Lucene search
+L

3208 matches found

BDU FSTEC
BDU FSTEC
•added 2017/05/18 12:00 a.m.•19 views

The vulnerability of the system call service in the FreeBSD operating system allows a hacker to gain privileged access.

The vulnerability of the system call handling function “issetugid” in the FreeBSD operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, who operates locally, to gain privileged access using undefined vectors...

7.3CVSS7.2AI score0.0038EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/15 12:00 a.m.•52 views

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10013 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

10CVSS2AI score0.1819EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/15 12:00 a.m.•47 views

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10007 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

10CVSS2AI score0.82593EPSS
SaveExploits8References1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/15 12:00 a.m.•47 views

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10006 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

10CVSS2AI score0.16544EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2017/05/15 12:00 a.m.•35 views

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10007 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

10CVSS2AI score0.1819EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/05/12 12:00 a.m.•10 views

Linux kernel denial of service vulnerability (CNVD-2017-07386)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel. A remote attacker could exploit this...

7.8CVSS6.5AI score0.01422EPSS
SaveExploits6References1
OSV
OSV
•added 2017/05/10 4:29 p.m.•15 views

CVE-2017-8890

The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service double free or possibly have unspecified other impact by leveraging use of the accept system call...

7.8CVSS7.8AI score
SaveExploits0References9
OSV
OSV
•added 2017/05/10 4:29 p.m.•8 views

DEBIAN-CVE-2017-8890

The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service double free or possibly have unspecified other impact by leveraging use of the accept system call...

7.8CVSS6.5AI score0.01422EPSS
SaveExploits6References1
Mend
Mend
•added 2017/05/10 4:00 p.m.•2 views

CVE-2017-8890

The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service double free or possibly have unspecified other impact by leveraging use of the accept system call...

8.5CVSS0.01422EPSS
SaveExploits6References12
Positive Technologies
Positive Technologies
•added 2017/05/10 12:00 a.m.•17 views

PT-2017-2033

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.10.15 Description The issue is related to the inet csk clone lock function in the Linux kernel, which can be exploited to cause a denial of service due to a double free error. This can be achieved by leveraging...

10CVSS6.6AI score0.01422EPSS
SaveExploits6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/10 12:00 a.m.•6 views

CVE-2017-8890: Double Free

The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service double free or possibly have unspecified other impact by leveraging use of the accept system call...

7.8CVSS6.3AI score0.01422EPSS
SaveExploits6References2
UbuntuCve
UbuntuCve
•added 2017/05/10 12:00 a.m.•63 views

CVE-2017-8890

The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service double free or possibly have unspecified other impact by leveraging use of the accept system call...

7.8CVSS6.5AI score0.01422EPSS
SaveExploits6References8
OSV
OSV
•added 2017/05/10 12:00 a.m.•11 views

UBUNTU-CVE-2017-8890

The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service double free or possibly have unspecified other impact by leveraging use of the accept system call...

7.8CVSS6.5AI score0.01422EPSS
SaveExploits6References9
Tenable Nessus
Tenable Nessus
•added 2017/05/01 12:00 a.m.•238 views

EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1057)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in the way the Linux kernel's Datagram Congestion Control Protocol DCCP implementation freed SKB socket buffer...

7.8CVSS6.9AI score0.0596EPSS
SaveExploits15References6
BDU FSTEC
BDU FSTEC
•added 2017/04/17 12:00 a.m.•16 views

The vulnerability of the udp.c component in the Linux operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the udp.c component in the Linux operating system’s kernel is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending UDP packets that trigger insecure calculations of...

10CVSS7.8AI score0.12824EPSS
SaveExploits1References11Affected Software2
myhack58
myhack58
•added 2017/04/15 12:00 a.m.•436 views

Linux kernel ipv4/udp. c remote arbitrary code execution(CVE-2016-10229)-vulnerability warning-the black bar safety net

! Vulnerability description The Linux kernel is the United States, the Linux Foundation released theoperating systemLinux the kernel. Linux kernel 4.5 the previous version of the udp. c file there is a security vulnerability, the Linux kernel udp. c allows a remote attacker via UDP traffic to...

2.5AI score0.12824EPSS
SaveExploits1
Packet Storm
Packet Storm
•added 2017/04/14 12:00 a.m.•53 views

AlienVault USM/OSSIM 5.3.4 / 5.3.5 Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'AlienVault USM/OSSIM API Command Execution', 'Description' = %q This module exploits an unauthenticated command injection in...

1.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2017/04/14 12:00 a.m.•377 views

Linux kernel 'udp. c' remote code execution vulnerability(CVE-2016-10229)

The Linux kernel allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag. This may create a kernel panic or memory corruption leading to privilege escalation...

10CVSS9.5AI score0.12824EPSS
SaveExploits1
exploitpack
exploitpack
•added 2017/04/13 12:00 a.m.•25 views

Microsoft Windows Kernel - win32kfull!SfnINLPUAHDRAWMENUITEM Stack Memory Disclosure

Microsoft Windows Kernel - win32kfull!SfnINLPUAHDRAWMENUITEM Stack Memory Disclosure / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1192 We have discovered that it is possible to disclose portions of uninitialized kernel stack memory to user-mode applications in Windows 10...

7.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2017/04/12 10:51 a.m.•97 views

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.8CVSS6.7AI score0.0596EPSS
SaveExploits21References7
Rows per page
Query Builder