CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

929 matches found

UbuntuCve•added 2018/02/27 3:29 p.m.•32 views

CVE-2018-0489

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this...

6.5CVSS6.7AI score0.02107EPSS

SaveExploits0References3

Prion•added 2018/02/27 3:29 p.m.•22 views

Design/Logic Flaw

6.4CVSS6.5AI score0.02107EPSS

SaveExploits2References6Affected Software3

Cvelist•added 2018/02/27 3:00 p.m.•56 views

CVE-2018-0489

6.6AI score0.02107EPSS

SaveExploits0References6

CVE•added 2018/02/27 3:00 p.m.•138 views

CVE-2018-0489

CVE-2018-0489 concerns the xmltooling library (XMLTooling-C) used by Shibboleth Service Provider and related products. The vulnerability arises in versions of xmltooling before 1.6.4 where digital signatures of user data are mishandled, enabling remote attackers to obtain sensitive information or...

6.5CVSS6.5AI score0.02107EPSS

SaveExploits0References6Affected Software1

Debian CVE•added 2018/02/27 3:00 p.m.•72 views

CVE-2018-0489

6.5CVSS5.5AI score0.02107EPSS

SaveExploits0

Mend•added 2018/02/27 3:00 p.m.•25 views

CVE-2018-0489

6.9CVSS0.02107EPSS

SaveExploits0References7

NVD•added 2018/02/21 4:29 p.m.•29 views

CVE-2016-0369

XML external entity XXE vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 112088...

4CVSS3AI score0.00985EPSS

SaveExploits0References2

Prion•added 2018/02/21 4:29 p.m.•24 views

Xxe

4CVSS5.8AI score0.00985EPSS

SaveExploits0References2Affected Software1

CVE•added 2018/02/21 4:00 p.m.•62 views

CVE-2016-0369

IBM Forms Experience Builder versions 8.5, 8.5.1 and 8.6 are affected by an XML External Entity (XXE) processing vulnerability. The root cause is XXE when processing XML data, which could allow a remote authenticated attacker to obtain sensitive information. The CVSS v3 base score is 2.7 (LOW). R...

4CVSS3.1AI score0.00985EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2018/02/21 4:00 p.m.•41 views

CVE-2016-0369

3AI score0.00985EPSS

SaveExploits0References2

osv_cve•added 2018/02/15 4:29 p.m.•24 views

CVE-2017-17289

Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. The software does not release allocated memory properly...

3.3CVSS5.8AI score0.00207EPSS

SaveExploits0References1

Prion•added 2018/02/15 4:29 p.m.•27 views

Memory corruption

2.1CVSS4AI score0.00207EPSS

SaveExploits0References1Affected Software6

Cvelist•added 2018/02/15 4:00 p.m.•39 views

CVE-2017-17289

3.8AI score0.00207EPSS

SaveExploits0References1

CVE•added 2018/02/15 4:00 p.m.•86 views

CVE-2017-17289

CVE-2017-17289 describes a memory-leak vulnerability in Huawei devices (e.g., DP300, RP200, TE/VM series) when processing XML data. The issue arises from failure to properly free allocated memory, enabling an authenticated, local attacker to repeatedly upload crafted XML files, potentially causin...

3.3CVSS4AI score0.00207EPSS

SaveExploits0References1Affected Software1

Positive Technologies•added 2018/02/15 12:00 a.m.•5 views

PT-2018-6473

Name of the Vulnerable Software and Affected Versions: Huawei DP300 versions V500R002C00 Huawei RP200 versions V500R002C00, V600R006C00 Huawei TE30 versions V100R001C10, V500R002C00, V600R006C00 Huawei TE40 versions V500R002C00, V600R006C00 Huawei TE50 versions V500R002C00, V600R006C00 Huawei TE6...

3.3CVSS0.00207EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2018/02/15 12:00 a.m.•7 views

CVE-2017-17289: Missing Release of Resource after Effective Lifetime

3.3CVSS5.2AI score0.00207EPSS

SaveExploits0References2

RubySec•added 2018/01/29 12:00 a.m.•44 views

Nokogiri gem, via libxml, is affected by DoS vulnerabilities

The version of libxml2 packaged with Nokogiri contains a vulnerability. Nokogiri has mitigated these issue by upgrading to libxml 2.9.6. It was discovered that libxml2 incorrecty handled certain files. An attacker could use this issue with specially constructed XML data to cause libxml2 to consum...

8.8CVSS3.8AI score0.02938EPSS

SaveExploits1References1Affected Software1

RubySec•added 2018/01/29 12:00 a.m.•49 views

Nokogiri gem, via libxml, is affected by DoS vulnerabilities

The version of libxml2 packaged with Nokogiri contains a vulnerability. Nokogiri has mitigated these issue by upgrading to libxml 2.9.5. Wei Lei discovered that libxml2 incorrecty handled certain parameter entities. An attacker could use this issue with specially constructed XML data to cause...

7.5CVSS3.3AI score0.06452EPSS

SaveExploits0References1Affected Software1

Huawei•added 2018/01/24 12:00 a.m.•48 views

Security Advisory - Memory Leak Vulnerability in Some Huawei Products

There is a memory leak vulnerability in several Huawei products. The software does not release allocated memory properly when handling XML data. An authenticated, local attacker could upload crafted XML file repeatedly to cause memory leak and service abnormal. Vulnerability ID: HWPSIRT-2017-0803...

3.3CVSS3.8AI score0.00207EPSS

SaveExploits0Affected Software6

Prion•added 2018/01/16 7:29 p.m.•31 views

Xxe

XML external entity XXE vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote authenticated users to cause a denial of service via crafted XML data. IBM X-Force ID: 109693...

4CVSS6.3AI score0.01231EPSS

SaveExploits0References2Affected Software8

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by