Lucene search
+L

6663 matches found

OSV
OSV
added 2017/09/14 6:29 a.m.5 views

DEBIAN-CVE-2017-12893

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

9.8CVSS9.7AI score0.02346EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/09/14 12:00 a.m.34 views

Debian: Security Advisory (DSA-3974-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.0705EPSS
SaveExploits0References3
OSV
OSV
added 2017/09/13 5:29 p.m.7 views

UBUNTU-CVE-2017-7561

Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact...

7.5CVSS7.1AI score0.01452EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/13 12:00 a.m.11 views

The vulnerability of the CORS filter in Apache Tomcat servers allows a hacker to infect both clients and servers under certain circumstances.

The vulnerability of the CORS filter on Apache Tomcat servers arises from incorrect validation of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to infect both clients and servers under certain circumstances...

4.3CVSS6.5AI score0.0705EPSS
SaveExploits0References3Affected Software1
Microsoft KB
Microsoft KB
added 2017/09/12 7:00 a.m.42 views

Description of the security update for Microsoft Exchange: September 12, 2017

None None...

6.1CVSS6.2AI score0.03383EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/09/12 7:00 a.m.41 views

Windows Uniscribe Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accoun...

9.3CVSS7.3AI score0.21682EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/09/12 7:00 a.m.45 views

Win32k Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete dat...

9.3CVSS6.9AI score0.42776EPSS
SaveExploits3
NVD
NVD
added 2017/08/31 10:29 p.m.17 views

CVE-2014-8675

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash...

7.5CVSS7.5AI score0.09263EPSS
SaveExploits4References4
Cvelist
Cvelist
added 2017/08/31 10:00 p.m.24 views

CVE-2014-8675

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash...

8AI score0.09263EPSS
SaveExploits4References4
CNVD
CNVD
added 2017/08/31 12:00 a.m.7 views

Directory Traversal Vulnerability in Hiroshima Carsharing App Android Version

Hiroshima Car Sharing App is a car rental software. There is a directory traversal vulnerability in the Android version of Hongyang Shared Car APP, which can be exploited by an attacker to directly view and download sensitive information such as ID card, driver's license, db file, code...

6.9AI score
SaveExploits0
OSV
OSV
added 2017/08/29 6:29 p.m.6 views

CVE-2016-0356

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111895...

6.5CVSS5.7AI score0.00647EPSS
SaveExploits0References4
NVD
NVD
added 2017/08/29 6:29 p.m.20 views

CVE-2016-0356

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111895...

6.5CVSS6.2AI score0.00647EPSS
SaveExploits0References4
Prion
Prion
added 2017/08/29 6:29 p.m.18 views

Cross site request forgery (csrf)

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111895...

4CVSS6.2AI score0.00647EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2017/08/29 6:29 p.m.7 views

CVE-2016-0355

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111894...

6.5CVSS6.5AI score0.00647EPSS
SaveExploits0References4
Prion
Prion
added 2017/08/29 6:29 p.m.18 views

Cross site request forgery (csrf)

IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery. IBM X-Force ID: 111894...

4CVSS6.2AI score0.00647EPSS
SaveExploits0References4Affected Software1
The Hacker News
The Hacker News
added 2017/08/28 1:24 a.m.23 views

Private Internet Access – Get a Secure VPN to Protect Your Online Privacy

Since most of us rely upon the Internet for day-to-day activities today, hacking and spying have become a prime concern, and so have online security and privacy. The Internet has become a digital universe with websites collecting your sensitive information and selling them to advertisers, hackers...

6.6AI score
SaveExploits0
CNVD
CNVD
added 2017/08/28 12:00 a.m.6 views

IBM Sametime Meetings Server Denial of Service Vulnerability

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video.Sametime Enterprise Meeting Server is one of the enterprise media servers. A security...

6.5CVSS6.5AI score0.00647EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/08/28 12:00 a.m.9 views

IBM Sametime Meetings Server Denial of Service Vulnerability (CNVD-2017-26409)

IBM Sametime is a suite of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data and video.Sametime Enterprise Meeting Server is one of the enterprise media servers. A security...

6.5CVSS6.5AI score0.00647EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/08/24 12:00 a.m.5 views

Conti Car Share Android app has a payment logic flaw

Car sharing app is a new energy vehicle time-sharing platform. A payment logic vulnerability exists in Kandi Car Sharing Android app. Attackers can arbitrarily modify the size of the amount by exploiting the vulnerability...

6.8AI score
SaveExploits0
HackRead
HackRead
added 2017/08/18 3:31 p.m.42 views

Uber users beware; Faketoken Android malware hits ride-sharing apps

By Waqas The new version of Faketoken Malware Targets Uber-Like Apps to This is a post from HackRead.com Read the original post: Uber users beware; Faketoken Android malware hits ride-sharing apps...

7AI score
SaveExploits0
Rows per page
Query Builder