Lucene search
+L

8233 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/14 12:00 a.m.•8 views

CVE-2015-2371: Undefined Security Weakness

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

6.9CVSS5.8AI score0.01536EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/14 12:00 a.m.•12 views

CVE-2015-2379: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption...

9.3CVSS6.5AI score0.13715EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/14 12:00 a.m.•13 views

CVE-2015-2380: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, and Word 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

9.3CVSS6.5AI score0.13715EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/14 12:00 a.m.•13 views

CVE-2015-2368: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Windows DLL Remote Code Execution Vulnerability."...

6.9CVSS6AI score0.08209EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2015/07/07 12:00 a.m.•43 views

Fedora Update for rt FEDORA-2015-4698

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS8.7AI score0.02825EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2015/06/24 12:00 a.m.•69 views

RHEL 7 : kernel-rt (RHSA-2015:1139)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1139 advisory. - Kernel: fs: isofs: infinite loop in CE record entries CVE-2014-9420 - kernel: use-after-free during key garbage collection CVE-2014-9529 -...

7.2CVSS7.5AI score0.03814EPSS
SaveExploits4References17
CNVD
CNVD
•added 2015/06/23 12:00 a.m.•10 views

Airties RT-210 Multiple Parameter Cross-Site Scripting Vulnerability

Airties RT-210 is a router product from Turkey. The Airties RT-210's web interface ddns.stm file fails to adequately filter the 'ddnsdomainame' and 'ddnsaccount' parameters, allowing remote attackers to exploit vulnerabilities to inject malicious script or HTML code, which can be used to obtain...

4.3CVSS6.6AI score0.01457EPSS
SaveExploits1References1
NVD
NVD
•added 2015/06/19 2:59 p.m.•22 views

CVE-2015-4679

Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...

4.3CVSS5.8AI score0.01457EPSS
SaveExploits1References2
Prion
Prion
•added 2015/06/19 2:59 p.m.•23 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...

4.3CVSS6.1AI score0.01457EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2015/06/19 2:00 p.m.•38 views

CVE-2015-4679

Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...

5.8AI score0.01457EPSS
SaveExploits1References2
CVE
CVE
•added 2015/06/19 2:00 p.m.•56 views

CVE-2015-4679

CVE-2015-4679 affects the Airties RT-210 router, where the web interface ddns.stm fails to properly filter the parameters ddns_domainame and ddns_account, enabling multiple cross-site scripting (XSS) vulnerabilities. Exploitation allows remote attackers to inject arbitrary script/HTML via the aff...

4.3CVSS5.9AI score0.01457EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2015/06/19 12:00 a.m.•6 views

PT-2015-6670

Name of the Vulnerable Software and Affected Versions Airties RT-210 affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML...

4.3CVSS5.7AI score0.01457EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/06/19 12:00 a.m.•10 views

CVE-2015-4679: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the 1 ddnsdomainame or 2 ddnsaccount parameter to ddns.stm...

4.3CVSS5.8AI score0.01457EPSS
SaveExploits1References2
NVD
NVD
•added 2015/06/10 1:59 a.m.•33 views

CVE-2015-1719

The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to obtain sensitive information from kernel memory...

2.1CVSS5.3AI score0.02573EPSS
SaveExploits0References2
Prion
Prion
•added 2015/06/10 1:59 a.m.•33 views

Design/Logic Flaw

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...

7.2CVSS6.8AI score0.03477EPSS
SaveExploits3References4Affected Software5
Prion
Prion
•added 2015/06/10 1:59 a.m.•36 views

Null pointer dereference

The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to gain privileges or cause a denial of service NUL...

7.2CVSS6.9AI score0.03296EPSS
SaveExploits1References3Affected Software5
Prion
Prion
•added 2015/06/10 1:59 a.m.•33 views

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a...

9.3CVSS7.8AI score0.17451EPSS
SaveExploits0References3Affected Software4
Prion
Prion
•added 2015/06/10 1:59 a.m.•36 views

Design/Logic Flaw

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...

7.2CVSS6.9AI score0.03335EPSS
SaveExploits1References3Affected Software5
Prion
Prion
•added 2015/06/10 1:59 a.m.•42 views

Design/Logic Flaw

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...

7.2CVSS6.9AI score0.03364EPSS
SaveExploits1References3Affected Software5
Prion
Prion
•added 2015/06/10 1:59 a.m.•37 views

Design/Logic Flaw

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges...

7.2CVSS6.8AI score0.01906EPSS
SaveExploits0References2Affected Software5
Rows per page
Query Builder