Lucene search
+L

2501 matches found

CNVD
CNVD
added 2017/02/03 12:00 a.m.6 views

Microsoft Windows SMBv3 Denial of Service Vulnerability

SMB is a network file-sharing protocol that allows applications and end users to access file resources from a remote file server.Microsoft Windows is a popular operating system. A denial of service vulnerability exists in Microsoft Windows SMBv3. An attacker can launch a denial of service attack ...

6.7AI score
SaveExploits0References1
OSV
OSV
added 2017/02/01 8:59 p.m.8 views

CVE-2016-6020

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...

6.1CVSS5.6AI score0.01093EPSS
SaveExploits0References2
Prion
Prion
added 2017/01/26 3:59 p.m.16 views

Design/Logic Flaw

Characters from languages are such as Arabic, Hebrew are displayed from RTL Right To Left order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE70, U+0622, U+0623 etc and how they are rendered combined with first strong character such as an IP...

5.8CVSS7AI score0.0096EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2017/01/26 3:59 p.m.12 views

CVE-2016-6908

Characters from languages are such as Arabic, Hebrew are displayed from RTL Right To Left order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE70, U+0622, U+0623 etc and how they are rendered combined with first strong character such as an IP...

6.1CVSS5.8AI score0.0096EPSS
SaveExploits0References1
NVD
NVD
added 2017/01/26 3:59 p.m.29 views

CVE-2016-6908

Characters from languages are such as Arabic, Hebrew are displayed from RTL Right To Left order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE70, U+0622, U+0623 etc and how they are rendered combined with first strong character such as an IP...

6.1CVSS6.2AI score0.0096EPSS
SaveExploits0References1
CVE
CVE
added 2017/01/26 3:00 p.m.76 views

CVE-2016-6908

CVE-2016-6908 : In Opera for Android (version 37.0.2192.105088), mishandling of certain Unicode characters (e.g., U+FE70, U+0622, U+0623) can cause URLs to render in RTL order when combined with the first strong character (often an alphabetic character). This can enable address-bar display spoofi...

6.1CVSS6.2AI score0.0096EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2017/01/23 9:59 p.m.12 views

DEBIAN-CVE-2016-5119

The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the version check response and supplying a crafted update...

7.5CVSS7.7AI score0.02605EPSS
SaveExploits1References1
NVD
NVD
added 2017/01/15 2:59 a.m.23 views

CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

5.3CVSS7AI score0.04002EPSS
SaveExploits0References8
OSV
OSV
added 2017/01/15 2:59 a.m.20 views

DEBIAN-CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

5.3CVSS7AI score0.04002EPSS
SaveExploits0References1
OSV
OSV
added 2017/01/15 2:59 a.m.7 views

UBUNTU-CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

5.3CVSS6.8AI score0.04002EPSS
SaveExploits0References8
Prion
Prion
added 2017/01/15 2:59 a.m.24 views

Authentication flaw

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

5CVSS6.6AI score0.04002EPSS
SaveExploits0References8Affected Software1
UbuntuCve
UbuntuCve
added 2017/01/15 2:59 a.m.35 views

CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

5.3CVSS6.9AI score0.04002EPSS
SaveExploits0References7
CVE
CVE
added 2017/01/15 2:00 a.m.175 views

CVE-2017-5491

CVE-2017-5491 affects WordPress: wp-mail.php permits bypass of posting restrictions via a spoofed mail server named mail.example.com due to improper validation of mail server names. Affected: WordPress versions before 4.7.1. Remediation: upgrade to WordPress 4.7.1 or later (fixed in 4.7.1).

5.3CVSS6.8AI score0.04002EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2017/01/15 2:00 a.m.30 views

CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

6.9AI score0.04002EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2017/01/15 2:00 a.m.39 views

CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name...

5.3CVSS7.2AI score0.04002EPSS
SaveExploits0
Prion
Prion
added 2017/01/13 4:59 p.m.19 views

Code injection

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service prevent responses from the sources by sending responses with a spoofed source address...

4.3CVSS7AI score0.12466EPSS
SaveExploits0References11Affected Software9
NVD
NVD
added 2017/01/13 4:59 p.m.19 views

CVE-2016-7426

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service prevent responses from the sources by sending responses with a spoofed source address...

7.5CVSS7.4AI score0.12466EPSS
SaveExploits0References11
OSV
OSV
added 2017/01/13 4:59 p.m.12 views

CVE-2016-7426

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service prevent responses from the sources by sending responses with a spoofed source address...

7.5CVSS7.4AI score
SaveExploits0References11
Debian CVE
Debian CVE
added 2017/01/13 4:00 p.m.37 views

CVE-2016-7426

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service prevent responses from the sources by sending responses with a spoofed source address...

7.5CVSS6.6AI score0.12466EPSS
SaveExploits0
OSV
OSV
added 2017/01/13 12:00 a.m.6 views

UBUNTU-CVE-2016-7426

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service prevent responses from the sources by sending responses with a spoofed source address...

7.5CVSS6.8AI score0.12466EPSS
SaveExploits0References4
Rows per page
Query Builder