Lucene search
+L

1765 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/11 12:00 a.m.•5 views

CVE-2016-0187: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Microsoft 1 JScript 5.8 and 2 VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a...

7.6CVSS7.9AI score0.21591EPSS
SaveExploits0References2
OSV
OSV
•added 2016/04/14 2:59 p.m.•7 views

DEBIAN-CVE-2015-8554

Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional aka qemu-dm device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries,...

7.5CVSS7.9AI score0.004EPSS
SaveExploits0References1
Prion
Prion
•added 2016/04/14 2:59 p.m.•32 views

Buffer overflow

Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional aka qemu-dm device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries,...

6.6CVSS7AI score0.004EPSS
SaveExploits0References6Affected Software1
Citrix
Citrix
•added 2016/04/14 12:00 a.m.•19 views

Receiver pass through is failing with Storefront when we are trying to launch application across domains/forests.

We have two domains “Domain1.com" and "Domain2.com" in different forest. External two way trust relationship exists between 2 domains. XenApp and XML servers are in “Domain2.com" domain and Store front servers are in “Domain1.com" domain. Few users in "Domain1.com" domain is part of a global grou...

6.8AI score
SaveExploits0
OSV
OSV
•added 2016/04/13 3:59 p.m.•12 views

DEBIAN-CVE-2015-8551

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service NULL pointer dereference and host OS crash by leveraging a system with access to a...

6CVSS6AI score0.00451EPSS
SaveExploits0References1
NVD
NVD
•added 2016/04/13 3:59 p.m.•27 views

CVE-2015-8551

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service NULL pointer dereference and host OS crash by leveraging a system with access to a...

6CVSS6.1AI score0.00451EPSS
SaveExploits0References12
Cvelist
Cvelist
•added 2016/04/13 3:00 p.m.•57 views

CVE-2015-8551

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service NULL pointer dereference and host OS crash by leveraging a system with access to a...

5.9AI score0.00451EPSS
SaveExploits0References12
Debian CVE
Debian CVE
•added 2016/04/13 3:00 p.m.•77 views

CVE-2015-8552

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service disk consumption by leveraging a system with access to a...

4.4CVSS6.5AI score0.00446EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/03/09 12:00 a.m.•2 views

CVE-2016-0112: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0105, CVE-2016-0107, CVE-2016-0111, an...

7.6CVSS7.8AI score0.16247EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/03/09 12:00 a.m.•5 views

CVE-2016-0111: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0105, CVE-2016-0107,...

7.6CVSS7.8AI score0.39402EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/03/09 12:00 a.m.•3 views

CVE-2016-0113: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0105, CVE-2016-0107, CVE-2016-0111, an...

7.6CVSS7.8AI score0.16247EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/02/18 12:00 a.m.•3 views

CVE-2016-0069: Undefined Security Weakness

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0068...

9.3CVSS7.8AI score0.18785EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/02/10 12:00 a.m.•6 views

CVE-2016-0059: Exposure of Sensitive Information to an Unauthorized Actor

The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a 1 e-mail message or 2 Office document, aka "Internet Explorer Information Disclosure Vulnerability."...

4.3CVSS6.1AI score0.23112EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/02/10 12:00 a.m.•4 views

CVE-2016-0077: Undefined Security Weakness

Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."...

4.3CVSS6.7AI score0.0972EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/02/10 12:00 a.m.•4 views

CVE-2016-0060: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0061, CVE-2016-0063,...

9.3CVSS8.3AI score0.27147EPSS
SaveExploits0References2
CERT
CERT
•added 2016/01/20 12:00 a.m.•75 views

ffmpeg and Libav cross-domain information disclosure vulnerability

Overview ffmpeg is a "cross-platform solution to record, convert and stream audio and video". ffmpeg is vulnerable to local file disclosure due to improper enforcement of domain restrictions when processing playlist files. Description CWE-201: Information Exposure Through Sent Data- CVE-2016-1897...

5.5CVSS5.5AI score0.14621EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/01/13 12:00 a.m.•5 views

CVE-2016-0005: Improper Input Validation

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability."...

4.3CVSS6.1AI score0.27575EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/12/23 12:00 a.m.•7 views

CVE-2015-7927: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

6.1CVSS6.4AI score0.02047EPSS
SaveExploits1References2
Citrix
Citrix
•added 2015/12/17 12:00 a.m.•22 views

How to Manually Install and Configure Citrix Receiver for Pass-Through Authentication

Citrix Workspace app is the new universal app for all workspace services, that will encompass all Citrix clients and app capabilities over time. This article describes how to install Citrix Receiver for Windows and configure Single Sign-on authentication to XenApp/XenDesktop. After configuring...

7.3AI score
SaveExploits0
OSV
OSV
•added 2015/12/17 12:00 a.m.•13 views

UBUNTU-CVE-2015-8552

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service disk consumption by leveraging a system with access to a...

4.4CVSS6.5AI score0.00446EPSS
SaveExploits0References11
Rows per page
Query Builder