Lucene search
+L

8655 matches found

n0where
n0where
added 2017/02/13 9:25 p.m.26 views

USB Key Cleaner: CIRCLean

USB Key Cleaner Malware regularly uses USB sticks to infect victims, and the abuse of USB sticks is a common vector of infection. CIRCLean is an independent hardware solution to clean documents from untrusted obtained USB keys / USB sticks. The device automatically converts untrusted documents in...

7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2017/02/13 12:0 a.m.7 views

Nitro Pro Remote Code Execution Vulnerability

Nitro Pro is a U.S. company Nitro PDF production and management software. A remote code execution vulnerability exists in the PDF parsing feature of Nitro Pro 10. An attacker could exploit the vulnerability to send a specific PDF file to the victim, leading to potential code execution...

8.8CVSS8.4AI score0.01958EPSS
SaveExploits1References1
Prion
Prion
added 2017/02/10 5:59 p.m.20 views

Memory corruption

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability...

6.8CVSS7.3AI score0.01293EPSS
SaveExploits2References2Affected Software1
Fedora
Fedora
added 2017/02/10 2:25 p.m.32 views

[SECURITY] Fedora 25 Update: libwmf-0.2.8.4-50.fc25

A library for reading and converting Windows MetaFile vector graphics WMF...

9.8CVSS2.6AI score0.10687EPSS
SaveExploits0
CNVD
CNVD
added 2017/02/10 12:0 a.m.9 views

BitlBee Denial of Service Vulnerability

BitlBee is an irc server. A denial of service vulnerability exists in BitlBee. An attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS8AI score0.04041EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/02/10 12:0 a.m.8 views

Google Android Filesystem Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Google Android Filesystem. Attackers can use this vulnerability to obtain sensitive information and launch further attacks...

5.5CVSS6.1AI score0.00627EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/02/10 12:0 a.m.5 views

GStreamer gst-plugins-base denial of service vulnerability (CNVD-2017-01449)

GStreamer is a set of frameworks for handling streaming media. A denial of service vulnerability exists in GStreamer gst-plugins-base, which allows remote attackers to cause a denial of service stack overflow and crash via a nested WAVEFORMATEX vector...

7.5CVSS7.5AI score0.0448EPSS
SaveExploits0References1
OSV
OSV
added 2017/02/09 6:59 p.m.7 views

UBUNTU-CVE-2017-5180

Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option...

8.8CVSS7.3AI score0.00742EPSS
SaveExploits1References5
NVD
NVD
added 2017/02/06 5:59 p.m.19 views

CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.5CVSS5.1AI score0.00434EPSS
SaveExploits2References4
Prion
Prion
added 2017/02/06 5:59 p.m.17 views

Arbitrary file deletion

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

2.1CVSS5.2AI score0.00434EPSS
SaveExploits2References4Affected Software1
OSV
OSV
added 2017/02/06 5:59 p.m.3 views

UBUNTU-CVE-2016-7446

Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317...

9.8CVSS7.4AI score0.03987EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2017/02/06 5:0 p.m.72 views

CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.5CVSS5.5AI score0.00434EPSS
SaveExploits2
Debian CVE
Debian CVE
added 2017/02/06 5:0 p.m.74 views

CVE-2017-5595

A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile, which allows an authenticated attacker to read local system files e.g., /etc/passwd in the context of the web server user www-dat...

5.5CVSS3AI score0.00434EPSS
SaveExploits2
OSV
OSV
added 2017/02/03 3:59 p.m.4 views

DEBIAN-CVE-2016-5241

magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service arithmetic exception and application crash via a crafted svg file...

5.5CVSS6.7AI score0.01552EPSS
SaveExploits0References1
OSV
OSV
added 2017/02/03 3:59 p.m.4 views

DEBIAN-CVE-2016-9082

Integer overflow in the writepng function in cairo 1.14.6 allows remote attackers to cause a denial of service invalid pointer dereference via a large svg file...

5.5CVSS5.6AI score0.01995EPSS
SaveExploits0References1
OSV
OSV
added 2017/02/03 3:59 p.m.4 views

UBUNTU-CVE-2016-5241

magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service arithmetic exception and application crash via a crafted svg file...

5.5CVSS6.8AI score0.01552EPSS
SaveExploits0References2
OSV
OSV
added 2017/02/03 3:59 p.m.4 views

UBUNTU-CVE-2016-2318

GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SVG file, related to the 1 DrawImage function in magick/render.c, 2 SVGStartElement function in coders/svg.c, and 3 TraceArcPath function in magick/render.c...

5.5CVSS6.8AI score0.01879EPSS
SaveExploits0References3
OSV
OSV
added 2017/02/03 3:59 p.m.4 views

DEBIAN-CVE-2016-2318

GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted SVG file, related to the 1 DrawImage function in magick/render.c, 2 SVGStartElement function in coders/svg.c, and 3 TraceArcPath function in magick/render.c...

5.5CVSS6.6AI score0.01879EPSS
SaveExploits0References1
Mageia
Mageia
added 2017/02/02 8:11 a.m.54 views

Updated python-pycrypto packages fix security vulnerabilities

This is a security fix for a possible Buffer overflow. AES.new with invalid parameter crashes python. The IV parameter is currently ignored when initializing a cipher in ECB or CTR mode. There was a bug in pycrypto which could be exploited to get a shell...

9.8CVSS3.3AI score0.09501EPSS
SaveExploits1References4
OSV
OSV
added 2017/01/30 10:59 p.m.3 views

DEBIAN-CVE-2016-7798

The openssl gem for Ruby uses the same initialization vector IV in GCM Mode aes--gcm when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism...

7.5CVSS6.8AI score0.03167EPSS
SaveExploits1References1
Rows per page
Query Builder