Lucene search
K

4493 matches found

BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.4 views

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to the use of memory after it is freed in the ChildThread::Shutdown function in the content/child/childthread.cc API file system. This vulnerability allows a malicious actor to cause a service failure or otherwise affect the system by usi...

7.5CVSS7.7AI score0.01922EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.4 views

Vulnerability of the Windows operating system, allowing for an increase in privilege levels

The vulnerability that allows for increased privilege levels is related to the improper use of the Windows kernel mode driver’s window descriptors for objects in memory that belong to the thread. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated...

7.2CVSS6AI score0.01591EPSS
Exploits0References3
OSV
OSV
added 2016/06/27 10:59 a.m.1 views

DEBIAN-CVE-2016-5828

The startthread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service invalid process state or TM Bad Thing exception, and system crash or possibly have unspecified oth...

7.8CVSS6.5AI score0.00089EPSS
Exploits0References1
OSV
OSV
added 2016/06/27 12:0 a.m.0 views

UBUNTU-CVE-2016-5828

The startthread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service invalid process state or TM Bad Thing exception, and system crash or possibly have unspecified oth...

7.8CVSS6.8AI score0.00089EPSS
Exploits0References9
n0where
n0where
added 2016/06/15 4:33 p.m.172 views

Bruteforce BitCoin Wallet

The purpose of this program is to try to find the password of an encrypted Peercoin or Bitcoin, Litecoin, etc… wallet file i.e. wallet.dat. It can be used in two ways: try all the possible passwords given a charset try all the passwords in a file There is a command line option to specify the numb...

2AI score
Exploits0References1
Exploit DB
Exploit DB
added 2016/06/10 12:0 a.m.52 views

Google Android - '/system/bin/sdcard' Stack Buffer Overflow (PoC)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=798 Android: Stack-buffer-overflow in /system/bin/sdcard There's an integer overflow issue in getnodepathlocked, which results in a buffer overflow. For all of the calling paths, this is going to overflow a stack buffer in the pare...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2016/06/03 12:0 a.m.30 views

Oracle MySQL Multiple Unspecified Vulnerabilities - 18 (Jun 2016) - Linux

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...

6.8CVSS6.7AI score0.01077EPSS
Exploits0References7
OSV
OSV
added 2016/05/31 12:0 a.m.68 views

DLA-499-1 php5 - security update

Bulletin has no description...

9.8CVSS8.1AI score0.3258EPSS
Exploits15
CNVD
CNVD
added 2016/05/23 12:0 a.m.3 views

PHP Denial of Service Vulnerability (CNVD-2016-03580)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

7.1CVSS6.6AI score0.0037EPSS
Exploits0References1
NVD
NVD
added 2016/05/22 1:59 a.m.18 views

CVE-2015-8878

main/phpopentemporaryfile.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service race condition and heap memory corruption by leveraging an application that performs many temporary-file accesses...

7.1CVSS6.5AI score0.0037EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2016/05/22 1:59 a.m.23 views

CVE-2015-8878

main/phpopentemporaryfile.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service race condition and heap memory corruption by leveraging an application that performs many temporary-file accesses...

7.1CVSS6.6AI score0.0037EPSS
Exploits0References2
OSV
OSV
added 2016/05/22 1:59 a.m.1 views

UBUNTU-CVE-2015-8866

ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from libxmldisableentityloader changes in other threads, which allows remote attackers to conduct XML External Entity XXE and XML Entity Expansion XEE attacks via a crafted XML...

9.6CVSS7.2AI score0.03531EPSS
Exploits1References5
Prion
Prion
added 2016/05/22 1:59 a.m.22 views

Race condition

main/phpopentemporaryfile.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service race condition and heap memory corruption by leveraging an application that performs many temporary-file accesses...

7.1CVSS7.2AI score0.0037EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2016/05/22 1:0 a.m.23 views

CVE-2015-8878

main/phpopentemporaryfile.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service race condition and heap memory corruption by leveraging an application that performs many temporary-file accesses...

7.3AI score0.0037EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2016/05/20 12:0 a.m.2 views

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Android operating system exists due to the lack of restrictions on the number of threads. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a specially crafted media file...

10CVSS8.2AI score0.01215EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/05/12 12:0 a.m.48 views

openSUSE Security Update : php5 (openSUSE-2016-576)

This update for php5 fixes the following issues : - CVE-2016-4073: A remote attacker could have caused denial of service, or possibly execute arbitrary code, due to incorrect handling of string length calculations in mbstrcut bsc977003 - CVE-2016-3074: Signedness vulnerability in bundled libgd ma...

9.8CVSS8.6AI score0.60488EPSS
Exploits13References12
RedHat Linux
RedHat Linux
added 2016/05/11 2:9 p.m.4 views

OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization...

10CVSS7.4AI score0.04075EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2016/05/09 2:4 p.m.3 views

OpenJDK: insufficient thread consistency checks in ObjectInputStream (Serialization, 8129952)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization...

10CVSS7.4AI score0.04075EPSS
Exploits0References5
OSV
OSV
added 2016/05/09 10:59 a.m.1 views

UBUNTU-CVE-2016-2428

libAACdec/src/aacdecdrc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via...

9.8CVSS6.2AI score0.01215EPSS
Exploits0References4
Cvelist
Cvelist
added 2016/05/06 5:0 p.m.25 views

CVE-2016-2094

The HTTPS NIO Connector allows remote attackers to cause a denial of service thread consumption by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability...

7.3AI score0.01813EPSS
Exploits0References6
Rows per page
Query Builder