p.m.306 views

CVE-2018-16451

CVE-2018-16451 is a buffer over-read in tcpdump's SMB parser (print-smb.c:print_trans) for SMB slots; Debian/AlmaLinux advisories show it alongside other tcpdump issues fixed by upgrading to tcpdump 4.9.3 (and libpcap 1.9.1). The available connected documents confirm the vulnerability and the fix...

9.8CVSS8.7AI score0.04134EPSS
SaveExploits0References16Affected Software1
Debian CVE
Debian CVE
added 2019/10/03 3:57 p.m.35 views

CVE-2018-16451

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN...

9.8CVSS6.3AI score0.04134EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2019/09/30 12:00 a.m.39 views

CVE-2018-16451

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN...

9.8CVSS6.6AI score0.04134EPSS
SaveExploits0References4
OSV
OSV
added 2019/09/30 12:00 a.m.9 views

UBUNTU-CVE-2018-16451

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN...

9.8CVSS6.5AI score0.04134EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2019/09/03 12:00 a.m.10 views

PT-2020-5155

Name of the Vulnerable Software and Affected Versions Ansible affected versions not specified Description The issue is related to the pipe lookup plugin of Ansible, where arbitrary commands can be run when the plugin uses subprocess.Popen with shell=True by overwriting Ansible facts. The variable...

8.5CVSS8AI score0.00448EPSS
SaveExploits0References181
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:00 a.m.32 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : sssd Vulnerability (NS-SA-2019-0067)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has sssd packages installed that are affected by a vulnerability: - The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD utilizes too broad of a set of permissions. Any user who can send a...

7.5CVSS6.4AI score0.01418EPSS
SaveExploits0References2
NVD
NVD
added 2019/08/09 7:15 p.m.22 views

CVE-2019-3742

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevat...

7.8CVSS7.8AI score0.00386EPSS
SaveExploits0References1
OSV
OSV
added 2019/08/09 7:15 p.m.8 views

CVE-2019-3742

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevat...

7.8CVSS7.2AI score0.00386EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/09 7:15 p.m.22 views

Privilege escalation

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevat...

7.2CVSS7.7AI score0.00386EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/09 7:12 p.m.24 views

CVE-2019-3742

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a named pipe that performs binary deserialization via a process hollowing technique to inject malicous code to run an executable with elevat...

7.8CVSS7.8AI score0.00386EPSS
SaveExploits0References1
CVE
CVE
added 2019/08/09 7:12 p.m.121 views

CVE-2019-3742

Dell/Alienware Digital Delivery (and Dell Digital Delivery) versions prior to 3.5.2013 are affected by a local privilege-escalation vulnerability. A non-privileged attacker could abuse a named pipe that deserializes binaries via a process hollowing technique to execute code with elevated privileg...

7.8CVSS7.7AI score0.00386EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2019/08/09 12:00 a.m.8 views

PT-2019-16685 · Dell · Dell/Alienware Digital Delivery

Name of the Vulnerable Software and Affected Versions: Dell/Alienware Digital Delivery versions prior to 3.5.2013 Description: The issue allows a local non-privileged malicious user to exploit a named pipe that performs binary deserialization via a process hollowing technique. This technique...

7.8CVSS7.8AI score0.00386EPSS
SaveExploits0References2
OSV
OSV
added 2019/05/30 5:29 p.m.8 views

CVE-2018-9191

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates...

7.8CVSS5.9AI score0.00335EPSS
SaveExploits0References1
Prion
Prion
added 2019/05/30 5:29 p.m.20 views

Code injection

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates...

4.6CVSS8AI score0.00335EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2019/05/30 5:29 p.m.20 views

CVE-2018-9191

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates...

7.8CVSS8AI score0.00335EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2019/05/30 4:27 p.m.18 views

CVE-2018-9191

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates...

7.9AI score0.00335EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/05/30 4:27 p.m.25 views

CVE-2018-9191

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates...

8AI score0.00335EPSS
SaveExploits0References1
Rows per page
Query Builder