Lucene search
+L

5834 matches found

securityvulns
securityvulns
•added 2015/05/05 12:00 a.m.•46 views

dnsmasq uninitialized memory dereference

Uninitilized memory dereference on DNS request parsing...

6.4CVSS3.6AI score0.04425EPSS
SaveExploits1References2Affected Software1
Exploit DB
Exploit DB
•added 2015/05/01 12:00 a.m.•65 views

Adobe Flash Player - UncompressViaZlibVariant Uninitialized Memory (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory', 'Description' = %q This module exploits an unintialized memory...

10CVSS5.5AI score0.81943EPSS
SaveExploits5
Packet Storm
Packet Storm
•added 2015/05/01 12:00 a.m.•66 views

Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory', 'Description' = %q This module exploits an unintialized memory...

10CVSS0.9AI score0.81943EPSS
SaveExploits5
zdt
zdt
•added 2015/05/01 12:00 a.m.•73 views

Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory Exploit

This Metasploit module exploits an uninitialized memory vulnerability in Adobe Flash Player. The vulnerability occurs in the ByteArray::UncompressViaZlibVariant method, which fails to initialize allocated memory. When using a correct memory layout this vulnerability leads to a ByteArray object...

10CVSS1.2AI score0.81943EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
•added 2015/05/01 12:00 a.m.•60 views

Mandriva Linux Security Advisory : sqlite3 (MDVSA-2015:217)

Multiple vulnerabilities has been found and corrected in sqlite3 : SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have...

7.5CVSS7.5AI score0.05684EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2015/04/28 12:00 a.m.•48 views

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2570-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2570-1 advisory. An issue was discovered in the HTML parser in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially...

7.5CVSS9.1AI score0.02951EPSS
SaveExploits1References13
OSV
OSV
•added 2015/04/24 5:59 p.m.•26 views

CVE-2015-3414

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

8.9AI score
SaveExploits0References19
Prion
Prion
•added 2015/04/24 5:59 p.m.•38 views

Design/Logic Flaw

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

7.5CVSS7.6AI score0.04663EPSS
SaveExploits0References15Affected Software6
NVD
NVD
•added 2015/04/24 5:59 p.m.•45 views

CVE-2015-3414

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

7.5CVSS7.9AI score0.04663EPSS
SaveExploits0References15
Debian CVE
Debian CVE
•added 2015/04/24 5:00 p.m.•60 views

CVE-2015-3414

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

7.5CVSS7.9AI score0.04663EPSS
SaveExploits0
Mend
Mend
•added 2015/04/24 5:00 p.m.•2 views

CVE-2015-3414

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

7.5CVSS0.04663EPSS
SaveExploits0References18
UbuntuCve
UbuntuCve
•added 2015/04/24 12:00 a.m.•59 views

CVE-2015-3414

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

7.5CVSS6.8AI score0.04663EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/04/24 12:00 a.m.•6 views

CVE-2015-3414: Use of Uninitialized Resource

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrate...

7.5CVSS7.7AI score0.04663EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/04/24 12:00 a.m.•3 views

PT-2015-6220

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.8.9 Description The issue is related to the improper implementation of the dequoting of collation-sequence names. This can be exploited by context-dependent attackers to cause a denial of service, resulting in...

7.5CVSS0.04663EPSS
SaveExploits0References305
Tenable Nessus
Tenable Nessus
•added 2015/04/20 12:00 a.m.•65 views

Debian DLA-204-1 : file security update

This update fixes the following issue in the file package : CVE-2014-9653 readelf.c does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service uninitialized memory access or possibly have unspecified other impa...

7.5CVSS7.9AI score0.04648EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2015/04/20 12:00 a.m.•50 views

FreeBSD : sqlite -- multiple vulnerabilities (dec3164f-3121-45ef-af18-bb113ac5082f)

NVD reports : SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, ...

7.5CVSS7.6AI score0.05684EPSS
SaveExploits0References8
Debian
Debian
•added 2015/04/19 1:06 p.m.•86 views

[SECURITY] [DLA 204-1] file security update

Package : file Version : 5.04-5+squeeze10 CVE ID : CVE-2014-9653 Debian Bug : 777585 This update fixes the following issue in the file package: CVE-2014-9653 readelf.c does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a...

7.5CVSS7.2AI score0.04648EPSS
SaveExploits0
securityvulns
securityvulns
•added 2015/04/17 12:00 a.m.•34 views

less uninitialized memory reference

No description provided...

10CVSS2.4AI score0.03881EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2015/04/05 9:59 p.m.•45 views

CVE-2015-0777

drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 aka the Xen 3.4.x support patches for the Linux kernel 2.6.18, as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory...

2.1CVSS5AI score0.00413EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/04/05 12:00 a.m.•5 views

CVE-2015-0777: Exposure of Sensitive Information to an Unauthorized Actor

drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 aka the Xen 3.4.x support patches for the Linux kernel 2.6.18, as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory...

2.1CVSS6.5AI score0.00413EPSS
SaveExploits0References2
Rows per page
Query Builder