Lucene search
+L

13145 matches found

CNVD
CNVD
added 2016/10/14 12:00 a.m.10 views

Juniper vMX Local Security Bypass Vulnerability

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A local security bypass vulnerability exists in Juniper vMX, which could allow an attacker to bypass security...

8.4CVSS6.6AI score0.00311EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/10/14 12:00 a.m.40 views

Adobe Acrobat < 11.0.18 / 15.006.30243 / 15.020.20039 Multiple Vulnerabilities (APSB16-33) (macOS)

The version of Adobe Acrobat installed on the remote macOS Mac OS X host is prior to 11.0.18, 15.006.30243, or 15.020.20039. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code...

10CVSS9.2AI score0.07858EPSS
SaveExploits0References72
Prion
Prion
added 2016/10/13 7:59 p.m.14 views

Design/Logic Flaw

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to bypass intended access restrictions via unspecified vectors...

9.3CVSS6.9AI score0.04865EPSS
SaveExploits0References5Affected Software5
Prion
Prion
added 2016/10/13 7:59 p.m.21 views

Design/Logic Flaw

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors...

10CVSS7AI score0.05316EPSS
SaveExploits0References3Affected Software4
CNVD
CNVD
added 2016/10/13 12:00 a.m.4 views

Adobe Flash Player Security Bypass Vulnerability (CNVD-2016-09025)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. A security vulnerability exists in Adobe Flash Player that could be exploited by attackers to bypass security restrictions or launch further attacks...

9.3CVSS6.8AI score0.04865EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/10/13 12:00 a.m.9 views

Cisco IOS XE Remote Security Bypass Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A remote security bypass vulnerability exists in version 3.18 of Cisco IOS XE. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized...

5.9CVSS6.9AI score0.01244EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/10/13 12:00 a.m.15 views

Cisco Unified Intelligence Center Security Mechanism Bypass Vulnerability

Cisco Unified Intelligence Center is the management center for Cisco's Unified Communications system. A security mechanism bypass vulnerability exists in Cisco Unified Intelligence Center that could be exploited by a remote attacker to create user accounts by submitting a special request...

7.5CVSS6.9AI score0.01191EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/10/13 12:00 a.m.14 views

Microsoft Edge Security Bypass Vulnerability

Microsoft Edge is the web browser built into the Windows 10 version. A security feature bypass vulnerability exists when the Edge content security policy fails to properly handle validation of certain specially designed documents. An attacker could trick a user into loading a page containing...

5.3CVSS6.5AI score0.09677EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/10/13 12:00 a.m.12 views

Adobe Reader and Acrobat Security Bypass Vulnerability (CNVD-2016-09398)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A security bypass vulnerability exists in Adobe Reader and Acrobat that allows remote attackers to build malicious PDF files th...

10CVSS6.8AI score0.03074EPSS
SaveExploits0References1
OSV
OSV
added 2016/10/12 11:30 a.m.17 views

SUSE-SU-2016:2512-1 Security update for flash-playerqemu

flash-player was updated to version 11.2.202.637 to fix the following issues bsc1004019: CVE-2016-6992: A type confusion vulnerability that could lead to code execution. CVE-2016-6981, CVE-2016-6987: use-after-free vulnerabilities that could lead to code execution CVE-2016-4286: Security bypass...

9.3CVSS9.4AI score0.19899EPSS
SaveExploits4References15
CNVD
CNVD
added 2016/10/12 12:00 a.m.11 views

Cybozu Office Security Bypass Vulnerability

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A security bypass vulnerability exists in Cybozu Office versions 9.0.0 through 10.4.0. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

4.3CVSS6.8AI score0.01552EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/10/12 12:00 a.m.8 views

SPIP Security Bypass Vulnerability (CNVD-2016-09664)

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A security bypass vulnerability exists in SPIP versions 1.9.2-SPIP 3.0.7, which can be exploited by an attacker to bypass security restrictions...

8.8CVSS6.9AI score0.04285EPSS
SaveExploits4References1
ThreatPost
ThreatPost
added 2016/10/11 2:02 p.m.10 views

Adobe Fixes 81 Vulnerabilities in Acrobat, Reader, Flash

Adobe patched 81 vulnerabilities across Acrobat, Reader, and Flash on Tuesday, including a handful of critical bugs that if exploited, could allow an attacker to take control of a system. The lion’s share of vulnerabilities – 71 in total – exist in the company’s Acrobat and Reader platforms...

8.9AI score
SaveExploits0References7
myhack58
myhack58
added 2016/10/11 12:00 a.m.90 views

Apache Tomcat 8/7/6 (based on the RedHat distro)local mention the right vulnerability-vulnerability warning-the black bar safety net

I. vulnerability description Apache Tomcat on RedHat distributions local to mention the right vulnerability II. Background description Tomcat is by Apache Software Foundation subordinate's Jakarta a project development Servlet vessel, in accordance with Sun Microsystems to provide the technical...

7.2CVSS7.4AI score0.03782EPSS
SaveExploits8
CNVD
CNVD
added 2016/10/11 12:00 a.m.11 views

GE Bently Nevada 3500/22M Security Bypass Vulnerability

The GE Bently Nevada 3500/22M is a vibration monitoring system. A security bypass vulnerability exists in the GE Bently Nevada 3500/22M. Allowing an attacker to perform unauthorized operations...

10CVSS6.9AI score0.02162EPSS
SaveExploits0References1
FreeBSD
FreeBSD
added 2016/10/11 12:00 a.m.35 views

flash -- multiple vulnerabilities

Adobe reports: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and ChromeOS. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. These updates resolve a type confusion vulnerabilit...

9.3CVSS3.1AI score0.19899EPSS
SaveExploits4References1
Tenable Nessus
Tenable Nessus
added 2016/10/11 12:00 a.m.52 views

Adobe Flash Player for Mac <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 23.0.0.162. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 -...

9.3CVSS8.2AI score0.19899EPSS
SaveExploits4References14
Symantec
Symantec
added 2016/10/11 12:00 a.m.33 views

Microsoft Edge CVE-2016-3392 Security Bypass Vulnerability

Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...

2.6CVSS6.1AI score0.09677EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/10/11 12:00 a.m.44 views

Adobe Flash Player <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 23.0.0.162. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 -...

9.3CVSS8.2AI score0.19899EPSS
SaveExploits4References14
Kaspersky
Kaspersky
added 2016/10/11 12:00 a.m.80 views

KLA10884 Code execution vulnerability in Microsoft Office

An improper RTF handling was found in Microsoft Office. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories CVE-2016-3263 CVE-2016-3209 CVE-2016-3262 CVE-2016-7182 CVE-2016-339...

10CVSS7.8AI score0.57582EPSS
SaveExploits2References32
Rows per page
Query Builder