Lucene search
K

1382 matches found

ATTACKERKB
ATTACKERKB
added 2014/07/20 11:12 a.m.1 views

CVE-2014-1996

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call...

7.5CVSS6.1AI score0.00752EPSS
Exploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/07/15 5:45 a.m.1 views

Cybozu Garoon 3 API access restriction bypass vulnerability

Overview Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an access restriction bypass vulnerability CWE-264 when using Garoon APIs. Impact A remote attacker may cause a denial-of-service DoS or execute arbitrary code. Solution Update the Software Update to the latest...

7.5CVSS7.3AI score0.00752EPSS
Exploits0References5
OSV
OSV
added 2014/05/06 10:44 a.m.0 views

UBUNTU-CVE-2014-1736

Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value...

7.5CVSS5.9AI score0.02257EPSS
Exploits0References2
OSV
OSV
added 2014/04/15 2:55 p.m.1 views

DEBIAN-CVE-2014-0167

The Nova EC2 API security group implementation in OpenStack Compute Nova 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for 1 addrules, 2 removerules, 3 destroy, and other unspecified methods in compute/api.py when using non-default policies, which allows...

6CVSS7.3AI score0.00383EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2014/04/15 12:0 a.m.1 views

PT-2014-3512 · Openstack +1 · Openstack Compute +1

Name of the Vulnerable Software and Affected Versions: OpenStack Compute Nova versions 2013.1 through 2013.2.3 OpenStack Compute Nova icehouse before icehouse-rc2 Description: The issue concerns the Nova EC2 API security group implementation, which fails to enforce Role-Based Access Control RBAC...

7.1CVSS6.7AI score0.03132EPSS
Exploits2References30
RedHat Linux
RedHat Linux
added 2013/09/03 8:12 p.m.1 views

foreman: app/controllers/api/v1/hosts_controller.rb API privilege escalation

app/controllers/api/v1/hostscontroller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request...

7.5CVSS5.9AI score0.00703EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.19 views

Scientific Linux Security Update : perl-DBD-Pg on SL5.x, SL6.x i386/x86_64 (20120725)

Perl DBI is a database access Application Programming Interface API for the Perl language. perl-DBD-Pg allows Perl applications to access PostgreSQL database servers. Two format string flaws were found in perl-DBD-Pg. A specially crafted database warning or error message from a server could cause...

5CVSS5.5AI score0.02485EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2012/07/26 12:0 a.m.16 views

RedHat Update for perl-DBD-Pg RHSA-2012:1116-01

Check for the Version of perl-DBD-Pg OpenVAS Vulnerability Test RedHat Update for perl-DBD-Pg RHSA-2012:1116-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

5CVSS6.3AI score0.02485EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2011/05/23 12:0 a.m.29 views

Sybase M-Business Anywhere (AvantGo) SOAP Server Detection

The remote service is a Sybase M-Business Anywhere formerly AvantGo SOAP Server, which provides a web-based programming interface to server administration tasks in M-Business, such as configuration, group, user, and web channel management. C Tenable Network Security, Inc. include"compat.inc"; if...

5.5AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2011/05/20 12:0 a.m.1 views

PT-2011-2779 · Cisco · Ciscoworks Common Services

Name of the Vulnerable Software and Affected Versions: CiscoWorks Common Services versions 3.3 and earlier Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the device parameter in the cwhp/device.center.do API endpoint in t...

4.3CVSS5.3AI score0.14897EPSS
Exploits6References9
Fedora
Fedora
added 2010/11/02 10:18 p.m.18 views

[SECURITY] Fedora 13 Update: perl-libwww-perl-5.837-2.fc13

The libwww-perl collection is a set of Perl modules which provides a simple and consistent application programming interface to the World-Wide Web. The ma in focus of the library is to provide classes and functions that allow you to write WWW clients. The library also contain modules that are of...

6.8CVSS6.4AI score0.01131EPSS
Exploits0
OpenVAS
OpenVAS
added 2009/02/27 12:0 a.m.19 views

CentOS Update for sblim-cmpi-base CESA-2008:0497 centos4 x86_64

Check for the Version of sblim-cmpi-base OpenVAS Vulnerability Test CentOS Update for sblim-cmpi-base CESA-2008:0497 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

4.6CVSS6.4AI score0.00123EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2008/06/09 12:0 a.m.36 views

VMware VIX API Multiple Buffer Overflow Vulnerabilities

VMware VIX, an application programming interface to manipulate virtual machines is installed on the remote host. The installed version of VMware VIX API is affected by multiple buffer overflow vulnerabilities. Successful exploitation of these issues could allow arbitrary code execution on the hos...

7.2CVSS9.2AI score0.00153EPSS
Exploits0References2
Check Point Advisories
Check Point Advisories
added 2008/05/29 12:0 a.m.3 views

Microsoft Windows Speech Components sapi.dll Code Execution (MS08-032; CVE-2007-0675)

The ActiveX Speech Components sapi.dll is part of the Microsoft Speech Application Programming Interface SAPI that allows the use of speech recognition and speech synthesis within Windows applications. A remote code execution vulnerability has been reported in the ActiveX Speech Components...

7.6CVSS7.1AI score0.41573EPSS
Exploits1
securityvulns
securityvulns
added 2005/08/09 12:0 a.m.57 views

Microsoft Security Bulletin MS05-040 Vulnerability in Telephony Service Could Allow Remote Code Execution (893756)

Microsoft Security Bulletin MS05-040 Vulnerability in Telephony Service Could Allow Remote Code Execution 893756 Issued: August 9, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

7.5CVSS1.1AI score0.26822EPSS
Exploits5
CERT
CERT
added 2003/07/31 12:0 a.m.49 views

Microsoft Windows Media Services contains buffer overflow in "nsiislog.dll"

Overview Microsoft Windows Media Services provides streaming audio and video capabilities. A vulnerability in a component of this software could allow a remote attacker to compromise the server running it. Description According to Microsoft Security Bulletin MS03-022:Microsoft Windows Media...

7.5CVSS7AI score0.88214EPSS
Exploits6References5
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.12 views

Security Update for Windows Server 2003 (KB893756)

A security issue has been identified in the Telephony Application Programming Interface TAPI that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this...

2.5AI score
Exploits0
Microsoft KB
Microsoft KB
added 1970/01/01 12:0 a.m.3 views

Security update 1970-01-01

...

5.3AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.13 views

Security Update for Windows XP x64 Edition (KB893756)

A security issue has been identified in the Telephony Application Programming Interface TAPI that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this...

2.3AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.15 views

Security Update for Windows XP (KB893756)

A security issue has been identified in the Telephony Application Programming Interface TAPI that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this...

2.4AI score
Exploits0
Rows per page
Query Builder