Lucene search
K

1307 matches found

UbuntuCve
UbuntuCve
added 2016/07/13 1:59 a.m.17 views

CVE-2016-4176

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service stack memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4177...

9.3CVSS7.5AI score0.48229EPSS
Exploits4References2
OSV
OSV
added 2016/07/13 1:59 a.m.0 views

UBUNTU-CVE-2016-4176

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service stack memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4177...

9.8CVSS7.6AI score0.48229EPSS
Exploits4References3
Prion
Prion
added 2016/07/13 1:59 a.m.18 views

Memory corruption

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service stack memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4176...

9.3CVSS8.9AI score0.48229EPSS
Exploits8References8Affected Software2
CVE
CVE
added 2016/07/13 1:0 a.m.83 views

CVE-2016-4177

Adobe Flash Player CVE-2016-4177 is an in-the-wild memory corruption/arbitrary code execution vulnerability. The CVE affects Windows and macOS builds prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209, and Linux builds before 11.2.202.632, with vectors unspecified in the provided sources. ...

9.3CVSS8.9AI score0.48229EPSS
Exploits4References8Affected Software1
CVE
CVE
added 2016/07/13 1:0 a.m.83 views

CVE-2016-4176

Adobe Flash Player has a memory corruption vulnerability (stack memory corruption) that could allow arbitrary code execution or a denial of service. Affected: Windows/macOS Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux before 11.2.202.632. Root cause/impact described in CV...

9.3CVSS8.9AI score0.48229EPSS
Exploits4References8Affected Software1
CNVD
CNVD
added 2016/07/13 12:0 a.m.1 views

Adobe Flash Player Arbitrary Code Execution Vulnerability (CNVD-2016-04761)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute...

9.3CVSS7.6AI score0.48229EPSS
Exploits4References1
Positive Technologies
Positive Technologies
added 2016/07/12 12:0 a.m.3 views

PT-2016-2369 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 18.0.0.366 Adobe Flash Player versions 19.x through 22.x before 22.0.0.209 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.632 on Linux Description: The issue is caused by a buffer...

10CVSS8.2AI score0.75305EPSS
Exploits26References292
Tenable Nessus
Tenable Nessus
added 2016/07/08 12:0 a.m.21 views

OpenSSL 1.0.1 < 1.0.1t / 1.0.2 < 1.0.2h Multiple Vulnerabilities

Binary data 9390.prm...

8.2CVSS7.3AI score0.79963EPSS
Exploits6References8
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.0 views

The vulnerability of the OpenSSL software allows a malicious attacker to compromise the confidentiality of protected information.

The vulnerability exists in the OBJobj2txt function in crypto/objects/objdat.c of OpenSSL. This vulnerability arises due to the absence of the '\0' character. Exploiting this vulnerability allows attackers to access confidential information from the stack memory of the process, by using the outpu...

4.3CVSS6.5AI score0.03123EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.0 views

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.

A vulnerability exists in the lliucligetname function in the Linux kernel’s net/llc/afllc.c file, due to incorrect return values under certain circumstances. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory, using a specially craft...

1.9CVSS6.6AI score0.0012EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.1 views

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.

The vulnerability exists in the tunchrioctl function in the drivers/net/tun.c kernel module of Linux, due to the lack of initialization for certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory through a specially...

1.9CVSS6.7AI score0.0002EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.1 views

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.

The vulnerability exists in the Linux kernel’s Bluetooth protocol stack due to improper initialization of certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory by using a specially crafted application that utilizes...

1.9CVSS5.5AI score0.00103EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.1 views

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.

Errors in the operation of the cpqarray driver for Compaq Smart2 Controllers, as well as the cciss driver for HP Smart Array controllers, allow users to access the kernel memory...

2.1CVSS7.5AI score0.00104EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.1 views

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.

A vulnerability exists in the ccid3hctxgetsockopt function in the Linux kernel’s net/dccp/ccids/ccid3.c file, due to the lack of initialization for certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory through a...

1.9CVSS5.5AI score0.00076EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.0 views

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.

The vulnerability exists in the devifconf function in the net/socket.c kernel of Linux, due to the lack of initialization for certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory through a specially crafted...

1.9CVSS5.4AI score0.00078EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2016/06/29 12:0 a.m.2 views

Linux kernel competitive conditions vulnerability (CNVD-2016-04425)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A contention condition vulnerability exists in the 'vopioctl' function in the drivers/misc/mic/vop/vopvringh.c file in Linux kernel 4.6 and earlier. A local attacker can explo...

6.3CVSS7.8AI score0.00048EPSS
Exploits0References1
CNVD
CNVD
added 2016/06/29 12:0 a.m.2 views

Linux kernel information disclosure vulnerability (CNVD-2016-04424)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the 'schedreadattr' function in the kernel/sched/core.c file in versions of Linux kernel 3.14-rc4 prior to 3.14-rc, which stems from a progr...

5.5CVSS6AI score0.0005EPSS
Exploits0References1
NVD
NVD
added 2016/06/27 10:59 a.m.33 views

CVE-2016-5244

The rdsincinfocopy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message...

7.5CVSS7AI score0.00558EPSS
Exploits0References24
NVD
NVD
added 2016/06/27 10:59 a.m.22 views

CVE-2016-5243

The tipcnlcompatlinkdump function in net/tipc/netlinkcompat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message...

5.5CVSS5.7AI score0.00027EPSS
Exploits0References16
OSV
OSV
added 2016/06/27 10:59 a.m.4 views

CVE-2016-5243

The tipcnlcompatlinkdump function in net/tipc/netlinkcompat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message...

5.5CVSS7.2AI score
Exploits0References16
Rows per page
Query Builder