5665 matches found
DEBIAN-CVE-2018-13100
An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secsperzone in a corrupted f2fs image, as demonstrated by a divide-by-zero error...
UBUNTU-CVE-2018-13100
An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secsperzone in a corrupted f2fs image, as demonstrated by a divide-by-zero error...
Linux kerne 'fs/f2fs/super.c' local denial of service vulnerability
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the fs/f2fs/super.c file in Linux kernel version 4.17.3 and earlier, which stems from a program that fails to properly validate the...
Devploit v3.6 - Information Gathering Tool
Devploit is a simple python script to Information Gathering. Download: git clone https://github.com/joker25000/Devploit How to use: cd Devploit chmod +x install ./install Run in Terminal Devploit To run in Android you do not install file Run direct python2 Devploit Properties: DNS Lookup Whois...
Microsoft Windows: Do not preserve zone information in file attachments
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winzoneinfoattachments.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Do not preserve zone information in file attachments users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...
Remote code execution
A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher...
CVE-2018-8245
A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher...
CVE-2018-8245: Undefined Security Weakness
A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher...
Description of the security update for SharePoint Enterprise Server 2016: June 12, 2018
None None...
PT-2018-18510
Name of the Vulnerable Software and Affected Versions Microsoft Publisher affected versions not specified Description A remote code execution issue exists due to Microsoft Publisher's failure to properly lock down the Local Machine zone when instantiating OLE objects. This could allow an attacker...
Google Android NVIDIA component elevation of privilege vulnerability (CNVD-2018-12654)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA component NVIDIA Tegra X1 TZ. An attacker can exploit this vulnerability to achieve elevation of...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15881)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setDateAndTime method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker can exploit this vulnerability to execute arbitrary system commands by configurin...
Easy File Uploader 1.7 Shell Upload
==================================================================================================================================== | Title : Easy File Uploader 1.7 unrestricted file upload Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 FranASSais V.Pro...
Authorization Bypass
libbind9.so is vulnerable to authorization bypass. A malicious user can trigger a TSIG authentication error to cause an unauthorized DNS zone transfer or other DNS transactions. This vulnerability only applies to DNS servers using bind that have no-address based ACL in place...
May 23, 2018—KB4100403 (OS Build 17134.81)
None None...
ISC BIND Multiple Denial of Service Vulnerabilities (May 2018)
ISC BIND is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...
CVE-2018-5736
A flaw was found in the way zone databases were handled by bind. An attacker with permissions to initiate a zone transfer could cause bind to crash...
ISC BIND Denial of Service Vulnerability (CNVD-2018-14416)
ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. A denial-of-service vulnerability exists in ISC BIND due to a flaw in the handling of BIND slave zone transfers, which could be exploited by an attacker ...
FreeBSD : BIND -- multiple vulnerabilities (94599fe0-5ca3-11e8-8be1-d05099c0ae8c)
ISC reports : An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. A problem with the implementation of the new serve-stale feature in BIND 9.12 can le...