Lucene search
+L

2686 matches found

OSV
OSV
•added 2016/12/06 12:00 a.m.•10 views

UBUNTU-CVE-2016-5221

Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page...

6.3CVSS7.1AI score0.01081EPSS
SaveExploits0References4
myhack58
myhack58
•added 2016/11/11 12:00 a.m.•47 views

Gmail account hijacking vulnerability-vulnerability warning-the black bar safety net

Description Gmail allows worldwide users to use multiple mailboxes to associate their Gmail, Gmail also allows a mailbox to use multiple addresses to the mailbox to send the mail will be pooled to the same mailbox. To be honest, these two modes of identity confirmation on the presence of risk, to...

7.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2016/11/09 12:00 a.m.•1372 views

HP System Management Homepage < 7.6 Multiple Vulnerabilities (HPSBMU03653) (httpoxy)

According to its banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.6. It is, therefore, affected by the following vulnerabilities : - A heap buffer overflow condition exists in OpenSSL in the EVPEncodeUpdate function within file...

9.8CVSS8.4AI score0.89058EPSS
SaveExploits20References28
CNVD
CNVD
•added 2016/11/06 12:00 a.m.•17 views

Moxa OnCell Series Product Validation Bypass Vulnerability

MOXA OnCell is an industrial grade IP gateway product. The Moxa OnCell Series product authentication bypass vulnerability can be exploited by an attacker to bypass authentication mechanisms and gain unauthorized access...

6.5CVSS7.2AI score0.01319EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2016/11/04 12:00 a.m.•14 views

Magento Community Edition < 1.9.3 Multiple Vulnerabilities

Binary data 8963.prm...

7.3AI score
SaveExploits0References1
CNVD
CNVD
•added 2016/11/03 12:00 a.m.•12 views

Python urllib3 TLS certificate validation security bypass vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. A TLS certificate validation security bypass vulnerability exists in versions 1.17 and 1.18 of the urllib3 library for Python, which could allow an attacker to perform a man-in-the-middle attack or...

3.7CVSS9.1AI score0.00754EPSS
SaveExploits0References1
OSV
OSV
•added 2016/10/28 3:59 p.m.•17 views

CVE-2016-8600

In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later...

7.5CVSS7.6AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2016/10/13 8:17 a.m.•41 views

CVE-2016-5193

Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass restrictions on navigation to certain URL schemes via crafted HTML pages...

4.3CVSS2.6AI score0.01216EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/10/04 12:00 a.m.•36 views

Debian DLA-642-1 : ruby-activerecord-3.2 security update

Active Record in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters. For Debian 7 'Wheezy', these problems...

5.3CVSS6.2AI score0.07157EPSS
SaveExploits0References3
OSV
OSV
•added 2016/09/27 12:00 a.m.•13 views

UBUNTU-CVE-2016-7444

The gnutlsocsprespcheckcrt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by...

7.5CVSS7.2AI score0.02437EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2016/09/25 8:00 p.m.•40 views

CVE-2016-7549

Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service invalid pointer dereference and application crash or possibly have unspecified other impact by leveragi...

7.1AI score0.01074EPSS
SaveExploits0References6
CVE
CVE
•added 2016/09/09 2:00 p.m.•62 views

CVE-2016-1280

CVE-2016-1280 affects Juniper Junos OS: remote attackers can bypass certificate validation by presenting a self-signed cert whose issuer name matches a valid Junos CA, impacting certificates used for IKE/IPsec. Affected Junos versions span many 12.x–16.1 releases (e.g., before specific revisions ...

6.5CVSS6.4AI score0.00666EPSS
SaveExploits0References3Affected Software1
android
android
•added 2016/09/01 12:00 a.m.•68 views

CVE-2016-5340

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...

7.2CVSS5.6AI score0.00303EPSS
SaveExploits0References3
OSV
OSV
•added 2016/08/05 1:29 p.m.•12 views

USN-3041-1 oxide-qt vulnerabilities

Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial of service application crash or execute arbitrary code. CVE-2016-1705 It was discovered...

9.6CVSS6.9AI score0.02251EPSS
SaveExploits1References15
Packet Storm
Packet Storm
•added 2016/07/08 12:00 a.m.•52 views

BMW ConnectedDrive Session Validation

Document Title: =============== BMW ConnectedDrive - Update VIN Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1736 Release Date: ============= 2016-07-07 Vulnerability Laboratory ID VL-ID: ==================================== 1736...

7.4AI score
SaveExploits0
nodejs
nodejs
•added 2016/07/05 3:50 p.m.•51 views

Route Validation Bypass

Overview Affected versions of call do not validate empty parameters, which may result in a bypass of route validation rules. Proof of Concept Routing Scheme: /api/param/param2/details Triggering Request Path: /api/// Recommendation Update to version 3.0.2 or later. References - Issue 3228 - GitHu...

5CVSS3.3AI score0.01235EPSS
SaveExploits1Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/06/20 8:20 a.m.•14 views

Apache Struts vulnerable to input validation bypass

Overview Apache Struts provided by the Apache Software Foundation is a software framework for creating web applications in Java. Web applications that are developed using Apache Struts 2 contain an input validation bypass vulnerability. Takeshi Terada of Mitsui Bussan Secure Directions, Inc...

7.5CVSS6.7AI score0.09755EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/06/20 8:19 a.m.•13 views

Apache Struts vulnerable to validation bypass in Getter method

Overview Apache Struts provided by the Apache Software Foundation is a software framework for creating web applications in Java. Web applications that are developed using Apache Struts 2 contain a validation bypass in Getter method vulnerability. JPCERT/CC Addendum Update: August 25, 2016...

7.5CVSS6.8AI score0.09755EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/06/20 12:00 a.m.•87 views

JVN#45093481: Multiple vulnerabilities in Apache Struts 2

Apache Struts 2 provided by the Apache Software Foundation is a software framework for creating web applications in Java. Web applications that are developed using Apache Struts 2 contain multiple vulnerabilities listed below. Cross-site request forgery S2-038 - CVE-2016-4430 Version| Vector|...

8.8CVSS8.5AI score0.09755EPSS
SaveExploits0
CNVD
CNVD
•added 2016/06/16 12:00 a.m.•15 views

Apache Struts2 Remote Code Execution Vulnerability (CNVD-2016-04092)

Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of open source MVC framework for creating enterprise-class Java Web applications , mainly provides two versions of the framework products , Struts 1 and Struts 2...

8.8CVSS9.7AI score0.03701EPSS
SaveExploits0References1
Rows per page
Query Builder