vulnerability database cve

Oracle out-of-band release for Java SE Vulnerability Analysis (CVE-2016-0636)0 × 00 vulnerability Overview Vulnerability No.: CVE-2016-0636, a variant of the Vulnerability (CVE-2013-583

PostgreSQL Information Leakage Vulnerability (CVE-2014-8161) Release date:Updated on: Affected Systems:PostgreSQL 9.4PostgreSQL 9.1PostgreSQL 8.4Description:Bugtraq id: 72538CVE (CAN) ID: CVE-2014-8161 PostgreSQL is an advanced object-relational database management system that supports extended SQL standard subsets. Po

FFmpeg and Libav cross-border Denial of Service Vulnerability (CVE-2014-8545) Release date: 2014-3 3Updated on: Affected Systems:FFmpeg FFmpegDescription:Bugtraq id: 70886CVE (CAN) ID: CVE-2014-8545 FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video. Libav is a cross-platform free s

FFmpeg and Libav cross-border Denial of Service Vulnerability (CVE-2014-8548) Release date: 2014-3 3Updated on: Affected Systems:FFmpeg FFmpegDescription:Bugtraq id: 70888CVE (CAN) ID: CVE-2014-8548 FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video. Libav is a cross-platform free s

FFmpeg and Libav cross-border Denial of Service Vulnerability (CVE-2014-8541) Release date: 2014-3 3Updated on: Affected Systems:FFmpeg FFmpegDescription:Bugtraq id: 70877CVE (CAN) ID: CVE-2014-8541 FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video. Libav is a cross-platform free s

PostgreSQL 'pgcrypto' Module Buffer Overflow Vulnerability (CVE-2015-0243) Release date:Updated on: Affected Systems:PostgreSQL 9.4PostgreSQL 9.1PostgreSQL 8.4Description:Bugtraq id: 72542CVE (CAN) ID: CVE-2015-0243 PostgreSQL is an advanced object-relational database management system that supports extended SQL standa

The gnu c Library glob Stack Buffer Overflow Vulnerability (CVE-2016-1234)The gnu c Library glob Stack Buffer Overflow Vulnerability (CVE-2016-1234) Release date:Updated on:Affected Systems: Gnu c Library (glibc) Description: CVE (CAN) ID:

Gnu c Library DoS Vulnerability (CVE-2016-3075)Gnu c Library DoS Vulnerability (CVE-2016-3075) Release date:Updated on:Affected Systems: Gnu c Library (glibc) Description: CVE (CAN) ID: CVE-2016-3075Glibc is the libc librar

Vulnerability Description:March 27, using IIS 6.0 on Windows 2003 R2 burst the 0Day Vulnerability (cve-2017-7269), the exploit POC began to circulate, but the bad thing is that the product has stopped updating. The download link to the POC online is as follows.GitHub Address: Https://github.com/edwardz246003/IIS_exploitCombined with the above POC, we analyze the

Note that when compiling a vulnerability exploits a program: gcc-lpthread dirtyc0w.c-o dirtyc0w The actual test under Ubuntu 15.10 needs to be changed to: Gcc-pthread Dirtyc0w.c-o dirtyc0w Or GCC dirtyc0w.c-o dirtyc0w -lpthread To compile correctly. Other vulnerabilities exploit code: Https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs Http://www.tuicool.com/articles/Rjiy2maHow to Patch and Protect Linux Kernel the Zero day local privilege esc

Last night, security news burst out a "php arbitrary file Upload Vulnerability", CVE number: cve-2015-2348.At that time, the landlord is ready to pack things home, see this news in the heart a surprise: Lost in the river for many years 0 characters truncation upload vulnerability and reproduce it? And it affects so man

Samba NETLOGON service information leakage Vulnerability (CVE-2016-2111)Samba NETLOGON service information leakage Vulnerability (CVE-2016-2111) Release date:Updated on:Affected Systems: Samba Samba 4.x-4.2.11Samba Samba 4.4.x-4.4.2Samba Samba 4.3.x-4.3.8Samba Samba 3.x Description:

Apache Tomcat Security Bypass Vulnerability (CVE-2018-1305)Apache Tomcat Security Bypass Vulnerability (CVE-2018-1305) Release date:Updated on:Affected Systems: Apache Group Tomcat 9.0.0.M1-9.0.4Apache Group Tomcat 8.5.0-8.5.27Apache Group Tomcat 8.0.0.RC1-8.0.49Apache Group Tomcat 7.0.0-7.0.84 Description: Bugtraq id

Samba CVE-2015-0240 Remote Code Execution Vulnerability exploitation practices1 demo2 Background On February 23, 2015, Red Hat product security team released a Samba server smbd vulnerability announcement [1], the vulnerability number is CVE-2015-0240, affects almost all ver

Glibc gethostbyname Buffer Overflow Vulnerability (CVE-2015-0235) Release date:Updated on: Affected Systems:GNU glibcUnaffected system:The GNU glibc 2.18Description:Bugtraq id: 72325CVE (CAN) ID: CVE-2015-0235 Glibc is the libc library released by GNU, that is, the c Runtime Library. Glibc is the most underlying api in linux, and almost any other Runtime Library

Ruby on Rails 'activerecord 'SQL Injection Vulnerability (CVE-2014-3482) Release date:Updated on: Affected Systems:Ruby on RailsDescription:--------------------------------------------------------------------------------Bugtraq id: 68343CVE (CAN) ID: CVE-2014-3482Ruby on Rails (RoR or Rails) is an open-source Web application framework written in Ruby. It is dev

Ruby on Rails 'activerecord 'SQL Injection Vulnerability (CVE-2014-3483) Release date:Updated on: Affected Systems:Ruby on RailsDescription:--------------------------------------------------------------------------------Bugtraq id: 68341CVE (CAN) ID: CVE-2014-3483Ruby on Rails (RoR or Rails) is an open-source Web application framework written in Ruby. It is dev

Apache Hive Security Restriction Bypass Vulnerability (CVE-2014-0228) Release date:Updated on: Affected Systems:Apache Group HiveDescription:--------------------------------------------------------------------------------Bugtraq id: 68039CVE (CAN) ID: CVE-2014-0228Apache Hive is a database software that facilitates q

Pty/tty device Race Condition Vulnerability (CVE-2014-0196), ptycve-2014-0196Prerequisites 1. pty/tty. A product with a long history, mainly used for terminal input and output. Introductory article: http://www.linusakesson.net/programming/tty/ 2. slab. It is mainly used to allocate memory of a specific size to prevent memory fragments and holes. It is similar to Lookaside in windows kernel. Baidu encycloped

Linux 2.6.31 Local Code Execution Vulnerability (CVE-2014-0196) To put it simply, this is a local code execution vulnerability that has existed since Linux 2.6.31-rc3 for five years. As a result, attackers will obtain the root shell and it will not be fixed until May 3 this year. CVE-2014-0196A race condition in the pt