Lucene search
+L

260 matches found

Cvelist
Cvelist
added 2020/03/05 8:56 a.m.36 views

CVE-2019-14032

Memory use after free issue in audio due to lack of resource control in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017,...

7.8AI score0.00202EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/02/28 12:0 a.m.5 views

Wireshark LTE RRC Parser Memory Leak Vulnerability

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.LTE RRC is one of the LTE RRC protocol parsers. A security vulnerability exists in the LTE RRC...

7.5CVSS7.6AI score0.02713EPSS
SaveExploits1References1
OSV
OSV
added 2020/02/27 11:15 p.m.3 views

UBUNTU-CVE-2020-9431

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could leak memory. This was addressed in epan/dissectors/packet-lte-rrc.c by adjusting certain append operations...

7.5CVSS5.8AI score0.02713EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.8 views

The vulnerability of the HTTP/2 web server protocol of the Apache Traffic Server, a Node.js-based software platform, stems from a lack of resource consumption control mechanisms. This allows attackers to trigger service interruptions.

The vulnerability of the HTTP/2 web server protocol of the Apache Traffic Server, a Node.js-based software platform, is related to errors in the resource consumption control mechanism. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially crafted...

7.8CVSS5.5AI score0.27004EPSS
SaveExploits0References16Affected Software6
Prion
Prion
added 2018/09/26 7:29 p.m.10 views

Design/Logic Flaw

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The software does not validate input properly, allowing an attacker to craft the input in a form that is not expected by the rest of the application. This would lead to parts of the unit receiving unintended input, which may result ...

7.5CVSS9.4AI score0.03834EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/09/26 7:29 p.m.6 views

CVE-2018-8850

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The software does not validate input properly, allowing an attacker to craft the input in a form that is not expected by the rest of the application. This would lead to parts of the unit receiving unintended input, which may result ...

9.8CVSS6AI score0.03834EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/08/15 12:0 a.m.5 views

Redha redhat-certification denial of service vulnerability

Redhat redhat-certification is a certification service from Red Hat, an American company. A denial of service vulnerability exists in the way documents are loaded in Redha redhat-certification, which stems from the program's failure to control resource consumption and can be exploited by a remote...

6.2CVSS6AI score0.01232EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/23 12:0 a.m.5 views

Wireshark Null Pointer Dereference Vulnerability

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed network packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A null pointer dereferenc...

7.5CVSS7.5AI score0.02821EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/22 9:29 p.m.2 views

ALPINE-CVE-2018-11359

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference...

7.5CVSS6.8AI score0.02821EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/22 9:29 p.m.3 views

DEBIAN-CVE-2018-11359

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference...

7.5CVSS6.5AI score0.02821EPSS
SaveExploits0References1
Hacker One
Hacker One
added 2017/11/18 4:24 p.m.19 views

Mail.ru: XSS on account.mail.ru/login

Уязвимость на станице https://account.mail.ru/login и подготовка файлов для атаки --------------------- В процессе исследования заметил, что на странице https://account.mail.ru/login не валидируется значение параметра v. Значение выводится на странице как есть и используется в пути до скрипта...

6.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2017/08/08 12:0 a.m.5 views

PT-2017-4105 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.6-6 Description: A memory exhaustion issue was discovered in the format8BIM function, allowing attackers to cause a denial of service. The vulnerability is related to an error in the resource control mechanism, which c...

9.8CVSS6.5AI score0.49324EPSS
SaveExploits80References492
Tenable Nessus
Tenable Nessus
added 2015/01/23 12:0 a.m.25 views

Oracle Solaris Critical Patch Update : jan2015_SRU9_5

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Resource Control. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring log...

4.9CVSS5.7AI score0.00352EPSS
SaveExploits0References3
NVD
NVD
added 2015/01/21 7:59 p.m.21 views

CVE-2015-0428

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Resource Control...

4.9CVSS5.5AI score0.00352EPSS
SaveExploits0References4
Prion
Prion
added 2015/01/21 7:59 p.m.15 views

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Resource Control...

4.9CVSS6AI score0.00352EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2015/01/21 7:59 p.m.3 views

CVE-2015-0428

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Resource Control...

4.9CVSS5.7AI score0.00352EPSS
SaveExploits0References5
CVE
CVE
added 2015/01/21 7:0 p.m.56 views

CVE-2015-0428

CVE-2015-0428 affects Oracle Solaris 10 and 11. The vulnerability lies in the Solaris Resource Control component and is exploitable by a local attacker, with impact described as a complete availability disruption. The issue is addressed in Oracle’s January 2015 CPU with patches released for affec...

4.9CVSS5.6AI score0.00352EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2015/01/21 7:0 p.m.30 views

CVE-2015-0428

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Resource Control...

5.5AI score0.00352EPSS
SaveExploits0References4
CNVD
CNVD
added 2015/01/21 12:0 a.m.5 views

Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00492)

Oracle Solaris is a unix-based operating system. An unspecified vulnerability exists in Oracle Solaris. This vulnerability could be exploited by an attacker to compromise the 'Resource Control' subcomponent...

4.9CVSS6.7AI score0.00352EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2012/07/09 12:0 a.m.16 views

RedHat Update for libcgroup RHSA-2011:0320-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.2CVSS6.5AI score0.00419EPSS
SaveExploits0References2
Rows per page
Query Builder