Lucene search
+L

316 matches found

Openbugbounty
Openbugbounty
added 2018/06/02 8:51 p.m.13 views

cdn.printablepaper.net XSS vulnerability

Open Bug Bounty ID: OBB-626155 Description| Value ---|--- Affected Website:| cdn.printablepaper.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Schneier on Security
Schneier on Security
added 2018/05/04 9:18 p.m.39 views

Friday Squid Blogging: US Army Developing 3D-Printable Battlefield Robot Squid

The next major war will be super weird. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

1AI score
SaveExploits0
Veracode
Veracode
added 2018/04/18 7:9 a.m.40 views

Denial Of Service (DoS) Through Stack Buffer Overflow

libarchive.so is vulnerable to denial of service DoS through stack-based buffer overflow attacks. The vulnerability exists in safefprintf of tar/util.c when printing a filename can cause a buffer overflow when formatting a non-printable multi-byte character...

7.5CVSS7.8AI score0.05258EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.52 views

WEBrick Improper Input Validation vulnerability

WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrar...

7.5CVSS7.4AI score0.15936EPSS
SaveExploits3References12Affected Software1
OSV
OSV
added 2017/10/24 6:33 p.m.62 views

GHSA-6MQ2-37J5-W6R6 WEBrick Improper Input Validation vulnerability

WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrar...

7.5CVSS9.1AI score0.15936EPSS
SaveExploits3References13
NVD
NVD
added 2017/09/20 4:29 p.m.23 views

CVE-2015-5179

FreeIPA might display user data improperly via vectors involving non-printable characters...

7.5CVSS7.4AI score0.01065EPSS
SaveExploits1References2
OSV
OSV
added 2017/09/20 4:29 p.m.7 views

UBUNTU-CVE-2015-5179

FreeIPA might display user data improperly via vectors involving non-printable characters...

7.5CVSS7.1AI score0.01065EPSS
SaveExploits1References2
OSV
OSV
added 2017/09/20 4:29 p.m.6 views

DEBIAN-CVE-2015-5179

FreeIPA might display user data improperly via vectors involving non-printable characters...

7.5CVSS7AI score0.01065EPSS
SaveExploits1References1
Prion
Prion
added 2017/09/20 4:29 p.m.20 views

Design/Logic Flaw

FreeIPA might display user data improperly via vectors involving non-printable characters...

5CVSS7AI score0.01065EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2017/09/20 4:0 p.m.26 views

CVE-2015-5179

FreeIPA might display user data improperly via vectors involving non-printable characters...

7.5AI score0.01065EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2017/09/20 4:0 p.m.27 views

CVE-2015-5179

FreeIPA might display user data improperly via vectors involving non-printable characters...

7.5CVSS7.5AI score0.01065EPSS
SaveExploits1
CVE
CVE
added 2017/09/20 4:0 p.m.68 views

CVE-2015-5179

Technical details (affected components, root cause, and patch status) are not publicly provided in the connected documents. Monitor vendor advisories and security trackers for updates.

7.5CVSS7.3AI score0.01065EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2017/03/09 6:41 p.m.6 views

USN-3225-1 libarchive vulnerabilities

It was discovered that libarchive incorrectly handled hardlink entries when extracting archives. A remote attacker could possibly use this issue to overwrite arbitrary files. CVE-2016-5418 Christian Wressnegger, Alwin Maier, and Fabian Yamaguchi discovered that libarchive incorrectly handled...

8.6CVSS7AI score0.06251EPSS
SaveExploits1References8
Ubuntu
Ubuntu
added 2017/03/09 6:41 p.m.91 views

USN-3225-1: libarchive vulnerabilities

It was discovered that libarchive incorrectly handled hardlink entries when extracting archives. A remote attacker could possibly use this issue to overwrite arbitrary files. CVE-2016-5418 Christian Wressnegger, Alwin Maier, and Fabian Yamaguchi discovered that libarchive incorrectly handled...

8.6CVSS7.1AI score0.06251EPSS
SaveExploits1
OSV
OSV
added 2017/02/15 7:59 p.m.32 views

CVE-2016-8687

Stack-based buffer overflow in the safefprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename...

7.5CVSS7AI score
SaveExploits0References9
Prion
Prion
added 2017/02/15 7:59 p.m.30 views

Stack overflow

Stack-based buffer overflow in the safefprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename...

5CVSS7.3AI score0.05258EPSS
SaveExploits0References9Affected Software2
Cvelist
Cvelist
added 2017/02/15 7:0 p.m.30 views

CVE-2016-8687

Stack-based buffer overflow in the safefprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename...

6.8AI score0.05258EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2017/02/15 12:0 a.m.33 views

CVE-2016-8687

Stack-based buffer overflow in the safefprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename...

7.5CVSS7.3AI score0.05258EPSS
SaveExploits0References3
OSV
OSV
added 2017/02/15 12:0 a.m.6 views

UBUNTU-CVE-2016-8687

Stack-based buffer overflow in the safefprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename...

7.5CVSS7.4AI score0.05258EPSS
SaveExploits0References4
OSV
OSV
added 2017/01/23 9:59 p.m.18 views

CVE-2016-5873

Buffer overflow in the HTTP URL parsing functions in peclhttp before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL...

9.8CVSS8.1AI score
SaveExploits0References8
Rows per page
Query Builder