Lucene search
+L

2188 matches found

OpenVAS
OpenVAS
•added 2018/05/04 12:00 a.m.•53 views

Kaspersky Password Manager DLL Hijacking Vulnerability (May 2018) - Windows

Kaspersky Password Manager is prone to a DLL hijacking vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.8CVSS7.7AI score0.026EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/04/25 9:00 p.m.•46 views

CVE-2018-5486

NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol JDWP enabled which allows unauthorized local attackers to execute arbitrary code...

7.8AI score0.00393EPSS
SaveExploits0References1
Prion
Prion
•added 2018/04/19 1:29 p.m.•32 views

Design/Logic Flaw

Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538...

6.8CVSS7.8AI score0.026EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/04/19 1:29 p.m.•30 views

CVE-2018-6306

Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538...

7.8CVSS7.9AI score0.026EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/19 12:00 a.m.•6 views

CVE-2018-6306: Untrusted Search Path

Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538...

7.8CVSS7.5AI score0.026EPSS
SaveExploits0References2
OSV
OSV
•added 2018/02/27 3:29 p.m.•27 views

CVE-2017-15692

In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath...

9.8CVSS9.8AI score
SaveExploits0References2
zdt
zdt
•added 2018/02/26 12:00 a.m.•48 views

Audio Cutter Software - Code Injection Vulnerability

Exploit for windows platform in category dos / poc Technical Details: ================= Vulnerability Title: Audio Cutter Software - Code Injection Vulnerability Tool Name: Weeny Audio Cutter Software v1.5 Critical Level: High Author: Ajay Gowtham aka AJOXR Blackhat forums Type: Software Security...

7AI score
SaveExploits0
CNVD
CNVD
•added 2018/02/26 12:00 a.m.•30 views

Apache JMeter Security Bypass Vulnerability

Apache JMeter is the United States Apache Apache Software Foundation of a set of open source software written in Java language for stress testing and performance testing . A security vulnerability exists in Apache JMeter. An attacker can exploit the vulnerability to gain access to JMeterEngine an...

9.8CVSS7AI score0.03352EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/14 2:29 p.m.•24 views

Design/Logic Flaw

In Apache JMeter 2.X and 3.X, when using Distributed Test only RMI based, jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

7.5CVSS9.2AI score0.03352EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2018/02/14 2:29 p.m.•26 views

CVE-2018-1287

In Apache JMeter 2.X and 3.X, when using Distributed Test only RMI based, jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

9.8CVSS9.5AI score
SaveExploits0References3
OSV
OSV
•added 2018/02/14 2:29 p.m.•22 views

DEBIAN-CVE-2018-1287

In Apache JMeter 2.X and 3.X, when using Distributed Test only RMI based, jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

9.8CVSS6.9AI score0.03352EPSS
SaveExploits0References1
Mend
Mend
•added 2018/02/14 2:00 p.m.•3 views

CVE-2018-1287

In Apache JMeter 2.X and 3.X, when using Distributed Test only RMI based, jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

9.8CVSS0.03352EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2018/02/14 2:00 p.m.•43 views

CVE-2018-1287

In Apache JMeter 2.X and 3.X, when using Distributed Test only RMI based, jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

9.4AI score0.03352EPSS
SaveExploits0References3
CVE
CVE
•added 2018/02/14 2:00 p.m.•119 views

CVE-2018-1287

CVE-2018-1287 affects Apache JMeter 2.X and 3.X in Distributed Test (RMI-based) mode, where the jmeter server binds the RMI Registry to a wildcard host. This can allow an attacker to gain access to the JMeterEngine and send unauthorized code. The available connected documents confirm the vulnerab...

9.8CVSS9.2AI score0.03352EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/14 12:00 a.m.•6 views

CVE-2018-1287: Undefined Security Weakness

In Apache JMeter 2.X and 3.X, when using Distributed Test only RMI based, jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

9.8CVSS8.2AI score0.03352EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/02/14 12:00 a.m.•2 views

PT-2018-11443

Name of the Vulnerable Software and Affected Versions Apache JMeter versions 2.X through 3.X Description The issue arises when Apache JMeter is used in Distributed Test mode, which is RMI-based. In this scenario, the jmeter server binds the RMI Registry to a wildcard host, potentially allowing an...

9.8CVSS0.03352EPSS
SaveExploits0References19
OSV
OSV
•added 2018/02/13 12:29 p.m.•82 views

DEBIAN-CVE-2018-1297

When using Distributed Test only RMI based, Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

9.8CVSS6.9AI score0.11364EPSS
SaveExploits1References1
NVD
NVD
•added 2018/02/13 12:29 p.m.•35 views

CVE-2018-1297

When using Distributed Test only RMI based, Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

9.8CVSS9.4AI score0.11364EPSS
SaveExploits1References3
OSV
OSV
•added 2018/02/13 12:29 p.m.•32 views

CVE-2018-1297

When using Distributed Test only RMI based, Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

9.8CVSS9.5AI score
SaveExploits0References3
OSV
OSV
•added 2018/02/13 12:29 p.m.•48 views

UBUNTU-CVE-2018-1297

When using Distributed Test only RMI based, Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code...

9.8CVSS7.3AI score0.11364EPSS
SaveExploits1References4
Rows per page
Query Builder