Lucene search
+L

7414 matches found

OSV
OSV
added 2018/02/06 11:29 p.m.10 views

CVE-2018-6781

In Jiangmin Antivirus 16.0.0.100, the driver file KSysCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008264...

7.8CVSS5.8AI score0.00389EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/02/06 12:00 a.m.13 views

Sophos Tester Tool Denial of Service Vulnerability

Sophos Tester Tool is a penetration testing tool from Sophos UK. A security vulnerability exists in Sophos Tester Tool version 3.2.0.7 Beta, which stems from the program's failure to detect parameters of the DeviceIoControl code. An attacker can exploit the vulnerability to cause a blue screen or...

5.5CVSS6.8AI score0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/02/05 6:00 p.m.23 views

CVE-2018-6624

OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html...

9.7AI score0.01521EPSS
SaveExploits0References1
Prion
Prion
added 2018/02/02 9:29 p.m.27 views

Null pointer dereference

In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address, the driver will cause a Blue Screen of Death. If a program or malware does this ...

4.9CVSS5.7AI score0.00353EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/02/02 9:29 p.m.12 views

CVE-2018-6319

In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address, the driver will cause a Blue Screen of Death. If a program or malware does this ...

5.5CVSS5.8AI score0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/02/02 9:00 p.m.29 views

CVE-2018-6319

In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address, the driver will cause a Blue Screen of Death. If a program or malware does this ...

5.7AI score0.00353EPSS
SaveExploits0References1
OSV
OSV
added 2018/02/02 1:29 a.m.10 views

CVE-2018-6523

In nProtect AVS V4.0 before 4.0.0.39, the driver file TKFsAv.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c...

7.8CVSS5.8AI score0.00344EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/02/02 12:00 a.m.8 views

nProtect AVS Denial of Service Vulnerability

nProtect AVS is security software for blocking malware, spyware, ransomware, and other cyber threats. A denial of service vulnerability exists in the driver file TKRgFtXp.SYS in nProtect AVS V4.0 4.0.0.38. The vulnerability arises due to an unvalidated input value from IOCtl 0x220408. A local use...

7.8CVSS6.5AI score0.00344EPSS
SaveExploits0References1
NVD
NVD
added 2018/01/25 10:29 p.m.28 views

CVE-2018-6313

Cross-site scripting XSS in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a different issue than CVE-2017-2118...

4.8CVSS5.3AI score0.00814EPSS
SaveExploits1References1
OSV
OSV
added 2018/01/25 10:29 p.m.17 views

CVE-2018-6313

Cross-site scripting XSS in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a different issue than CVE-2017-2118...

4.8CVSS6AI score
SaveExploits0References1
Prion
Prion
added 2018/01/25 10:29 p.m.15 views

Cross site scripting

Cross-site scripting XSS in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a different issue than CVE-2017-2118...

3.5CVSS5.3AI score0.015EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2018/01/25 10:00 p.m.61 views

CVE-2018-6313

CVE-2018-6313 affects WBCE CMS, version 1.3.1. It is a cross-site scripting (XSS) vulnerability where remote authenticated administrators can inject arbitrary script or HTML via the Modify Page screen (a distinct issue from CVE-2017-2118). The available sources describe the vulnerable component a...

4.8CVSS5.3AI score0.00814EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2018/01/25 10:00 p.m.41 views

CVE-2018-6313

Cross-site scripting XSS in WBCE CMS 1.3.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the Modify Page screen, a different issue than CVE-2017-2118...

5.5AI score0.00814EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/01/25 12:00 a.m.8 views

Max Secure Anti Virus Denial of Service Vulnerability

Max Secure Anti Virus is a specialized anti-spyware software for removing adware and spyware from your PC. A denial of service vulnerability exists in the driver file SDActMon.sys in Max Secure Anti Virus 19.0.3.019. The vulnerability arises due to an unverified input value from IOCtl 0x220019. A...

7.8CVSS6.5AI score0.00389EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/01/25 12:00 a.m.8 views

Max Secure Anti Virus Denial of Service Vulnerability (CNVD-2018-02615)

Max Secure Anti Virus is a specialized anti-spyware software for removing adware and spyware from your PC. A denial of service vulnerability exists in the driver file MaxProtector32.sys in Max Secure Anti Virus 19.0.3.019. The vulnerability arises due to an unverified input value from IOCtl...

7.8CVSS6.5AI score0.00389EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/01/25 12:00 a.m.7 views

Max Secure Anti Virus Denial of Service Vulnerability (CNVD-2018-02613)

Max Secure Anti Virus is a specialized anti-spyware software for removing adware and spyware from your PC. A denial of service vulnerability exists in the driver file MaxProtector32.sys in Max Secure Anti Virus 19.0.3.019. The vulnerability arises due to an unverified input value from IOCtl...

7.8CVSS6.5AI score0.00389EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/01/25 12:00 a.m.8 views

eScan Anti-Virus Denial of Service Vulnerability (CNVD-2018-02624)

eScan Anti-Virus is a comprehensive anti-virus and content security solution. A denial of service vulnerability exists in the driver file econceal.sys in eScan Antivirus 14.0.1400.2029. The vulnerability arises due to an unverified input value from IOCtl 0x830020F8. A local user can exploit this...

7.8CVSS6.4AI score0.00389EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/01/25 12:00 a.m.9 views

xorg-x11-server denial of service vulnerability (CNVD-2018-03153)

The xorg-x11-server is an X Window System display server bundled with multiple vendor operating systems. A security vulnerability exists in the MIT-SCREEN-SAVER extension in xorg-x11-server versions prior to 1.19.5, which stems from a lack of length detection in the program. An attacker can explo...

9.8CVSS7.5AI score0.0367EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/25 12:00 a.m.9 views

Max Secure Anti Virus Denial of Service Vulnerability (CNVD-2018-02612)

Max Secure Anti Virus is a specialized anti-spyware software for removing adware and spyware from your PC. A denial of service vulnerability exists in the driver file MaxProtector32.sys in Max Secure Anti Virus 19.0.3.019. The vulnerability arises due to an unverified input value from IOCtl...

7.8CVSS6.5AI score0.00389EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/01/25 12:00 a.m.7 views

Max Secure Anti Virus Denial of Service Vulnerability (CNVD-2018-02614)

Max Secure Anti Virus is a specialized anti-spyware software for removing adware and spyware from your PC. A denial of service vulnerability exists in the driver file MaxProtector32.sys in Max Secure Anti Virus 19.0.3.019. The vulnerability arises due to an unverified input value from IOCtl...

7.8CVSS6.5AI score0.00389EPSS
SaveExploits1References1
Rows per page
Query Builder