7310 matches found
USN-3250-1 linux vulnerability
It was discovered that the xfrm framework for transforming packets in the Linux kernel did not properly validate data received from user space. A local attacker could use this to cause a denial of service system crash or execute arbitrary code with administrative privileges...
CVE-2017-7269
creationtimestamp| type| source ---|---|--- 2017-03-28 02:03:53+00:00| published-proof-of-concept| https://t.me/canyoupwnme/1015 2017-03-31 02:24:34+00:00| exploited| https://t.me/canyoupwnme/1028 2017-04-04 19:10:43+00:00| exploited| https://t.me/webamoozir/1520 2017-05-11 00:00:00+00:00|...
Linux Kernel 3.11 4.8 0 - SO_SNDBUFFORCE SO_RCVBUFFORCE Local Privilege Escalation
Linux Kernel 3.11 4.8 0 - SOSNDBUFFORCE SORCVBUFFORCE Local Privilege Escalation // CAPNETADMIN - root LPE exploit for CVE-2016-9793 // No KASLR, SMEP or SMAP bypass included // Affected kernels: 3.11 - 4.8 // Tested in QEMU only // https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-97...
Memory Error Via Double Free
ImageMagick is vulnerable to a double-free vulnerability. A double-free vulnerability can lead to a memory leak, overwriting arbitrary memory space or code execution...
CVE-2016-4931
XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...
Command injection
Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user...
CVE-2016-4928
Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space...
CVE-2016-4929
Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user...
CVE-2016-4931
XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...
CVE-2016-4928
Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space...
CVE-2016-4926
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...
CVE-2016-4926
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...
Input validation
Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle MITM type of attacks while a Space device is communicating with managed devices...
Cross site scripting
Cross-site scripting XSS vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions...
Design/Logic Flaw
XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service...
Cross site request forgery (csrf)
Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space...
Authentication flaw
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...
CVE-2016-4930
Cross-site scripting XSS vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions...