Lucene search
+L

2780 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/18 12:00 a.m.•11 views

CVE-2016-7144: Improper Authentication

The mauthenticate function in modules/msasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter...

8.1CVSS5.8AI score0.0127EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/01/09 12:00 a.m.•6 views

Brave Browser Address Bar Address Spoofing Vulnerability

Brave is an open source web browser based on Chromium. Brave Browser suffers from an address spoofing vulnerability in the address bar, which can be exploited by attackers to spoof addresses and perform unauthorized operations...

6.8AI score
SaveExploits0References1
NVD
NVD
•added 2017/01/02 9:59 p.m.•27 views

CVE-2016-10099

Borg aka BorgBackup before 1.0.9 has a flaw in the cryptographic protocol used to authenticate the manifest list of archives, potentially allowing an attacker to spoof the list of archives...

5.3CVSS5.1AI score0.01273EPSS
SaveExploits1References2
CVE
CVE
•added 2017/01/02 9:09 p.m.•57 views

CVE-2016-10099

CVE-2016-10099 affects BorgBackup before 1.0.9, where a flaw in the cryptographic protocol used to authenticate the manifest could allow an attacker to spoof the archive list, compromising integrity of the manifest. Exploitation details are not provided in the documents; several entries indicate ...

5.3CVSS5.1AI score0.01273EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2017/01/02 9:09 p.m.•36 views

CVE-2016-10099

Borg aka BorgBackup before 1.0.9 has a flaw in the cryptographic protocol used to authenticate the manifest list of archives, potentially allowing an attacker to spoof the list of archives...

5.3CVSS6.2AI score0.01273EPSS
SaveExploits1
CVE
CVE
•added 2016/12/18 3:34 a.m.•115 views

CVE-2016-5188

CVE-2016-5188 affects Chromium/Blink: UI spoofing via crafted HTML pages allowing a remote attacker to spoof parts of the browser UI. The public description notes Chrome/Blink-era UI spoofing in the Blink component for Windows, Mac, and Linux prior to version 54.0.2840.59. Debian security advisor...

4.3CVSS5.7AI score0.00971EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/12/18 12:00 a.m.•3 views

CVE-2016-5188: Improper Input Validation

Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages...

4.3CVSS7.9AI score0.00971EPSS
SaveExploits0References2
ThreatPost
ThreatPost
•added 2016/12/02 11:45 a.m.•39 views

Google Fixes 12 High-Severity Vulnerabilities In Chrome Browser

Google is urging Windows, Mac and Linux users to update their Chrome browsers to fix multiple vulnerabilities that could allow malicious third parties to take control of targeted systems. Released Thursday, Chrome version 55.0.2883.75 for Windows, Mac, and Linux fixes those security issues. It al...

6.8CVSS0.5AI score0.11182EPSS
SaveExploits6References4
Cvelist
Cvelist
•added 2016/11/30 11:00 a.m.•40 views

CVE-2016-2937

IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability."...

6.2AI score0.01254EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/11/30 12:00 a.m.•9 views

CVE-2016-2937: Improper Input Validation

IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability."...

6.5CVSS5.9AI score0.01254EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2016/11/30 12:00 a.m.•5 views

PT-2016-5288

Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.3 Description The issue allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an untrusted information vulnerability...

6.5CVSS0.01254EPSS
SaveExploits0References5
OSV
OSV
•added 2016/11/17 12:00 a.m.•9 views

UBUNTU-CVE-2016-9076

An issue where a "" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox 50...

5.9CVSS6.9AI score0.01775EPSS
SaveExploits0References4
Kaspersky
Kaspersky
•added 2016/11/15 12:00 a.m.•126 views

KLA11272 Multiple vulnerabilities in Mozilla Firefox

Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information and spoof user interface. Below is a complete list of vulnerabilities: 1. A heap buffer overflow...

9.8CVSS9AI score0.12263EPSS
SaveExploits5References2
Hacker One
Hacker One
•added 2016/10/27 7:22 a.m.•220 views

InVision: CORS Man-in-the-Middle account compromise

Description ==================== The invisionapp application implements HTTPS correctly by redirecting any HTTP traffic to HTTPS; this prevents, for example, the person sitting in the same office or home as you, or someone on the same open-wireless network as you e.g. McDonalds or airport, from...

6.7AI score
SaveExploits0
OSV
OSV
•added 2016/10/22 3:59 a.m.•16 views

CVE-2016-0241

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP...

8.8CVSS5.8AI score0.018EPSS
SaveExploits1References2
NVD
NVD
•added 2016/10/22 3:59 a.m.•35 views

CVE-2016-0241

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP...

8.8CVSS8.2AI score0.018EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2016/10/22 1:00 a.m.•42 views

CVE-2016-0241

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP...

8.3AI score0.018EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/22 12:00 a.m.•6 views

CVE-2016-0241: Improper Access Control

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to spoof administrator accounts by sending a modified login request over HTTP...

8.8CVSS5.8AI score0.018EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2016/10/22 12:00 a.m.•4 views

PT-2016-4108

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor versions 8.2 before p310 IBM Security Guardium Database Activity Monitor versions 9.x through 9.5 before p700 IBM Security Guardium Database Activity Monitor versions 10.x through 10.1 before p10...

8.8CVSS0.018EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2016/10/13 8:17 a.m.•30 views

CVE-2016-5188

Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages...

6.5CVSS2.5AI score0.00971EPSS
SaveExploits0References2
Rows per page
Query Builder