Lucene search
+L

1407 matches found

NVD
NVD
added 2016/01/14 10:59 p.m.27 views

CVE-2016-0777

The resendbytes function in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key...

6.5CVSS6.3AI score0.63468EPSS
SaveExploits2References34
OSV
OSV
added 2016/01/14 10:59 p.m.5 views

CVE-2016-0777

The resendbytes function in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key...

6.5CVSS7.8AI score
SaveExploits0References34
UbuntuCve
UbuntuCve
added 2016/01/14 5:0 p.m.75 views

CVE-2016-0777

The resendbytes function in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key...

6.5CVSS7.1AI score0.63468EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2016/01/14 12:0 a.m.58 views

CVE-2016-0777

The resendbytes function in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key...

6.5AI score0.63468EPSS
SaveExploits2References34
Debian CVE
Debian CVE
added 2015/12/15 9:0 p.m.46 views

CVE-2015-7499

Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors...

5CVSS8.3AI score0.06464EPSS
SaveExploits0
NVD
NVD
added 2015/12/09 11:59 a.m.20 views

CVE-2015-6157

Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

4.3CVSS5.7AI score0.16638EPSS
SaveExploits0References3
NVD
NVD
added 2015/12/09 11:59 a.m.41 views

CVE-2015-6135

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."...

5CVSS5.7AI score0.23922EPSS
SaveExploits1References5
Prion
Prion
added 2015/12/09 11:59 a.m.16 views

Information disclosure

Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

4.3CVSS6.2AI score0.16638EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2015/12/09 11:0 a.m.57 views

CVE-2015-6157

CVE-2015-6157 is an information-disclosure vulnerability in Microsoft Internet Explorer 11. A crafted webpage can cause memory disclosure, allowing remote attackers to read sensitive process memory. Public exploitation is noted in related NASL plugin data for MS15-124 (IE updates), and multiple a...

4.3CVSS5.8AI score0.16638EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2015/12/09 11:0 a.m.26 views

CVE-2015-6157

Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

5.7AI score0.16638EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2015/12/06 12:0 a.m.28 views

CVE-2015-3195

The ASN1TFLGCOMBINE implementation in crypto/asn1/tasndec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by...

6.4AI score0.38709EPSS
SaveExploits1References47
Debian CVE
Debian CVE
added 2015/12/06 12:0 a.m.46 views

CVE-2015-3195

The ASN1TFLGCOMBINE implementation in crypto/asn1/tasndec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by...

5.3CVSS6.5AI score0.38709EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2015/11/26 12:0 a.m.36 views

CVE-2015-7499

Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors...

5CVSS7.3AI score0.06464EPSS
SaveExploits0References3
Prion
Prion
added 2015/11/24 8:59 p.m.26 views

Out-of-bounds

The pngconverttorfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read...

5CVSS6.6AI score0.06359EPSS
SaveExploits1References21Affected Software10
Cvelist
Cvelist
added 2015/11/24 8:0 p.m.36 views

CVE-2015-7981

The pngconverttorfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read...

7.8AI score0.06359EPSS
SaveExploits1References21
BDU FSTEC
BDU FSTEC
added 2015/10/30 12:0 a.m.10 views

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for PDF file editing, as well as Adobe Reader and Adobe Reader Document Cloud for PDF file viewing, allow attackers to gain access to protected information stored in the process memory.

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, are related to deficiencies in access control mechanisms. Exploiting these vulnerabilities can allow attackers,...

4.3CVSS5.5AI score0.04449EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.10 views

The vulnerability of the Internet Explorer browser allows a perpetrator to access protected information stored in the process memory.

The vulnerability of Internet Explorer is related to deficiencies in access control mechanisms. Exploiting this vulnerability allows a malicious actor to gain access to protected information in the process memory through a specially crafted web page...

4.3CVSS7.5AI score0.14003EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.10 views

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for PDF file editing, as well as Adobe Reader and Adobe Reader Document Cloud for PDF file viewing, allow attackers to gain access to protected information stored in the process memory.

The vulnerability of the addForegroundSprite function in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control mechanisms. Exploiting this...

4.3CVSS5.5AI score0.03836EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.8 views

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for PDF file editing, as well as Adobe Reader and Adobe Reader Document Cloud for PDF file viewing, allow attackers to gain access to protected information stored in the process memory.

The vulnerability of the loadFlashMovie function in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control mechanisms. Exploiting this vulnerabilit...

4.3CVSS5.5AI score0.03836EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.10 views

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for PDF file editing, as well as Adobe Reader and Adobe Reader Document Cloud for PDF file viewing, allow attackers to gain access to protected information stored in the process memory.

The vulnerability of the setBackground function in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control mechanisms. Exploiting this vulnerability...

5CVSS5.5AI score0.04675EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder