Lucene search
+L

1911 matches found

CNVD
CNVD
added 2015/03/28 12:0 a.m.5 views

Cisco IOS XE high-speed logging (HSL) Hyper-Large IP Message Handling Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A security vulnerability in the Cisco IOS XE high-speed logging HSL feature allows remote attackers to conduct denial-of-service attacks via specially crafted oversized IP messages...

7.8CVSS6.9AI score0.01911EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2015/03/26 10:0 a.m.32 views

CVE-2015-0640

The high-speed logging HSL feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via large IP packets that require NAT and H...

6.4AI score0.01911EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2015/03/19 5:10 p.m.40 views

Moderate: Red Hat Security Advisory: qpid security and bug fix update

Updated qpid packages that fix multiple security issues and one bug are now available for Red Hat Enterprise MRG 3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

7.5CVSS6.7AI score0.15119EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2015/02/25 9:44 p.m.19 views

Record-breaking 1Tbps Speed achieved Over 5G Mobile Connection

New Generations usually bring new base technologies, more network capacity for more data per user, and high speed Internet service, for which Internet service providers usually advertise. However, it is believed that the fifth generation 5G Technology of mobile network will be beyond our thoughts...

7AI score
SaveExploits0
NVD
NVD
added 2015/02/24 8:59 p.m.22 views

CVE-2014-9282

Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers to write to arbitrary files via a crafted filename...

5CVSS6.7AI score0.01639EPSS
SaveExploits0References2
Prion
Prion
added 2015/02/24 8:59 p.m.101 views

Directory traversal

Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers to write to arbitrary files via a crafted filename...

5CVSS7.2AI score0.01639EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2015/02/24 8:0 p.m.38 views

CVE-2014-9282

The CVE-2014-9282 entries describe a directory traversal flaw in the Android apps Speed Root Explorer (prior to 3.2) and Speed Explorer (prior to 2.2). The issue arises from how filenames are processed, allowing a remote attacker to overwrite or create arbitrary files in accessible directories vi...

5CVSS6.9AI score0.01639EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2015/02/24 8:0 p.m.33 views

CVE-2014-9282

Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers to write to arbitrary files via a crafted filename...

6.7AI score0.01639EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/02/24 5:35 a.m.5 views

Speed Software Root Explorer and Explorer vulnerable to directory traversal

Overview Root Explorer and Explorer provided by Speed Software contain an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Ryohei Koike of Sakura Information Systems Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

5CVSS7AI score0.01639EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/02/24 12:0 a.m.29 views

JVN#42768331: Speed Software Root Explorer and Explorer vulnerable to directory traversal

Root Explorer and Explorer provided by Speed Software contain an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application...

5CVSS6.6AI score0.01639EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/02/16 12:0 a.m.22 views

Fedora 21 : pigz-2.3.3-1.fc21 (2015-1488)

Update to 2.3.3, fixes CVE-2015-1191 : - Return zero exit code when only warnings are issued - Increase speed of unlzw Unix compress decompression - Update zopfli to current google state - Allow larger maximum blocksize -b, now 512 MiB - Do not require that -d precede -N, -n, -T options - Strip a...

5CVSS5.6AI score0.03029EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2015/02/16 12:0 a.m.24 views

Fedora 20 : pigz-2.3.3-1.fc20 (2015-1510)

Update to 2.3.3, fixes CVE-2015-1191 : - Return zero exit code when only warnings are issued - Increase speed of unlzw Unix compress decompression - Update zopfli to current google state - Allow larger maximum blocksize -b, now 512 MiB - Do not require that -d precede -N, -n, -T options - Strip a...

5CVSS5.6AI score0.03029EPSS
SaveExploits1References3
Metasploit
Metasploit
added 2015/01/10 6:29 a.m.53 views

Viproy CUCDM IP Phone XML Services - Speed Dial Attack Tool

The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager CDM, before version 10, doesn't implement access control properly, which allows remote attackers to modify user information. This module exploits the vulnerability to make unauthorized speed dial entity...

7.5CVSS7AI score0.21879EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2014/12/15 12:0 a.m.35 views

Fedora 20 : curl-7.32.0-17.fc20 (2014-16538)

make CURLOPTLOWSPEEDLIMIT work again with threaded resolver 1172572 - allow to use TLS 1.1 and TLS 1.2 1153814 - disable libcurl-level downgrade to SSLv3 1166567 - low-speed-limit: avoid timeout flood 1166239 - fix handling of CURLOPTCOPYPOSTFIELDS in curleasyduphandle CVE-2014-3707 Note that...

4.3CVSS7.5AI score0.05121EPSS
SaveExploits0References3
OwnCloud
OwnCloud
added 2014/11/25 3:0 p.m.39 views

Server: Local Path Disclosure when using Asset Pipeline

ownCloud 7 introduced the so-called "Asset Pipeline". It is disabled by default, but can be enabled by setting asset-pipeline.enabled to true in config.php When the setting is enabled ownCloud concatenates all CSS and JS files into a single large blob file. Thus the amount of initial required...

5CVSS6AI score0.01186EPSS
SaveExploits0Affected Software1
zdt
zdt
added 2014/11/22 12:0 a.m.54 views

TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service

Exploit for hardware platform in category dos / poc TP-Link TL-WR740N Wireless Router MitM httpd Denial Of Service Vendor: TP-LINK Technologies Co., Ltd. Product web page: http://www.tp-link.us Affected version: - Firmware version: 3.17.0 Build 140520 Rel.75075n Released: 5/20/2014 - Firmware...

7AI score
SaveExploits0
ThreatPost
ThreatPost
added 2014/11/10 1:36 p.m.9 views

New Mozilla Privacy Initiative to Include High-Capacity Tor Relays

Mozilla is starting a new initiative that the company says is designed to incorporate more privacy enhancing features into Firefox and the other Mozilla products. The project, known as Polaris, involves collaboration with The Tor Project and the Center for Democracy and Technology and will involv...

0.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2014/10/21 3:6 a.m.42 views

WiFi software Acrylic WiFi Free v2.1 - WiFi analyzer software and WLAN scanner for network analysts

Acrylic WiFi Professional is the best WiFi analyzer software to identify access points and wifi channels, and to analyze and resolve incidences on 802.11a/b/g/n/ac wireless networks in real time. It is a perfect tool for advanced users and professional WiFi network analysts and administrators to...

7.1AI score
SaveExploits0
Fedora
Fedora
added 2014/10/08 7:1 p.m.55 views

[SECURITY] Fedora 20 Update: qemu-1.6.2-9.fc20

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

7.5CVSS0.5AI score0.05412EPSS
SaveExploits4
NVD
NVD
added 2014/09/18 10:55 a.m.19 views

CVE-2014-5921

The Need for Speed Network aka com.ea.nfsautolog.bv application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References3
Rows per page
Query Builder