Lucene search
+L

2414 matches found

OSV
OSV
added 2016/04/13 4:59 p.m.6 views

DEBIAN-CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS8.8AI score0.04872EPSS
SaveExploits0References1
NVD
NVD
added 2016/04/13 4:59 p.m.23 views

CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS8.8AI score0.04872EPSS
SaveExploits0References12
PyPA
PyPA
added 2016/04/13 4:59 p.m.9 views

PYSEC-2016-29

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS8AI score0.04872EPSS
SaveExploits0References13Affected Software1
OSV
OSV
added 2016/04/13 4:59 p.m.39 views

PYSEC-2016-29

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS7.6AI score0.04872EPSS
SaveExploits0References13
OSV
OSV
added 2016/04/13 4:59 p.m.10 views

UBUNTU-CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS7.7AI score0.04872EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2016/04/13 4:0 p.m.34 views

CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8AI score0.04872EPSS
SaveExploits0References12
hackapp
hackapp
added 2016/04/01 9:38 a.m.9 views

Push Ups Workout - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Push Ups Workout published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:22 a.m.12 views

Windows Live Hotmail PUSH mail - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Windows Live Hotmail PUSH mail published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:4 a.m.19 views

Abs – Push-Ups - Arms - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Abs – Push-Ups - Arms published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:3 a.m.9 views

30 Day Push Up Challenge - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Push Up Challenge published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:2 a.m.14 views

Runtastic Push-Ups Workout - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Runtastic Push-Ups Workout published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 8:54 a.m.20 views

Samsung Push Service - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Samsung Push Service published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
ThreatPost
ThreatPost
added 2016/03/21 1:20 p.m.26 views

Yahoo Deploys Passwordless Account Key Tool

In hopes of eliminating the password, at least on the company’s mobile apps, Yahoo on Friday deployed a stable version of its Account Key mechanism. The feature, essentially two-step authentication—without the first step—allows Yahoo users to log into the company’s Finance, Fantasy, Mail,...

7.2AI score
SaveExploits0References6
Mageia
Mageia
added 2016/02/05 5:26 p.m.29 views

Updated gajim packages fix security vulnerability

Gajim before 0.16.5 doesn't verify the origin of roster pushes thus allowing third parties to modify the roster via a man-in-the-middle attack CVE-2015-8688...

5.8CVSS5.7AI score0.01723EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2016/02/04 12:0 a.m.6 views

PT-2016-3240 · Yodl +2 · Yodl +2

Name of the Vulnerable Software and Affected Versions: yodl versions prior to 3.07.01 Description: The issue is caused by a buffer over-read in the queue push function, located in queue/queuepush.c. This could allow a remote attacker to compromise the confidentiality, integrity, and availability ...

9.8CVSS9.6AI score0.02232EPSS
SaveExploits0References30
CNVD
CNVD
added 2016/01/26 12:0 a.m.69 views

Gajim Message Interception Vulnerability

Gajim is a suite of free instant messaging software based on the Jabber communication protocol developed by the Gajim project. A security vulnerability exists in versions of Gajim prior to 0.16.5, which can be exploited by remote attackers to modify the roster and intercept messages with the help...

5.8CVSS5.8AI score0.01723EPSS
SaveExploits1References1
OSV
OSV
added 2016/01/15 7:59 p.m.7 views

DEBIAN-CVE-2015-8688

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...

5.4CVSS6.9AI score0.01723EPSS
SaveExploits1References1
Prion
Prion
added 2016/01/15 7:59 p.m.15 views

Code injection

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...

5.8CVSS6.8AI score0.01723EPSS
SaveExploits1References6Affected Software1
UbuntuCve
UbuntuCve
added 2016/01/15 7:59 p.m.22 views

CVE-2015-8688

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...

5.8CVSS6.2AI score0.01723EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2016/01/15 7:0 p.m.47 views

CVE-2015-8688

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...

5.5AI score0.01723EPSS
SaveExploits1References6
Rows per page
Query Builder