Lucene search
K

3037 matches found

NVD
NVD
added 2019/10/31 9:15 p.m.20 views

CVE-2010-2548

IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files...

9.1CVSS9.2AI score0.01995EPSS
Exploits0References3
Prion
Prion
added 2019/10/31 9:15 p.m.11 views

Code injection

IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services...

6.4CVSS9AI score0.01938EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2019/10/31 9:15 p.m.9 views

Code injection

IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files...

6.4CVSS9AI score0.01995EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2019/10/31 8:57 p.m.26 views

CVE-2010-2783

IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services...

9.1AI score0.01938EPSS
Exploits0References4
CVE
CVE
added 2019/10/31 8:57 p.m.90 views

CVE-2010-2783

The CVE-2010-2783 entry concerns IcedTea6 prior to 1.7.4, where Extended JNLP Services allow unsigned applications to read and write arbitrary files. This is the core root cause described in multiple sources (IcedTea6

9.1CVSS8.9AI score0.01938EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2019/10/31 8:57 p.m.38 views

CVE-2010-2548

IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files...

9.1AI score0.01995EPSS
Exploits0References3
ArchLinux
ArchLinux
added 2019/10/23 12:0 a.m.30 views

[ASA-201910-13] pacman: arbitrary command execution

Arch Linux Security Advisory ASA-201910-13 ========================================== Severity: High Date : 2019-10-23 CVE-ID : CVE-2019-18182 CVE-2019-18183 Package : pacman Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-1049 Summary ======= The package...

9.8CVSS2.2AI score0.03672EPSS
Exploits2References7
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.2 views

The vulnerability of the Image Verification function in the Cisco IOS XE operating system allows a perpetrator to install malware onto a vulnerable device or upload malicious executable files.

The vulnerability of the Image Verification function in the Cisco IOS XE operating system is related to the lack of verification of file signatures during the system’s loading process. Exploiting this vulnerability allows a perpetrator to install malware onto a vulnerable device or load malicious...

6.8CVSS5.5AI score0.00237EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2019/10/03 12:0 a.m.9 views

PT-2019-5856 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: A floating point math calculation in the ScaleAnyToQuantum function of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigne...

9.1CVSS7.1AI score0.89855EPSS
Exploits65References335
OSV
OSV
added 2019/10/01 4:15 p.m.4 views

CVE-2019-14960

JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file...

7.8CVSS5.8AI score0.0034EPSS
Exploits0References1
NVD
NVD
added 2019/10/01 4:15 p.m.21 views

CVE-2019-14960

JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file...

7.8CVSS8.3AI score0.0034EPSS
Exploits0References1
Prion
Prion
added 2019/10/01 4:15 p.m.17 views

Design/Logic Flaw

JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file...

4.6CVSS7.6AI score0.0034EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/10/01 3:51 p.m.85 views

CVE-2019-14960

Affected product: JetBrains Rider. Issue: Rider before 2019.1.2 shipped with an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll, creating a potential trust/vector issue. Root cause: unsigned DLL in the Rider distribution (RIDER-27708 referenced in JetBrains Q2 2019 security bulletin). I...

7.8CVSS7.5AI score0.0034EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/10/01 3:51 p.m.21 views

CVE-2019-14960

JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file...

8.3AI score0.0034EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/27 12:0 a.m.2 views

Cisco Catalyst 3850 Series Switches and 9300 Series Switches IOS XE Data Forgery Issue Vulnerability

Cisco Catalyst 3850 Series Switches and Cisco Catalyst 9300 Series Switches are both products of Cisco Systems. the Cisco Catalyst 3850 Series Switches is a 3850 Series Switch. Cisco Catalyst 9300 Series Switches is a 9300 series switch.IOS XE is an operating system developed for its network...

7.2CVSS6.8AI score0.00237EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/26 12:0 a.m.2 views

Cisco NX-OS and Cisco IOS XE Data Forgery Issue Vulnerabilities

Cisco NX-OS Software and IOS XE are both products of Cisco Corporation.Cisco NX-OS Software is a set of data center-grade operating system software used by switches.IOS XE is a set of operating systems developed for use with its network devices. Cisco NX-OS and Cisco IOS XE in the data forgery...

7.2CVSS6.6AI score0.00304EPSS
Exploits0References1
OSV
OSV
added 2019/09/25 9:15 p.m.2 views

CVE-2019-12662

A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device. The vulnerability is due to improper...

6.7CVSS6.2AI score
Exploits0References1
OSV
OSV
added 2019/09/25 8:15 p.m.1 views

CVE-2019-12649

A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability exists because, under certain circumstances, an affected...

6.7CVSS6.7AI score
Exploits0References1
NVD
NVD
added 2019/09/25 8:15 p.m.18 views

CVE-2019-12649

A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability exists because, under certain circumstances, an affected...

7.2CVSS6.4AI score0.00237EPSS
Exploits0References1
Prion
Prion
added 2019/09/25 8:15 p.m.21 views

Design/Logic Flaw

A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability exists because, under certain circumstances, an affected...

7.2CVSS6.4AI score0.00237EPSS
Exploits0References1Affected Software2
Rows per page
Query Builder