Lucene search
+L

8391 matches found

Cvelist
Cvelist
•added 2019/11/07 2:37 p.m.•49 views

CVE-2019-6337

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...

6.2AI score0.00416EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/07 12:00 a.m.•8 views

CVE-2019-6337: Undefined Security Weakness

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device...

5.2CVSS5.6AI score0.00416EPSS
SaveExploits0References1
OSV
OSV
•added 2019/11/05 3:32 p.m.•14 views

OPENSUSE-SU-2019:2442-1 Security update for samba

This update for provides the following fixes: Following security issues were fixed: - CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync bsc1154598. - CVE-2019-10218: Client code could have returned filenames containing path separators bsc1144902. ...

6.5CVSS6.8AI score0.03377EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2019/11/05 12:00 a.m.•9 views

PT-2019-6412 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript version 9.50 Description: A divide by zero issue in the eps print page function of the gdevepsn.c component allows remote attackers to cause a denial of service via the opening of a crafted PDF file. This issue can be exploited by...

7.8CVSS6AI score0.00811EPSS
SaveExploits2References43
Metasploit
Metasploit
•added 2019/11/04 12:00 a.m.•168 views

Microsoft Spooler Local Privilege Elevation Vulnerability

This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there is no way to remove the dll once it is loaded by the service. Essentially, on default settings, this module adds...

7.8CVSS7.7AI score0.14067EPSS
SaveExploits10
Metasploit
Metasploit
•added 2019/11/04 12:00 a.m.•210 views

Microsoft Spooler Local Privilege Elevation Vulnerability

This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there is no way to remove the dll once it is loaded by the service. Essentially, on default settings, this module adds...

7.8CVSS7.5AI score0.16373EPSS
SaveExploits10
Prion
Prion
•added 2019/10/30 9:15 p.m.•26 views

Design/Logic Flaw

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page...

6.8CVSS8.6AI score0.01594EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/30 12:00 a.m.•7 views

CVE-2019-17323: XML Injection (aka Blind XPath Injection)

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page...

8.8CVSS7.9AI score0.01594EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/10/30 12:00 a.m.•4 views

PT-2019-15086

Name of the Vulnerable Software and Affected Versions ClipSoft REXPERT versions 1.0.0.527 and earlier Description The issue allows for arbitrary file creation and execution through the report print function of the rexpert viewer by using a modified XML document. User interaction is required, wher...

8.8CVSS0.01594EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2019/10/29 9:30 a.m.•12 views

chromium-browser: User gesture needed for printing

Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file...

4.3CVSS7.4AI score0.00559EPSS
SaveExploits0References5
Penetration Testing Lab
Penetration Testing Lab
•added 2019/10/28 9:28 a.m.•94 views

Persistence – Port Monitors

The print spooler service is responsible for managing printing jobs in Windows operating systems. Interaction with the service is performed through the Print Spooler API which contains a function AddMonitor that can be used to install local port monitors and connects the configuration, data and...

3.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2019/10/21 12:00 a.m.•80 views

openSUSE: Security Advisory for tcpdump (openSUSE-SU-2019:2344-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7AI score0.06816EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
•added 2019/10/20 12:00 a.m.•171 views

Security update for tcpdump (important)

openSUSE Security Update: Security update for tcpdump Announcement ID: openSUSE-SU-2019:2344-1 Rating: important References: 1068716 1153098 1153332 Cross-References: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465...

9.8CVSS7.7AI score0.06816EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/10/16 6:22 p.m.•38 views

CVE-2019-13679

Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file...

4.3CVSS4.5AI score0.00559EPSS
SaveExploits0References4
CNVD
CNVD
•added 2019/10/15 12:00 a.m.•20 views

Bento4 'AP4_PrintInspector::AddField' function buffer overflow vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4PrintInspector::AddField' function in the Core/Ap4Atom.cpp file in Bento4 version 1.5.1.0. The vulnerability stems from a networked system or product performing operations in...

7.8CVSS7.3AI score0.00535EPSS
SaveExploits1References1
OSV
OSV
•added 2019/10/12 8:15 p.m.•19 views

UBUNTU-CVE-2019-17530

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4PrintInspector::AddField in Core/Ap4Atom.cpp when called from AP4CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp, when called from AP4Atom::Inspect in Core/Ap4Atom.cpp...

7.8CVSS7.3AI score0.00535EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2019/10/10 6:21 p.m.•32 views

CVE-2018-16230

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpattrprint MPREACHNLRI...

7.5CVSS3.4AI score0.03891EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2019/10/10 6:21 p.m.•32 views

CVE-2018-14467

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP...

7.5CVSS3.4AI score0.03985EPSS
SaveExploits0References3
CNVD
CNVD
•added 2019/10/09 12:00 a.m.•14 views

Tcpdump HNCP parser buffer overflow vulnerability

tcpdump is a message analysis tool. Tcpdump HNCP parser print-hncp.c:printprefix contains a security vulnerability that can be exploited by remote attackers to submit a special request that can crash an application...

7.5CVSS6.1AI score0.03739EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/10/07 2:39 a.m.•33 views

CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

9.8CVSS3.5AI score0.02389EPSS
SaveExploits0References1
Rows per page
Query Builder