Lucene search
K

1320 matches found

CNVD
CNVD
added 2015/01/13 12:0 a.m.2 views

Multiple Remote Code Execution Vulnerabilities in Privoxy

Privoxy is a proxy server with filtering for HTTP and HTTPS protocols, often used in combination with Tor. Privoxy suffers from multiple remote code execution vulnerabilities that can be exploited by an attacker to execute arbitrary code in the context of a user running an affected application. o...

7.5CVSS8.6AI score0.02412EPSS
Exploits0References1
Fedora
Fedora
added 2014/12/06 10:47 a.m.29 views

[SECURITY] Fedora 21 Update: wget-1.16-3.fc21

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

9.3CVSS1AI score0.39883EPSS
Exploits4
Fedora
Fedora
added 2014/11/22 12:34 p.m.30 views

[SECURITY] Fedora 20 Update: wget-1.16-3.fc20

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

9.3CVSS1AI score0.39883EPSS
Exploits4
NVD
NVD
added 2014/10/19 1:55 a.m.12 views

CVE-2014-2358

Multiple cross-site request forgery CSRF vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create administrative users, 2 remove...

6.8CVSS7.3AI score0.00574EPSS
Exploits0References2
Prion
Prion
added 2014/10/19 1:55 a.m.17 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create administrative users, 2 remove...

6.8CVSS7.8AI score0.00574EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2014/10/19 1:0 a.m.18 views

CVE-2014-2358 Fox-IT DataDiode Appliance CSRF

Multiple cross-site request forgery CSRF vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create administrative users, 2 remove...

4.3CVSS7.3AI score0.00574EPSS
Exploits0References1
Prion
Prion
added 2014/10/18 1:55 a.m.21 views

Information disclosure

The MCX Desktop Config Profiles implementation in Apple OS X before 10.10 retains web-proxy settings from uninstalled mobile-configuration profiles, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging access to an unintended proxy server...

2.6CVSS5.9AI score0.02103EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2014/10/18 1:0 a.m.48 views

CVE-2014-4440

CVE-2014-4440 affects Apple OS X (pre-10.10) MCX Desktop Config Profiles. The vulnerability arises because web-proxy settings from mobile configuration profiles remain after uninstallation, allowing a remote attacker with access to an unintended proxy server to obtain sensitive information. The i...

2.6CVSS7.8AI score0.02103EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2014/10/18 1:0 a.m.18 views

CVE-2014-4440

The MCX Desktop Config Profiles implementation in Apple OS X before 10.10 retains web-proxy settings from uninstalled mobile-configuration profiles, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging access to an unintended proxy server...

8.2AI score0.02103EPSS
Exploits0References5
NVD
NVD
added 2014/10/15 3:55 p.m.16 views

CVE-2014-2473

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv and SGD SSL Daemon ttassl...

5CVSS5.7AI score0.01267EPSS
Exploits0References2
NVD
NVD
added 2014/10/15 3:55 p.m.22 views

CVE-2014-2472

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv, a different vulnerability than CVE-2014-2474, CVE-2014-2476, and CVE-2014-6459...

5CVSS5.6AI score0.01317EPSS
Exploits0References2
NVD
NVD
added 2014/10/15 3:55 p.m.21 views

CVE-2014-2475

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv...

5CVSS5.7AI score0.01802EPSS
Exploits0References2
NVD
NVD
added 2014/10/15 3:55 p.m.19 views

CVE-2014-2474

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv, a different vulnerability than CVE-2014-2472, CVE-2014-2476, and CVE-2014-6459...

5CVSS5.6AI score0.01317EPSS
Exploits0References2
NVD
NVD
added 2014/10/15 3:55 p.m.20 views

CVE-2014-2476

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv, a different vulnerability than CVE-2014-2472, CVE-2014-2474, and CVE-2014-6459...

5CVSS5.6AI score0.01317EPSS
Exploits0References2
Prion
Prion
added 2014/10/15 3:55 p.m.16 views

Buffer overflow

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv...

5CVSS6.3AI score0.01802EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2014/10/15 3:55 p.m.20 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv, a different vulnerability than CVE-2014-2474, CVE-2014-2476, and CVE-2014-6459...

5CVSS6AI score0.01625EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2014/10/15 3:55 p.m.19 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv, a different vulnerability than CVE-2014-2472, CVE-2014-2476, and CVE-2014-6459...

5CVSS6AI score0.01625EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2014/10/15 3:55 p.m.18 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv, a different vulnerability than CVE-2014-2472, CVE-2014-2474, and CVE-2014-6459...

5CVSS6AI score0.01625EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2014/10/15 3:55 p.m.19 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv, a different vulnerability than CVE-2014-2472, CVE-2014-2474, and CVE-2014-2476...

5CVSS6.3AI score0.01625EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2014/10/15 3:55 p.m.19 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server ttaauxserv and SGD SSL Daemon ttassl...

5CVSS6.3AI score0.01267EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder