Lucene search
+L

104 matches found

CVE
CVE
•added 2013/07/16 6:0 p.m.•122 views

CVE-2013-0246

The CVE-2013-0246 issue affects Drupal core 7.x prior to 7.19. In the Image module, when a private file system is used, derivative images are not properly protected, allowing remote attackers to read derivative images of restricted images via unspecified vectors. Impact is unauthorized access to ...

4.3CVSS6.6AI score0.02104EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
•added 2013/07/12 12:0 a.m.•26 views

Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2013-0246)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0246 advisory. 1:1.6.0.0-1.33.1.11.6.0.1.el59 - Add oracle-enterprise.patch 1:1.6.0.0-1.33.1.11.6 - removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch - add...

10CVSS7.4AI score0.08087EPSS
SaveExploits2References21
OpenVAS
OpenVAS
•added 2013/02/11 12:0 a.m.•32 views

RedHat Update for java-1.6.0-openjdk RHSA-2013:0246-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

10CVSS7.2AI score0.08087EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2013/02/11 12:0 a.m.•31 views

CentOS Update for java CESA-2013:0246 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

10CVSS7.2AI score0.07714EPSS
SaveExploits0References2
Cent OS
Cent OS
•added 2013/02/08 10:39 p.m.•79 views

java security update

CentOS Errata and Security Advisory CESA-2013:0246 Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring Syst...

10CVSS7AI score0.08087EPSS
SaveExploits2References7
OpenVAS
OpenVAS
•added 2013/01/21 12:0 a.m.•15 views

Fedora Update for drupal6-context FEDORA-2013-0246

Check for the Version of drupal6-context OpenVAS Vulnerability Test Fedora Update for drupal6-context FEDORA-2013-0246 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

5CVSS6.4AI score0.01663EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2013/01/21 12:0 a.m.•15 views

Fedora Update for drupal6-context FEDORA-2013-0246

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.5AI score0.01663EPSS
SaveExploits1References2
Drupal
Drupal
•added 2013/01/16 12:0 a.m.•689 views

SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities

Multiple vulnerabilities were fixed in the supported Drupal core versions 6 and 7. Cross-site scripting Various core and contributed modules - Drupal 6 and 7 A reflected cross-site scripting vulnerability XSS was identified in certain Drupal JavaScript functions that pass unexpected user input in...

4.3CVSS5.4AI score0.02144EPSS
SaveExploits0References28
ICS
ICS
•added 2012/12/25 7:0 a.m.•44 views

Ecava IntegraXor ActiveX Directory Traversal

Overview Independent researchers Billy Rios and Terry McCorkle have identified a Path Traversal vulnerability in the Ecava IntegraXor application. Ecava has produced an update that mitigates this vulnerability. The researchers have validated that the patch fixes this vulnerability. Affected...

9.3CVSS7AI score0.06112EPSS
SaveExploits0References10
CVE
CVE
•added 2012/04/02 10:0 a.m.•55 views

CVE-2012-0246

Ecava IntegraXor is affected by CVE-2012-0246 via a path traversal vulnerability in an ActiveX control. Affected products are IntegraXor versions older than 3.71.4200; exploitation involves opening a specially crafted HTML document on the server (notable to be exploitable through Internet Explore...

9.3CVSS7.7AI score0.06112EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
•added 2011/08/18 12:0 a.m.•28 views

Apple QuickTime Multiple Buffer Overflow Vulnerabilities - Windows

Apple QuickTime is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS5.4AI score0.60106EPSS
SaveExploits16References8
CVE
CVE
•added 2011/08/04 1:0 a.m.•68 views

CVE-2011-0246

CVE-2011-0246 refers to a heap-based buffer overflow in Apple QuickTime on Windows prior to version 7.7, triggered by processing a crafted GIF file. The vulnerability can allow remote code execution or cause an application crash (DoS). The NVD entry confirms the GIF-based overflow as the vector, ...

9.3CVSS8AI score0.0418EPSS
SaveExploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2011/08/04 12:0 a.m.•26 views

QuickTime < 7.7 Multiple Vulnerabilities

Binary data 801184.prm...

9.3CVSS7AI score0.05084EPSS
SaveExploits2References16
Prion
Prion
•added 2010/01/22 10:0 p.m.•35 views

Memory corruption

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a...

9.3CVSS7.7AI score0.26261EPSS
SaveExploits4References3Affected Software1
CVE
CVE
•added 2010/01/22 9:20 p.m.•76 views

CVE-2010-0246

This CVE (CVE-2010-0246) concerns Microsoft Internet Explorer 8 memory handling where uninitialized or deleted objects can cause memory corruption, enabling remote code execution. The connected MS KB (MS10-002) discusses a cumulative IE security update addressing remote-code-execution vulnerabili...

9.3CVSS8.7AI score0.19036EPSS
SaveExploits0References3Affected Software1
Check Point Advisories
Check Point Advisories
•added 2009/12/08 12:0 a.m.•49 views

Internet Explorer 8 Overlap Components Memory Corruption (MS09-072; CVE-2009-3671; CVE-2010-0245; CVE-2010-0246)

Microsoft Internet Explorer is the most widely used Internet browser. A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To trigge...

9.3CVSS6.9AI score0.21038EPSS
SaveExploits3
OpenVAS
OpenVAS
•added 2009/10/10 12:0 a.m.•25 views

SLES9: Security update for postgresql

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-devel postgresql-docs postgresql-pl postgresql-libs postgresql-server postgresql postgresql-contrib For more information, please visit the...

7.5CVSS6.3AI score0.14473EPSS
SaveExploits2References1
CVE
CVE
•added 2009/01/22 4:0 p.m.•43 views

CVE-2009-0246

CVE-2009-0246 affects easyHDR PRO 1.60.2, where a stack-based buffer overflow can be triggered by processing an invalid Radiance RGBE (HDR) file. The vulnerability permits user-assisted attackers to execute arbitrary code on affected systems. Available sources confirm the impact is high (base sco...

9.3CVSS8.2AI score0.03384EPSS
SaveExploits0References9Affected Software1
OpenVAS
OpenVAS
•added 2008/09/24 12:0 a.m.•21 views

Gentoo Security Advisory GLSA 200502-08 (postgresql)

The remote host is missing updates announced in advisory GLSA 200502-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.14473EPSS
SaveExploits2References3
OpenVAS
OpenVAS
•added 2008/09/04 12:0 a.m.•35 views

FreeBSD Ports: postgresql, postgresql-server, ja-postgresql

The remote host is missing an update to the system as announced in the referenced advisory. VID 65c8ecf9-2adb-11db-a6e2-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

7.5CVSS0.14473EPSS
SaveExploits2
Rows per page
Query Builder