Lucene search
+L

5849 matches found

myhack58
myhack58
added 2015/11/12 12:0 a.m.108 views

Huawei CPE devices there is a remote arbitrary file reading vulnerability reference EXP-a vulnerability warning-the black bar safety net

The CPE is what CPE is a high-speed 4G signal is converted into tablets, smartphones, laptops and other mobile devices universal WiFi signal of the device, can simultaneously support multi-terminal access, the size of a book, in a 4G signal coverage place, plug in the power it can use, without...

7.5AI score
SaveExploits0
UbuntuCve
UbuntuCve
added 2015/11/05 5:59 a.m.21 views

CVE-2015-7186

Mozilla Firefox before 42.0 on Android allows user-assisted remote attackers to bypass the Same Origin Policy and trigger 1 a download or 2 cached profile-data reading via a file: URL in a saved HTML document...

4.3CVSS7.2AI score0.01532EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/11/05 12:0 a.m.9 views

The vulnerability of the MySQL database management system allows a hacker to perform unauthorized data reading.

Vulnerability of the Server sub-component: The types of the MySQL database management system are related to errors in the code. Exploiting this vulnerability allows a malicious actor to perform unauthorized data reading remotely...

4CVSS7AI score0.02982EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/11/05 12:0 a.m.8 views

The vulnerability of the Oracle Fusion Middleware software allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the Oracle HTTP Server component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to read data...

2.6CVSS7.2AI score0.01634EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/11/05 12:0 a.m.8 views

The vulnerability of the Oracle E-Business Suite system’s automation activities allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the Oracle Applications Framework component of the Oracle E-Business Suite automation system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read data...

2.1CVSS7.2AI score0.01243EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2015/10/22 12:0 a.m.5 views

Vulnerability in Oracle Fusion Middleware Oracle Access Manager Component

Oracle Fusion Middleware Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation that provides middleware, software collections, and other capabilities.Oracle Access Manager is one of the components that provides identity...

4.3CVSS6.7AI score0.01665EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/10/22 12:0 a.m.5 views

Vulnerability in Oracle Fusion Middleware Jdeveloper Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Oracle Jdeveloper is one of the free integrated development environment IDE components. A...

4CVSS6.7AI score0.01368EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2015/10/19 12:25 a.m.18 views

Microsoft doesn’t want Windows 10 Users to Switch to Chrome or Firefox

Microsoft wants Windows 10 users to use its Edge browser, and the company is pulling every trick out to make it happen. In a newly leaked Windows 10 preview release build 10568, Microsoft has added a new prompt that appears whenever you try to switch away from default apps, including Microsoft...

6.6AI score
SaveExploits0
Kaspersky
Kaspersky
added 2015/10/13 12:0 a.m.79 views

KLA10682 Multiple vulnerabilities in Adobe Acrobat and Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. An unknown vulnerability can be exploited via specially designe...

10CVSS9.1AI score0.23389EPSS
SaveExploits2References10
CNVD
CNVD
added 2015/10/04 12:0 a.m.2 views

Android integer overflow vulnerability (CNVD-2015-06484)

Android is an operating system based on the Linux open kernel, announced on November 5, 2007 by Google Inc. for cell phones. An integer overflow vulnerability exists in Android versions prior to 5.1.1, LMY48M, which allows an attacker to execute arbitrary code and read arbitrary keys. By using an...

9.3CVSS7.6AI score0.01283EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2015/10/03 10:0 a.m.23 views

CVE-2015-5650

Directory traversal vulnerability in AjaXplorer 2.0 allows remote attackers to read arbitrary files via unspecified vectors...

6.7AI score0.01895EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2015/10/01 12:59 a.m.43 views

CVE-2015-1541

The AppWidgetServiceImpl implementation in com/android/server/appwidget/AppWidgetServiceImpl.java in the Settings application in Android before 5.1.1 LMY48I allows attackers to obtain a URI permission via an application that sends an Intent with a 1 FLAGGRANTREADURIPERMISSION or 2...

4.3CVSS5.9AI score0.00477EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2015/10/01 12:0 a.m.22 views

CVE-2015-3863

Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399...

7.2AI score0.01283EPSS
SaveExploits0References2
Fedora
Fedora
added 2015/09/19 7:12 p.m.15 views

[SECURITY] Fedora 23 Update: php-pecl-zip-1.13.1-1.fc23

Zip is an extension to create and read zip files...

1.5AI score
SaveExploits0
OpenVAS
OpenVAS
added 2015/09/19 12:0 a.m.35 views

F5 BIG-IP - SOAP parser vulnerability CVE-2013-1824

The remote host is missing a security patch. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

4.3CVSS8.5AI score0.04314EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/09/17 12:0 a.m.6 views

Serendipity cross-site scripting vulnerability (CNVD-2015-06044)

Serendipity is a PHP-based blogging system developed by Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A cross-site scripting vulnerability exists in the js/2k11.min.js file in Serendipity 2.0.1 and prior versions of the 2k11 theme, which stems...

4.3CVSS6AI score0.01939EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/09/09 12:0 a.m.4 views

NEOJAPAN desknet NEO Directory Traversal Vulnerability

NEOJAPAN desknet NEO is Japan's NEOJAPAN company a Web application framework. A directory traversal vulnerability exists in NEOJAPAN desknet NEO versions 2.0R1.0 through 2.5R1.4. A remote attacker can exploit this vulnerability to read arbitrary files with specially crafted parameters...

4CVSS6.9AI score0.01557EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.28 views

Amazon Linux: Security Advisory (ALAS-2012-135)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.4AI score0.02453EPSS
SaveExploits4References2
CVE
CVE
added 2015/09/04 3:0 p.m.83 views

CVE-2015-5688

Geddy (Node.js framework) prior to version 13.0.8 contains a directory traversal vulnerability in lib/app/index.js that allows an attacker to read arbitrary files by supplying a URI PATH_INFO with a dot-dot-encoded slash (e.g., ..%2f). Exploitation targets the default URI and can read local files...

5CVSS9.1AI score0.09385EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2015/08/24 2:59 p.m.5 views

UBUNTU-CVE-2015-6661

Drupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node titles by reading the menu...

5CVSS5.8AI score0.02766EPSS
SaveExploits0References3
Rows per page
Query Builder