Questions tagged [cve]
Common Vulnerabilities and Exposures (CVE) is a dictionary to describe known vulnerabilities.
1
vote
1answer
66 views
Exploit database for NVD vulnerabilities [closed]
I have the list of vulnerabilities (CVEs) in the NVD database. I need to find which one has an exploit. Is there any database available to get the list of all the exploits for CVEs? or is there any ...
0
votes
2answers
30 views
Can Netsparker detect a CVE in an open source library packaged in a WebPack bundle?
In a recent Netsparker scan, a CVE against an open source JavaScript library was reported (as expected). I'm trying to understand exactly how Netsparker determines:
1. Which JS library is being used,...
2
votes
1answer
53 views
Given a list of components and versions, how can I check if any of them have known vulnerabilities?
In this case, I have a list of names and versions, but not access to any source code or binaries. E.g.
ComponentA 2.6.6
ComponentB 1.1
ComponentC 0.12
The list is more than 300 components long, so ...
1
vote
2answers
49 views
Microsoft Windows CVEs?
I know sites like cvedetails and exploit-db feature Windows 10 specific CVEs. But doesnt microsoft.com have a list (or feed) of vulnerability advisories and recently disclosed CVEs? I checked their ...
0
votes
1answer
195 views
What would be the impact of a CVE-2015-9251 vulnerability?
I've seen that in jQuery versions older than jQuery 3 there is the CVE-2015-9251 vulnerability which can result in cross-site scripting. Is this a limited vulnerability? What could be its possible ...
0
votes
0answers
36 views
Why would IPS vendor provider refuse to publish SLAs to fix the published highly ranked CVEs?
One of the biggest IPS providers (top of Gartner graph for its category) is not providing SLAs for all the 7+ ranking CVEs published last year. I don't really understand why would they refuse to ...
2
votes
1answer
176 views
What *actually* is a Java applets vulnerability?
When we say that Java applets are vulnerable, what exactly do we mean? A vulnerability in the underlying jre? In the browser? In the "applet" component?
what exactly is exploited?
1
vote
2answers
197 views
How to discover known vulnerabilities (CVEs) in Go executables?
Tools that discover CVEs need to create software bill-of-material. In many cases it can be done simply by inspecting files on the target system e.g. RPM or NPM index.
Would it be possible to do ...
0
votes
0answers
28 views
Determine CVEs impacting a version of the Linux Kernel
I inherited a small fleet of Linux boxes at work, which run an old version of Linux (3.10.83). The kernel was apparently hand-built from sources from kernel.org, it did not come from a distro). What's ...
0
votes
2answers
325 views
SambaCry CVE-2017-7494 returns “Exploit completed, but no session was created”
I am using this exploit on msfconsole to exploit a VM with samba and the configuration is as follows:
Module options (exploit/linux/samba/sambacry)
Payload options (linux/x64/meterpreter/reverse_tcp)
...
0
votes
0answers
44 views
understand Vulnerability rating used in scanners?
after read this
What risk rating models are used for calculating risk scores of web vulnerabilities?
this is a somewhat different question , not about scoring systems in general, but their ...
0
votes
1answer
54 views
Categorizing CVE product name
I'm looking for a way to categorize CVE product names by operating system, application etc. Is there any dataset available to deal with this? https://www.cvedetails.com offers these categories for ...
1
vote
0answers
41 views
OWASP scan on SQL Server Compact Edition
On running a dependency check on my projects library, the tool reported multiple vulnerabilities in System.Data.SqlServerCe.dll, and CVE-2012-1856 with the highest score of 9.3
The version of the ...
2
votes
1answer
89 views
Why doesn't the official CVE database list the names of the reporters?
Why does neither MITRE nor NVD list out the name(s) of the reporter(s) of a CVE? e.g. for CVE-2018-1123, neither MITRE, nor NVD gives credit to reporters. However, for some CVEs, SecurityFocus does ...
0
votes
1answer
62 views
Is it safe to install MS17-010 unpatched OS as guest on patched host?
For example, these are unpatched old OS.
Windows 98
Windows 98 SE
Windows ME
Windows NT 4.0
Windows 2000
Given that SMBv1 is not disabled on host but already patched.
Is the unpatched guest OS ...
1
vote
1answer
79 views
NVD: How to query without false positives when CPE Entries are not filled in for many CVEs?
So my naive approach was to query NVD for CPE URIs of software products I use.
Unfortunately I notice a lot of entries don't have CPE entries. (e.g. for 2016 there are currently 1332 without CPE URI)...
2
votes
1answer
72 views
Is there a security tracker aggregated file for Ubuntu server like Debian has?
Debian has a JSON file containing all CVE<->Fixed package versions map.
Link: https://security-tracker.debian.org/tracker/data/json
Does Ubuntu have something similar?
3
votes
1answer
75 views
How to find CAPEC items related to a CVE
Vulnerabilities with a CVE usually also have a CWE associated with them, but almost never CAPEC. CWE's site also only very rarely points to related CAPEC items.
Is there a way to find a CVE's ...
1
vote
0answers
80 views
Misunderstanding regarding CVE [closed]
I was learning about CVE and went through this :
... if you own a security tool whose reports contain references to CVE
IDs, you may then access fix information in a separate database that
is ...
0
votes
1answer
195 views
What is the attack vector for CVE-2018-3639 Speculative Store Bypass?
We use Web Application deployed on a CentOS server.
Can the attack will be performed via a browser?
Or the attacker need a physical access to the CentOS server?
I cannot understand the attack vector ...
3
votes
3answers
272 views
Has Firefox become bugless or where are the Firefox CVEs for 2017? [closed]
Through 2016 Firefox had about the same number (or same order of magnitude) of new issues listed as every other browser. Around 100-250.
2017 lists only a single issue
https://www.cvedetails.com/...
0
votes
0answers
37 views
looking for computer readable lists of CVE to package name sources [duplicate]
Redhat has a very nice xml containing all known CVEs and the package version they are fixed in (https://www.redhat.com/security/data/metrics/rpm-to-cve.xml).
I would like to know if any other Linux ...
1
vote
1answer
97 views
Why is CVE-2017-5461 rated Critical with CVSS Score 9.8?
A while ago I came across this CVE-2017-5461, which is rated 9.8 both on NVD and Redhat Portal, with a CVSS base string of
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
for those who is not very ...
0
votes
2answers
84 views
Is there a CVE or CVSS for enumeration of ports?
Lets say that there is a company which does not have a firewall and it is possible to perform an enumeration of ports and services.
Could it be considered a vulnerability if it provides ...
0
votes
0answers
75 views
How to get the latest CVE list? [duplicate]
Can I get an auto push/auto news feeds of NVD CVE list into my local machine? I have zero idea on using those feeds that available to be download here. Can someone provide some guide please?
0
votes
0answers
151 views
Why does Ubuntu deem 16.04 un-affected by CVE-2017-16995(Kernel Privilege Escalation) while it's not?
In both current OVAL definition and CVE Tracker, it says for Ubuntu 16.04
While related to the CVE in some way, the 'linux' package in xenial is
not affected.
But I have tested many kernel ...
3
votes
1answer
44 views
CVE Description - Does impacted supported version mean specific version and older?
I needed guidance on how to interpret
Supported versions that are affected are Java SE:
6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit:
R28.3.16.
The above phrase is from CVE-...
0
votes
0answers
21 views
Get CPEs of software installed on a Windows machine
Is there are way to enumerate the CPE of the software installed on a windows machine.
So for instance, if one the machine Adobe Flash is installed I would like to get
cpe:2.3:a:adobe:flash_player:...
0
votes
1answer
192 views
Is INTEL-SA-00075 Detection and Mitigation Tool enough to mitigate IntelME attacks
Is that tool enough to mitigate/protect againts IntelME vulnerability?
https://downloadcenter.intel.com/download/26755?v=t
If it's not enough I more I can do to protect againts IntelME attacks ?
2
votes
1answer
102 views
Are CVEs and EDBs normally hard to reproduce? [closed]
For a while I've played around with reproducing vulnerabilities reported in websites such as Exploit-DB (EDB) as a learning experience. However, I often find cases which I just can't get to work. In ...
8
votes
1answer
241 views
Is there a documented process for official information release for embargoed vulnerabilities in the CVE system?
Is there a documented process for official information release for embargoed vulnerabilities in the Common Vulnerabilities and Exposures (CVE) system?
If such a process exists, how does it address ...
3
votes
1answer
115 views
List of CVE resolved in OpenJDK build
What is the list of the CVE resolved in OpenJDK build that published in https://github.com/ojdkbuild/ojdkbuild/releases?
For example in this build:
https://github.com/ojdkbuild/ojdkbuild/releases/tag/...
3
votes
3answers
367 views
How to get vulnerabilites by product name and version
I have a list of software installed on workstations which contains product name and version, for example my list contains Mysql Workbench 6.3.8. Searching in CVE Details I found out that this software ...
5
votes
0answers
314 views
Can any of the INTEL-SA-00086 vulnerabilities be exploited by an unprivileged user?
Several of the latest Intel Management Engine vulnerabilities are listed as local vulnerabilities, allowing code executing on the system to elevate its privileges to ME context. One of them (CVE-2017-...
3
votes
2answers
597 views
CVE submission process?
I have two questions regarding going through the process to requesting and getting a CVE ID for a vulnerability.
Should I contact the Vendor first and wait to see if they acknowledge the ...
12
votes
2answers
324 views
Why the big jump in CVE-2017 numbering?
Can anyone explain, why the numbering from this years CVE entries jumped from CVE-2017-15xxx to CVE-2017-1000xxx?
What about entries with the numbering sequence CVE-2017-16xxx, CVE-2017-17xxx, and so ...
1
vote
1answer
48 views
Can CVSS score be different from that calculated from vector
In most databases, there two fields: CVSS vector and CVSS score. It's logical that if we calculate score from vector, it's supposed to be equal to the score field.
But, can it be manually 'tuned' and ...
0
votes
2answers
53 views
Does CVEs reported in a Java Update applies also to previous updates?
If my application uses JRE 1.8.0_6, that have currently 3 CVEs reported, all later updates' CVEs sums up to 216, and 34 CVEs reported in JRE 1.8.0 in general, what is the number of vulnerabilities my ...
0
votes
1answer
67 views
Are CVE identifiers assigned for proprietary software packages? [duplicate]
If I find a vulnerability while using a proprietary software package can I request a CVE identifier. Or rather vulnerabilities in proprietary software packages are a matter of me reporting issue to ...
4
votes
2answers
230 views
Why are the CVSS scores differ so much between Redhat and NVD page?
take CVE-2016-7872 for example.
in National Vulnerability Database webpage, we can see that the cvss2 and cvss3 score are 9.8 and 10.0 respectively.
but in the redhat security advisory page, they ...
5
votes
1answer
262 views
Impact analysis of CVE-2016-1000341 affecting BouncyCastle
I am analyzing the impact of CVE-2016-1000341 having CVSS score 7.5 and description "DSA signature generation vulnerable to timing attack. Where timings can be closely observed for the generation of ...
0
votes
1answer
3k views
CVE-2017-7529 - Exploit details? [closed]
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7529
Where can I find the exploit details for this CVE? Usually sites like exploit-db.com include the PoC exploit for a given vuln but I can't ...
1
vote
0answers
138 views
How to find out if ClamAV current version has signature for specific Exploit/Trojan/Worm etc. or not?
I installed ClamAV(version 0.99.2/23581/Thu Jul 20 16:15:14 2017) and updated the installation to have latest signatures. I found on this website (https://lists.gt.net/clamav/virusdb/69755?page=last) ...
1
vote
1answer
55 views
Where to get patches for recent CVEs announced for glibc?
My SoC vendor uses Yocto to create custom Embedded Linux distribution, that contains glibc 2.22.
As part of the distribution we have received patches till CVE-2016-4429. But, now there are some ...
0
votes
1answer
88 views
Is the RHEL 7 version of FreeRadius not affected by RHSA-2017:1759 (or similar)?
In July 2017, multiple security issues have been found in FreeRadius 2.x.x and 3.0.x. RHEL 6 uses FreeRadius 2.x.x and Red Hat has released security advisory RHSA-2017:1759. However, for RHEL 7, no ...
1
vote
2answers
114 views
Firewall detects CVE 2017-0016
My firewall is dropping traffic from 3 terminals connected through SSL Client-2-Site VPN, because it detects " Microsoft Windows SMB CVE 2017-0016 Tree Connect Response denial of service vulnerability ...
0
votes
1answer
47 views
If a CVE lists two particular affected versions, and I use a version between those two, what's the next action for determining vulnerability?
CVE-2015-5185 lists two particular versions, "1.3.4 and 1.3.18" as being vulnerable. If I use 1.3.11, what's the next action for determining vulnerability?
I think this question is partially about ...
1
vote
1answer
134 views
How can I know if an attack is still valid, if there is no CVE for it?
I found a PoC for a MitM-attack towards RDP published in March 2017 but no CVE in any of the databases and no mention of a patch by Microsoft.
I want to know if this still works, how would I find out ...
0
votes
0answers
57 views
How user can change the tty information (related to CVE-2017-1000367)
Recently Red Hat fixed an important vulnerability in sudo:
https://access.redhat.com/security/cve/cve-2017-1000367
From the description:
A flaw was found in the way sudo parsed tty information ...
2
votes
1answer
109 views
Does CVE-2017-9445 also effect Ubuntu 14.04.X and 16.04.X?
After all the buzz about CVE-2017-9445 it seems unclear to me which versions are really affected and need patching and which not?
Their own CVE issue states that Ubuntu 14.04 to the latest upstream ...
