Lucene search
+L

7727 matches found

BDU FSTEC
BDU FSTEC
•added 2017/02/17 12:00 a.m.•17 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

4.3CVSS5.9AI score0.01037EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/02/17 12:00 a.m.•19 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

4.3CVSS5.9AI score0.01037EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/02/17 12:00 a.m.•16 views

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

4.3CVSS5.9AI score0.01037EPSS
SaveExploits0References3
OSV
OSV
•added 2017/02/06 6:59 a.m.•10 views

DEBIAN-CVE-2017-5549

The klsi105getlinestate function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log...

5.5CVSS6.5AI score0.00432EPSS
SaveExploits0References1
CVE
CVE
•added 2017/02/06 6:04 a.m.•139 views

CVE-2017-5549

CVE-2017-5549 affects the Linux kernel prior to 4.9.5. The vulnerability exists in klsi_105_get_line_state (drivers/usb/serial/kl5kusb105.c) where, on a failure to read the line status, uninitialized heap memory contents are placed into a log entry. This can allow a local attacker to read sensiti...

5.5CVSS6AI score0.00432EPSS
SaveExploits0References8Affected Software1
Mend
Mend
•added 2017/02/06 6:04 a.m.•1 views

CVE-2017-5549

The klsi105getlinestate function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log...

6.8CVSS0.00432EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2017/02/02 12:00 a.m.•18 views

The vulnerability of Schneider Electric’s Modbus Serial Driver for programmable logic controllers allows a perpetrator to execute arbitrary code.

The multiple vulnerabilities in the Schneider Electric Modbus Serial Driver are caused by buffer overflows on the stack. Exploitation of these vulnerabilities allows an attacker to execute arbitrary code using a high value for the buffer size in the Modbus application header...

9.3CVSS6.3AI score0.22217EPSS
SaveExploits10References4Affected Software1
OSV
OSV
•added 2017/01/30 4:59 a.m.•16 views

CVE-2016-10175

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRSnetgearsuccess.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers t...

9.8CVSS5.8AI score0.64983EPSS
SaveExploits3References5
Prion
Prion
•added 2017/01/30 4:59 a.m.•29 views

Design/Logic Flaw

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRSnetgearsuccess.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers t...

5CVSS9.1AI score0.77577EPSS
SaveExploits4References5Affected Software1
NVD
NVD
•added 2017/01/30 4:59 a.m.•26 views

CVE-2016-10175

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRSnetgearsuccess.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers t...

9.8CVSS9.3AI score0.64983EPSS
SaveExploits3References5
Cvelist
Cvelist
•added 2017/01/30 4:24 a.m.•43 views

CVE-2016-10175

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRSnetgearsuccess.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers t...

9.3AI score0.64983EPSS
SaveExploits3References5
CVE
CVE
•added 2017/01/30 4:24 a.m.•68 views

CVE-2016-10175

NETGEAR WNR2000v5 has an information-disclosure issue: a request to /BRS_netgear_success.html leaks the router’s serial number, enabling an attacker to obtain the administrator username and password in conjunction with CVE-2016-10176 (password-recovery bypass). No remediation details are provided...

9.8CVSS9.1AI score0.64983EPSS
SaveExploits3References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/30 12:00 a.m.•4 views

CVE-2016-10175: Exposure of Sensitive Information to an Unauthorized Actor

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRSnetgearsuccess.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers t...

9.8CVSS5.8AI score0.64983EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
•added 2017/01/25 10:47 a.m.•42 views

CVE-2017-5579

Memory leak in the serialexitcore function in hw/char/serial.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service host memory consumption and QEMU process crash via a large number of device unplug operations...

6.5CVSS6.8AI score0.00399EPSS
SaveExploits0References1
OSV
OSV
•added 2017/01/12 3:59 p.m.•12 views

CVE-2016-8407

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS7.3AI score0.01037EPSS
SaveExploits0References2
OSV
OSV
•added 2017/01/12 3:59 p.m.•15 views

DEBIAN-CVE-2016-8405

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising ...

4.7CVSS5.6AI score0.0169EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/12/26 12:00 a.m.•8 views

EasyNetSites 'nameDetail.php' Page SQL Injection Vulnerability

EasyNetSites is a WEB-based tool for managing organizational relationships on websites. A SQL injection vulnerability exists in the sn parameter of the nameDetail.php page of EasyNetSites, which originates from the program's failure to adequately filter user-submitted input, and can be exploited ...

8.1AI score
SaveExploits0References1
OSV
OSV
•added 2016/12/23 12:00 a.m.•13 views

UBUNTU-CVE-2016-9911

Quick Emulator Qemu built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehciinittransfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

6.5CVSS6.7AI score0.00382EPSS
SaveExploits0References4
OSV
OSV
•added 2016/12/23 12:00 a.m.•11 views

UBUNTU-CVE-2016-9907

Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredirhandledestroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

6.5CVSS6.7AI score0.0043EPSS
SaveExploits0References5
OSV
OSV
•added 2016/12/14 10:59 p.m.•15 views

CVE-2016-3685

SAP Download Manager 2.1.142 and earlier generates an encryption key from a small key space on Windows and Mac systems, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of a hardcoded key in the program code and a computer BIOS serial...

4.7CVSS5.8AI score0.00281EPSS
SaveExploits1References4
Rows per page
Query Builder