8509 matches found
CVE-2016-5349
The high level operating systems HLOS was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment QSEE only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications...
UBUNTU-CVE-2016-5349
The high level operating systems HLOS was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment QSEE only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications...
Understanding the Capacity Management Challenges of Database Monitoring Solutions
Database monitoring requires hardware resources such as storage space and processing power that can withstand the volume of database usage in your organization. A higher usage volume will require more resources. So how can you optimize the resources used by your database monitoring solution? Do y...
CVE-2017-7269—IIS 6.0 WebDAV remote code execution vulnerability analysis-vulnerability warning-the black bar safety net
Vulnerability description: 3 on 27 May, in Windows 2003 R2 using the IIS 6.0 broke a 0Day vulnerability （CVE-2017-7269, the exploit PoC began to spread, but the worst part is this product has stopped updating. Online streaming of the poc the download link below. github address: The combination of...
CVE-2016-5349: Exposure of Sensitive Information to an Unauthorized Actor
The high level operating systems HLOS was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execution Environment QSEE only write to legitimate memory ranges related to the QSEE secure application's HLOS client. When secure applications...
CVE-2017-0887: Reliance on Untrusted Inputs in a Security Decision
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the OC-Total-Length HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the...
USN-3251-2 linux-hwe vulnerability
USN-3251-1 fixed a vulnerability in the Linux kernel for Ubuntu 16.10. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS. It was discovered that the xfrm framework for transforming packets in the Linux kernel did not...
USN-3250-1 linux vulnerability
It was discovered that the xfrm framework for transforming packets in the Linux kernel did not properly validate data received from user space. A local attacker could use this to cause a denial of service system crash or execute arbitrary code with administrative privileges...
CVE-2017-7269
creationtimestamp| type| source ---|---|--- 2017-03-28 02:03:53+00:00| published-proof-of-concept| https://t.me/canyoupwnme/1015 2017-03-31 02:24:34+00:00| exploited| https://t.me/canyoupwnme/1028 2017-04-04 19:10:43+00:00| exploited| https://t.me/webamoozir/1520 2017-05-11 00:00:00+00:00|...
Linux Kernel 3.11 4.8 0 - SO_SNDBUFFORCE SO_RCVBUFFORCE Local Privilege Escalation
Linux Kernel 3.11 4.8 0 - SOSNDBUFFORCE SORCVBUFFORCE Local Privilege Escalation // CAPNETADMIN - root LPE exploit for CVE-2016-9793 // No KASLR, SMEP or SMAP bypass included // Affected kernels: 3.11 - 4.8 // Tested in QEMU only // https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-97...
Memory Error Via Double Free
ImageMagick is vulnerable to a double-free vulnerability. A double-free vulnerability can lead to a memory leak, overwriting arbitrary memory space or code execution...
CVE-2016-4930
Cross-site scripting XSS vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions...
CVE-2016-4926
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...
Authentication flaw
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...
CVE-2016-4929
Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user...
CVE-2016-4930
Cross-site scripting XSS vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions...
CVE-2016-4926
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...
CVE-2016-4928
Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space...