Lucene search
+L

337 matches found

OSV
OSV
•added 2016/08/06 10:59 a.m.•14 views

UBUNTU-CVE-2014-9884

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate certain pointers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769920 and Qualcomm internal bug CR580740...

7.8CVSS7.2AI score0.00454EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2016/03/04 12:00 a.m.•44 views

Fedora 21 : xen-4.4.3-4.fc21 (2015-015aec3bf2)

ui/vnc: limit clientcuttext msg payload size CVE-2015-5239 1259504, e1000: Avoid infinite loop in processing transmit descriptor CVE-2015-6815 1260224, net: add checks to validate ring buffer pointers CVE-2015-5279 1263278, net: avoid infinite loop when receiving packets CVE-2015-5278 1263281, qe...

7.2CVSS6.7AI score0.0361EPSS
SaveExploits2References11
OSV
OSV
•added 2015/07/20 12:00 a.m.•16 views

UBUNTU-CVE-2015-5589

The pharconverttoother function in ext/phar/pharobject.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other...

9.8CVSS7.2AI score0.06303EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2015/06/03 12:00 a.m.•3 views

PT-2016-6375

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue arises from the mishandling of pointer validation within the KGSL Linux Graphics Module by the is ashmem file function in drivers/staging/android/ashmem.c. This allows attackers to bypass intende...

7.8CVSS5.5AI score0.00303EPSS
SaveExploits0References10
NVD
NVD
•added 2014/10/05 10:55 a.m.•31 views

CVE-2014-7861

The IOHIDSecurePromptClient function in Apple OS X does not properly validate pointer values, which allows remote attackers to execute arbitrary code or cause a denial of service system crash via a crafted web site...

9.3CVSS7.5AI score0.02412EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2014/06/06 12:00 a.m.•11 views

VulnCheck KEV: CVE-2013-0074

Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application...

9.3CVSS7.5AI score0.78885EPSS
SaveIn wildExploits8References8
Zero Day Initiative
Zero Day Initiative
•added 2014/05/02 12:00 a.m.•42 views

(Pwn2Own\Pwn4Fun) Apple OS X Graphics Driver Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Intel graphics...

10CVSS6.5AI score0.02083EPSS
SaveExploits0References1
CVE
CVE
•added 2014/04/23 10:00 a.m.•65 views

CVE-2014-1318

CVE-2014-1318 affects the Intel Graphics Driver in Apple OS X up to 10.9.2. The root cause is a validation flaw for a pointer from userspace, allowing a crafted application to execute arbitrary code (as described in multiple sources). The vulnerability is mapped to an in-the-wild risk as high/rem...

10CVSS7AI score0.02083EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2014/01/10 12:00 a.m.•48 views

Cisco Open Network Environment Platform Unvalidated Pointer Vulnerability (Cisco-SA-20130913-CVE-2013-5496)

A vulnerability in the Open Network Environment Platform ONEP could allow an authenticated, remote attacker to cause the network element to reload. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

6.3CVSS6.7AI score0.01601EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2013/10/09 2:44 p.m.•12 views

CVE-2013-3896

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."...

5.3AI score0.67959EPSS
SaveExploits5References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/10/09 12:00 a.m.•6 views

CVE-2013-3896: Undefined Security Weakness

Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."...

5.5CVSS5.8AI score0.67959EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2013/10/08 12:00 a.m.•4 views

PT-2013-1344

Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions prior to 5.1.20913.0 Description The issue is related to insufficient pointer validation for accessing elements when handling objects in memory. This can be exploited by a remote attacker to gain unauthorized...

5.5CVSS5.9AI score0.67959EPSS
SaveExploits5References20
Cisco
Cisco
•added 2013/09/13 8:06 p.m.•72 views

Cisco Open Network Environment Platform Unvalidated Pointer Vulnerability

A vulnerability in the Open Network Environment Platform ONEP could allow an authenticated, remote attacker to cause the network element to reload. The vulnerability is due to insufficient pointer validation. An attacker could exploit this vulnerability by sending a crafted packet to an ONEP...

6.3CVSS1.8AI score0.01601EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2013/09/13 12:00 a.m.•2 views

PT-2013-5580

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows remote authenticated users to cause a denial of service, resulting in a network-element reload, by sending a crafted packet to an affected network element. This is due to...

6.3CVSS0.01601EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/03/13 12:00 a.m.•4 views

CVE-2013-0074: Undefined Security Weakness

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."...

9.3CVSS6.5AI score0.78885EPSS
SaveExploits8References5
Positive Technologies
Positive Technologies
•added 2013/03/12 12:00 a.m.•12 views

PT-2013-1343

Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions 5 through 5.1.20125.0 Description The issue is related to insufficient validation of pointers during HTML object rendering, allowing remote attackers to execute arbitrary code via a crafted Silverlight applicatio...

9.3CVSS9.2AI score0.78885EPSS
SaveExploits8References19
Tenable Nessus
Tenable Nessus
•added 2013/02/04 12:00 a.m.•36 views

Apple TV < 5.2 Multiple Vulnerabilities

According to its banner, the remote Apple TV 2nd generation or later device is prior to 5.2. It is, therefore, reportedly affected by several vulnerabilities : - Failure to properly validate that the user-mode pointer and length passed to the copyin and copyout functions could allow a user-mode...

7.8CVSS6AI score0.12862EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•52 views

Scientific Linux Security Update : kvm on SL5.x x86_64

It was found that QEMU-KVM on the host did not validate all pointers provided from a guest system's QXL graphics card driver. A privileged guest user could use this flaw to cause the host to dereference an invalid pointer, causing the guest to crash denial of service or, possibly, resulting in th...

6.6CVSS5.4AI score0.00359EPSS
SaveExploits1References9
OpenVAS
OpenVAS
•added 2011/02/09 12:00 a.m.•44 views

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2479628)

This host is missing a critical security update according to Microsoft Bulletin MS11-012. OpenVAS Vulnerability Test $Id: secpodms11-012.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2479628 Authors: Sooraj KS Copyright: Copyright c 2011...

7.2CVSS0.8AI score0.02078EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2011/02/09 12:00 a.m.•81 views

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2479628)

This host is missing a critical security update according to Microsoft Bulletin MS11-012. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.2CVSS5AI score0.02078EPSS
SaveExploits0References8
Rows per page
Query Builder