CVE-2010-0137

Cisco IOS XR SSH DoS (CVE-2010-0137) affects 3.4.1–3.7.0 where the sshd_child_handler can crash on a crafted SSHv2 packet, potentially causing memory exhaustion. Exploitation requires no authentication; memory/availability impact is noted. Cisco PSIRT/Cisco SEC advisory links confirm the vulnerab...

CVE-2009-0137

CVE-2009-0137 describes multiple input-validation vulnerabilities in Safari RSS that could allow remote attackers to run arbitrary JavaScript in the local security zone via crafted feed: URLs. Affected products include Apple Mac OS X 10.4.11/10.5.6 and Windows XP/Vista with Safari RSS. The connec...

Apple Mac OS X 2009-001更新修复多个安全漏洞

BUGTRAQ ID: 33759 CVECAN ID: CVE-2009-0009,CVE-2009-0020,CVE-2009-0142,CVE-2009-0011,CVE-2009-0012,CVE-2009-0013,CVE-2009-0014,CVE-2009-0015,CVE-2009-0017,CVE-2009-0018,CVE-2009-0019,CVE-2009-0137,CVE-2009-0138,CVE-2009-0139,CVE-2009-0140,CVE-2009-0141 Mac OS X是苹果家族机器所使用的操作系统。 Apple...

CVE-2006-0137

CVE-2006-0137 describes an SQL injection in Chimera Web Portal System 0.2, specifically in linkcategory.php where the id parameter can be used by a remote attacker to execute arbitrary SQL commands. The linked CPAI advisories confirm the vulnerability as SQL injection in the Chimera Web Portal Sy...

CVE-2005-0137

CVE-2005-0137 refers to a vulnerability in the Linux kernel 2.6 on Itanium (ia64) where a missing Itanium syscall table entry could be exploited by a local user to trigger a denial of service. The core issue is a kernel-level handling gap for an Itanium syscall entry, enabling a local attacker to...

CVE-2004-0137

CVE-2004-0137 = Unknown vulnerability in IRIX init affecting IRIX 6.5.20 through 6.5.24. Local users can cause a denial of service (system panic) due to page invalidation issues. The NVD/NVD-derived entries confirm local-exploit viability with impact limited to availability (partial) and no confi...

CVE-2003-0137

The CVE affects the SNMP daemon in the DX200-based Nokia SGSN network element. It allows remote attackers to read SNMP options by using arbitrary community strings, enabling partial information disclosure. No remediation details are provided in the supplied documents. Exploitation status or in-th...

CVE-2003-0137

SNMP daemon in the DX200 based network element for Nokia Serving GPRS support node SGSN allows remote attackers to read SNMP options via arbitrary community strings...

CVE-2002-0137

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file...

CVE-2002-0137

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file...

CVE-2002-0137

CVE-2002-0137 affects CDRDAO 1.1.4 and 1.1.5, where a local user can exploit a symlink to overwrite the user’s ~/.cdrdao configuration file and potentially escalate. The Mandrake advisory (MDKSA-2005:089) notes a second vulnerability (read arbitrary files) and confirms that the packages have been...

CVE-2001-0137

CVE-2001-0137 affects Windows Media Player 7. The vulnerability lets remote attackers cause the execution of malicious Java applets in Internet Explorer by embedding the applet in a skin.wmz skin file and referencing it via the skin in the codebase parameter of an applet tag (Windows Media Player...

CVE-2000-0137

The CartIt shopping cart application is affected by a vulnerability where remote attackers can modify sensitive purchase information through hidden form fields. The affected component appears to be the client-side forms used to submit order data, with the underlying issue not explicitly detailed ...

CVE-2000-0137

The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0137

The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-1999-0137

CVE-1999-0137 describes a local privilege escalation in the dip program on many Linux systems, caused by a buffer overflow that allows a local user to gain root privileges. The core affected component is the dip utility; the underlying flaw is a buffer overflow vulnerability. Public reports consi...

CVE-2021-0137

CVE-2021-0137 is rejected/not used; does not represent an active vulnerability entry.

CVE-2019-0137

CVE-2019-0137 is rejected/not used per the initial description.