Lucene search
+L

204 matches found

Cvelist
Cvelist
•added 2011/10/14 10:00 a.m.•43 views

CVE-2011-0185

Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an executable file...

7.8AI score0.00329EPSS
SaveExploits0References4
CVE
CVE
•added 2011/10/14 10:00 a.m.•80 views

CVE-2011-0185

The CVE-2011-0185 entry concerns a format-string vulnerability in the Application Firewall’s debug-logging feature on Apple Mac OS X prior to 10.7.2, allowing local privilege escalation via a crafted executable name. Affected product: Mac OS X (Application Firewall). Root cause: format string iss...

4.4CVSS7.6AI score0.00329EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
•added 2009/10/13 12:00 a.m.•152 views

SLES10: Security update for Websphere Community Edition

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: websphere-asce More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText:...

7.5CVSS5.5AI score0.99708EPSS
SaveExploits47References1
NVD
NVD
•added 2009/06/02 6:30 p.m.•26 views

CVE-2009-0185

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted MS ADPCM encoded audio data in an AVI movie file...

9.3CVSS7.8AI score0.05842EPSS
SaveExploits0References11
CVE
CVE
•added 2009/06/02 6:00 p.m.•76 views

CVE-2009-0185

Apple QuickTime before 7.6.2 is affected by a heap-based buffer overflow in processing MS ADPCM encoded audio data within AVI files, enabling potential remote code execution or crash (DoS). Public docs list CVE-2009-0185 among a set of related QuickTime vulnerabilities; remediation is to update t...

9.3CVSS8AI score0.05842EPSS
SaveExploits0References11Affected Software1
Cvelist
Cvelist
•added 2009/06/02 6:00 p.m.•38 views

CVE-2009-0185

Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted MS ADPCM encoded audio data in an AVI movie file...

7.8AI score0.05842EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2009/06/02 12:00 a.m.•43 views

QuickTime < 7.6.2 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.2. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of MS ADPCM encoded audio data may lead to an application crash or arbitrary code execution. CVE-2009-0185 - A memor...

9.3CVSS6.4AI score0.09497EPSS
SaveExploits2References10
OpenVAS
OpenVAS
•added 2008/01/17 12:00 a.m.•26 views

Debian Security Advisory DSA 457-1 (wu-ftpd)

The remote host is missing an update to wu-ftpd announced via advisory DSA 457-1. OpenVAS Vulnerability Test $Id: deb4571.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 457-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

10CVSS0.9AI score0.07449EPSS
SaveExploits1
CVE
CVE
•added 2008/01/09 10:00 p.m.•60 views

CVE-2008-0185

CVE-2008-0185 affects NetRisk 1.9.7 (and possibly earlier) and is caused by an SQL injection in index.php where the pid parameter in a profile page (profile.php) is not properly sanitized. This allows remote attackers to execute arbitrary SQL commands. The NVD entry documents a base score of 7.5 ...

7.5CVSS8.4AI score0.01042EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2007/01/11 2:00 a.m.•108 views

CVE-2007-0185

DWR (Getahead Direct Web Remoting) before version 1.1.4 is vulnerable to denial of service due to memory exhaustion triggered by a large number of batched calls; the specific vectors are not detailed in the provided documents. No remediation details are present here.

5CVSS7.2AI score0.01522EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2006/01/12 6:02 a.m.•25 views

CVE-2006-0185

Multiple cross-site scripting vulnerabilities in the 1 Pool or 2 News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

5CVSS6.1AI score0.02304EPSS
SaveExploits2References4
CVE
CVE
•added 2005/02/06 5:00 a.m.•61 views

CVE-2005-0185

CVE-2005-0185 describes a stack-based buffer overflow in NodeManager Professional 2.00 . The overflow occurs via a LinkDown-Trap packet containing a long OCTET-STRING in the Trap variable-bindings field, enabling an unauthenticated remote attacker to potentially execute arbitrary commands. The pr...

7.5CVSS6.8AI score0.04175EPSS
SaveExploits1References6Affected Software1
CVE
CVE
•added 2004/09/01 4:00 a.m.•107 views

CVE-2004-0185

CVE-2004-0185 describes a buffer overflow in wu-ftpd’s S/KEY authentication path (skey_challenge in ftpd.c) for version 2.6.2, allowing remote code execution or denial-of-service via a long s/key name. Connected records corroborate a remote overflow vulnerability in Wu-FTPd with S/KEY support, an...

10CVSS6.7AI score0.07449EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
•added 2004/09/01 4:00 a.m.•49 views

CVE-2004-0185

Buffer overflow in the skeychallenge function in ftpd.c for wu-ftp daemon wu-ftpd 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key SKEY request with a long name...

7.7AI score0.07449EPSS
SaveExploits1References7
NVD
NVD
•added 2004/03/15 5:00 a.m.•35 views

CVE-2004-0185

Buffer overflow in the skeychallenge function in ftpd.c for wu-ftp daemon wu-ftpd 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key SKEY request with a long name...

10CVSS7.8AI score0.07449EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2004/03/15 5:00 a.m.•8 views

CVE-2004-0187

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0185. Reason: This candidate is a reservation duplicate of CVE-2004-0185. Notes: All CVE users should reference CVE-2004-0185 instead of this candidate. All references and descriptions in this candidate have been removed to...

10CVSS5.8AI score0.07449EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2004/03/15 5:00 a.m.•21 views

CVE-2004-0185

Buffer overflow in the skeychallenge function in ftpd.c for wu-ftp daemon wu-ftpd 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key SKEY request with a long name...

10CVSS6.4AI score0.07449EPSS
SaveExploits1References1
CVE
CVE
•added 2003/04/02 5:00 a.m.•67 views

CVE-2002-0185

The CVE-2002-0185 issue affects Apache mod_python versions 2.7.6 and earlier, where a module indirectly imported by a published module can be accessed via the publisher, allowing remote attackers to call potentially dangerous functions from the imported module. The OpenVAS/NVD/CVE listings corrob...

7.5CVSS6.7AI score0.04166EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2003/04/02 5:00 a.m.•40 views

CVE-2002-0185

modpython version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...

6.7AI score0.04166EPSS
SaveExploits0References6
NVD
NVD
•added 2002/05/16 4:00 a.m.•29 views

CVE-2002-0185

modpython version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...

7.5CVSS6.7AI score0.04166EPSS
SaveExploits0References6
Rows per page
Query Builder