Lucene search
+L

8306 matches found

Mend
Mend
•added 2017/06/26 3:00 p.m.•2 views

CVE-2015-3315

Automatic Bug Reporting Tool ABRT allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on 1 /var/tmp/abrt//maps, 2 /tmp/jvm-/hserror.log, 3 /proc//exe, 4 /etc/os-release in a chroot, or 5 an unspecified root directory relate...

8.5CVSS0.04776EPSS
SaveExploits5References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/26 12:00 a.m.•6 views

CVE-2015-1870: Exposure of Sensitive Information to an Unauthorized Actor

The event scripts in Automatic Bug Reporting Tool ABRT uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors...

5.5CVSS6.7AI score0.00421EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/26 12:00 a.m.•7 views

CVE-2015-3315: Improper Link Resolution Before File Access

Automatic Bug Reporting Tool ABRT allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on 1 /var/tmp/abrt//maps, 2 /tmp/jvm-/hserror.log, 3 /proc//exe, 4 /etc/os-release in a chroot, or 5 an unspecified root directory relate...

7.8CVSS7.3AI score0.04776EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/26 12:00 a.m.•6 views

CVE-2015-3142: Exposure of Sensitive Information to an Unauthorized Actor

The kernel-invoked coredump processor in Automatic Bug Reporting Tool ABRT does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application...

4.7CVSS6.5AI score0.00345EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/06/22 12:00 a.m.•14 views

Adobe Captivate Remote Code Execution Vulnerability

Adobe Captivate is a rapid response authoring tool for creating eLearning content such as software demos, software simulations, branching scenarios and randomized quizzes in .swf and HTML5 formats. A remote code execution vulnerability exists in the quiz reporting feature of Adobe Captivate, whic...

10CVSS8.3AI score0.0693EPSS
SaveExploits0References1
OSV
OSV
•added 2017/06/20 5:29 p.m.•13 views

CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

7.5CVSS5.8AI score0.03202EPSS
SaveExploits0References2
OSV
OSV
•added 2017/06/20 5:29 p.m.•14 views

CVE-2017-3098

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

9.8CVSS6.4AI score0.0693EPSS
SaveExploits0References2
Prion
Prion
•added 2017/06/20 5:29 p.m.•25 views

Remote code execution

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

10CVSS9.6AI score0.0693EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2017/06/20 5:29 p.m.•34 views

Information disclosure

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

5CVSS7.7AI score0.03202EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2017/06/20 5:29 p.m.•28 views

CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

7.5CVSS7.2AI score0.03202EPSS
SaveExploits0References2
NVD
NVD
•added 2017/06/20 5:29 p.m.•25 views

CVE-2017-3098

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

10CVSS9.6AI score0.0693EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/06/20 5:00 p.m.•41 views

CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

7.3AI score0.03202EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/06/20 5:00 p.m.•34 views

CVE-2017-3098

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

9.7AI score0.0693EPSS
SaveExploits0References2
CVE
CVE
•added 2017/06/20 5:00 p.m.•84 views

CVE-2017-3087

Adobe Captivate

7.5CVSS7.2AI score0.03202EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2017/06/20 5:00 p.m.•75 views

CVE-2017-3098

Adobe Captivate

10CVSS9.6AI score0.0693EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2017/06/20 12:00 a.m.•1 views

PT-2017-15638

Name of the Vulnerable Software and Affected Versions Adobe Captivate versions 9 and earlier Description The issue is related to an information disclosure problem caused by the misuse of the quiz reporting feature in Adobe Captivate. Recommendations For Adobe Captivate versions 9 and earlier,...

7.5CVSS0.03202EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/20 12:00 a.m.•9 views

CVE-2017-3098: Improper Input Validation

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

10CVSS8.7AI score0.0693EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/20 12:00 a.m.•3 views

CVE-2017-3087: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

7.5CVSS7.3AI score0.03202EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/06/20 12:00 a.m.•5 views

PT-2017-15649

Name of the Vulnerable Software and Affected Versions Adobe Captivate versions 9 and earlier Description The issue is related to a remote code execution vulnerability in the quiz reporting feature. This vulnerability could be exploited to read and write arbitrary files to the server...

10CVSS0.0693EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
•added 2017/06/19 2:39 p.m.•14 views

hape.uclip.mobi XSS vulnerability

Open Bug Bounty ID: OBB-250068 Description| Value ---|--- Affected Website:| hape.uclip.mobi Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Rows per page
Query Builder