Lucene search
+L

4699 matches found

PyPA
PyPA
•added 2016/11/04 10:59 a.m.•13 views

PYSEC-2016-9

Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component...

7.8CVSS7.9AI score0.01897EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2016/11/04 10:59 a.m.•16 views

PYSEC-2016-9

Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component...

7.8CVSS7.4AI score0.01897EPSS
SaveExploits0References7
Prion
Prion
•added 2016/11/04 10:59 a.m.•19 views

Code injection

Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component...

6.8CVSS7.8AI score0.01897EPSS
SaveExploits0References6Affected Software2
CVE
CVE
•added 2016/11/04 10:00 a.m.•160 views

CVE-2016-9190

Pillow (Python Imaging Library) prior to version 3.3.2 is affected by CVE-2016-9190. The bug arises from an Insecure Sign Extension issue in ImagingNew within Storage.c, enabling context-dependent attackers to achieve arbitrary code execution via a crafted image file. Affected versions are Pillow...

7.8CVSS7.9AI score0.01897EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2016/11/04 10:00 a.m.•44 views

CVE-2016-9190

Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component...

7.8CVSS7.3AI score0.01897EPSS
SaveExploits0
Cvelist
Cvelist
•added 2016/11/04 10:00 a.m.•32 views

CVE-2016-9190

Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component...

8AI score0.01897EPSS
SaveExploits0References6
OSV
OSV
•added 2016/11/04 12:00 a.m.•8 views

UBUNTU-CVE-2016-9190

Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component...

7.8CVSS7.5AI score0.01897EPSS
SaveExploits0References5
Citrix
Citrix
•added 2016/10/18 12:00 a.m.•14 views

How To Configure Single Sign-on for Receiver for ChromeOS

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver for Chrome now supports single sign-on SSON on Chromebook devices and Citrix Virtual...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/10/11 5:37 p.m.•17 views

bandmix.co.uk XSS vulnerability

Vulnerable URL: http://www.bandmix.co.uk/sign-in/ Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 301726 VIP website status:| No Check bandmix.co.uk SSL...

6.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2016/10/11 12:00 a.m.•11 views

October 11, 2016 — KB3194798 (OS Build 14393.321)

None None...

5.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2016/10/11 12:00 a.m.•13 views

October 11, 2016 — KB3192441 (OS Build 10586.633)

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2016/10/11 12:00 a.m.•35 views

October 11, 2016 — KB3192440 (OS Build 10240.17146)

None None...

6.1AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2016/10/05 12:00 a.m.•51 views

CVE-2016-7966

Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign = or a space into the injected HTML, which greatly reduces the available HTML functionality...

7.5CVSS7.2AI score0.02345EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2016/09/30 12:00 a.m.•664 views

OpenSSL 1.0.2 < 1.0.2i Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2i. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2i advisory. - Multiple memory leaks in t1lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to...

9.8CVSS7.5AI score0.94697EPSS
SaveExploits8References30
Citrix
Citrix
•added 2016/09/29 12:00 a.m.•17 views

Does domain passthrough authentication work with NetScaler Gateway?

Question: Does domain pass through authentication work with NetScaler Gateway, like forwarding the windows machine credentials so that user do not have to login and does single sign onlatest update for 12.0.58.x? Answer: No, Domain pass through does not work with Netscaler Gateway. Authentication...

7.3AI score
SaveExploits0
Fedora
Fedora
•added 2016/09/23 12:26 a.m.•41 views

[SECURITY] Fedora 24 Update: shiro-1.3.2-1.fc24

Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session managemen t, single sign-on and cryptography services...

7.5CVSS2.7AI score0.0968EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2016/09/22 12:00 a.m.•11 views

The vulnerability of the Windows operating system, which allows a hacker to crack the password

The vulnerability of the Windows operating system is related to incorrect checking of NTLM SSO requests for MSAs. Exploiting this vulnerability allows a malicious actor to select a password by using brute-force attacks on NTLM password hashes...

4.3CVSS7.6AI score0.20788EPSS
SaveExploits0References2
Citrix
Citrix
•added 2016/09/21 12:00 a.m.•16 views

FAQ: Difference between XenMobile Secure Browse and Full VPN Tunnel

Q: What is Difference between XenMobile Secure Browse and Full VPN Tunnel ? A: The following are the differences: Secure Browse - Secure Browse performs SSL offloading of the connection, which means that the NetScalerwill terminate the SSL tunnel, unencrypt the traffic, and perform URL...

7.3AI score
SaveExploits0
Fedora
Fedora
•added 2016/09/17 10:35 p.m.•44 views

[SECURITY] Fedora 25 Update: shiro-1.3.2-1.fc25

Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session managemen t, single sign-on and cryptography services...

7.5CVSS2.7AI score0.0968EPSS
SaveExploits1
Fedora
Fedora
•added 2016/09/16 11:22 p.m.•51 views

[SECURITY] Fedora 24 Update: distribution-gpg-keys-1.7-1.fc24

GPG keys used by various Linux distributions to sign packages...

9.3CVSS2.9AI score0.01729EPSS
SaveExploits1
Rows per page
Query Builder