Lucene search
+L

2028 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/20 12:00 a.m.•4 views

CVE-2016-7660: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "syslog" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references...

7.8CVSS8.2AI score0.01069EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2017/02/20 12:00 a.m.•1 views

PT-2017-1338

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2 macOS versions prior to 10.12.2 watchOS versions prior to 3.1.3 Description The issue involves the syslog component and allows local users to gain privileges via unspecified vectors related to Mach port name...

7.8CVSS0.01069EPSS
SaveExploits2References9
Cloud Foundry
Cloud Foundry
•added 2017/01/23 12:00 a.m.•31 views

CVE-2016-6660: Cloud Controller logs application environment variables | Cloud Foundry

CVE-2016-6660: Cloud Controller logs application environment variables Low Vendor Cloud Foundry Foundation Versions Affected Cloud Foundry Release versions prior to 250 CAPI versions prior to 1.12.0 Description The Cloud Foundry Cloud Controller /v2/apps endpoint logs environment variables in...

6AI score
SaveExploits0
Prion
Prion
•added 2017/01/13 9:59 a.m.•25 views

Design/Logic Flaw

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foundry logs the credentials returned from service brokers in Cloud Controller system component logs. These logs are written to disk and often sent to a log...

5CVSS7AI score0.01687EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2017/01/13 9:59 a.m.•27 views

CVE-2016-9882

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foundry logs the credentials returned from service brokers in Cloud Controller system component logs. These logs are written to disk and often sent to a log...

7.5CVSS6.7AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2017/01/13 9:00 a.m.•37 views

CVE-2016-9882

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foundry logs the credentials returned from service brokers in Cloud Controller system component logs. These logs are written to disk and often sent to a log...

7.4AI score0.01687EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/01/13 12:00 a.m.•5 views

PT-2017-10378

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v250 CAPI-release versions prior to v1.12.0 Description An issue was discovered where Cloud Foundry logs the credentials returned from service brokers in Cloud Controller system component...

7.5CVSS0.01687EPSS
SaveExploits0References4
Cloud Foundry
Cloud Foundry
•added 2017/01/09 12:00 a.m.•77 views

CVE-2016-9882: Cloud Foundry Logs Service Credentials | Cloud Foundry

CVE-2016-9882: Cloud Foundry Logs Service Credentials Medium Vendor Cloud Foundry Foundation Versions Affected cf-release versions prior to v250 CAPI-release versions prior to v1.12.0 Description Cloud Foundry logs the credentials returned from service brokers in Cloud Controller system component...

7.5CVSS7.5AI score0.01687EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2017/01/05 12:00 a.m.•80 views

Apple iOS < 10.2 Multiple Vulnerabilities

Binary data 9847.prm...

9.8CVSS7.8AI score0.0676EPSS
SaveExploits27References45
CNVD
CNVD
•added 2016/12/21 12:00 a.m.•10 views

Elevation of Privilege Vulnerability in the syslog Component of Multiple Apple Products

Apple iOS, watchOS, macOS, and tvOS are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is an operating system for smart televisions. syslog is one of the command-line syslog utility components that is used for a variety of tasks related to Apple's...

7.8CVSS6.4AI score0.01069EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2016/12/16 12:00 a.m.•58 views

Mac OS X 10.x < 10.12.2 Multiple Vulnerabilities

Binary data 9840.prm...

9.8CVSS6.6AI score0.0676EPSS
SaveExploits33References48
Tenable Nessus
Tenable Nessus
•added 2016/12/16 12:00 a.m.•108 views

macOS 10.12.x < 10.12.2 Multiple Vulnerabilities

The remote host is running a version of macOS that is 10.12.x prior to 10.12.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppleGraphicsPowerManagement - Assets - Audio - Bluetooth - CoreCapture - CoreFoundation - CoreGraphics - CoreMedia...

9.8CVSS7.8AI score0.63029EPSS
SaveExploits46References76
Tenable Nessus
Tenable Nessus
•added 2016/12/14 12:00 a.m.•36 views

Apple iOS < 10.2 Multiple Vulnerabilities

Binary data appleios102check.nbin...

9.8CVSS7.3AI score0.0676EPSS
SaveExploits27References70
Kitploit
Kitploit
•added 2016/11/09 1:49 p.m.•80 views

geoip-attack-map - Cyber Security GeoIP Attack Map Visualization

This geoip attack map visualizer was developed to display network attacks on your organization in real time. The data server follows a syslog file, and parses out source IP, destination IP, source port, and destination port. Protocols are determined via common ports, and the visualizations vary i...

7.4AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2016/11/02 12:00 a.m.•1529 views

MySQL / MariaDB / PerconaDB Root Privilege Escalation

============================================= - Release date: 01.11.2016 - Discovered by: Dawid Golunski - Severity: High/Critical - CVE-2016-6664 / OCVE-2016-5617 - http://legalhackers.com ============================================= I. VULNERABILITY ------------------------- MySQL / MariaDB /...

10CVSS1.1AI score0.6773EPSS
SaveExploits21
OSV
OSV
•added 2016/10/06 10:59 a.m.•17 views

CVE-2016-6653

The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...

7.5CVSS5.8AI score0.01363EPSS
SaveExploits0References2
NVD
NVD
•added 2016/10/06 10:59 a.m.•23 views

CVE-2016-6653

The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...

7.5CVSS7.3AI score0.01363EPSS
SaveExploits0References2
Prion
Prion
•added 2016/10/06 10:59 a.m.•28 views

Design/Logic Flaw

The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...

5CVSS6.7AI score0.01363EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2016/10/06 10:00 a.m.•36 views

CVE-2016-6653

The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...

7.3AI score0.01363EPSS
SaveExploits0References2
CVE
CVE
•added 2016/10/06 10:00 a.m.•57 views

CVE-2016-6653

Summary of CVE-2016-6653 (MariaDB audit_plugin in CF cf-mysql-release 27/28) The MariaDB audit_plugin integrated into PCF cf-mysql-release versions 27 and 28 can emit audit logs to syslog. A bug causes those logs to include sensitive information, potentially exposing application data and cleartex...

7.5CVSS7.3AI score0.01363EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder