CVE-2014-0253

CVE-2014-0253 affects multiple .NET Framework versions (1.1 SP1, 2.0 SP2, 3.5/3.5.1, 4, 4.5, 4.5.1). The issue is improper handling of TCP connection states, allowing a remote attacker to cause a denial of service by sending crafted HTTP requests that trigger persistent resource consumption, resu...

MS14-009: Vulnerabilities in .NET Framework Could Allow Privilege Escalation (2916607)

The remote Windows host is running a version of the Microsoft .NET Framework that is affected by multiple vulnerabilities : - An error exists related to handling stale or closed HTTP client connections that can allow denial of service attacks. CVE-2014-0253 - An error exists related to decisions...

Microsoft .NET Framework 远程拒绝服务漏洞(CVE-2014-0253)(MS14-009)

BUGTRAQ ID: 65415 CVECAN ID: CVE-2014-0253 .NET就是微软的用来实现XML，Web Services，SOA（面向服务的体系结构service-oriented architecture）和敏捷性的技术。.NET Framework是微软开发的软件框架，主要运行在Microsoft Windows上。 Microsoft ASP.NET中存在拒绝服务漏洞，可使攻击者造成ASP.NET服务器不响应。 0 Microsoft .NET Framework 4.x Microsoft .NET Framework 3.x Microsoft .NET...

CVE-2013-0253

CVE-2013-0253 concerns Apache Maven 3.0.4 when used with Maven Wagon 2.1, where SSL certificate checks are disabled by default. This configuration enables remote attackers to spoof servers via a man-in-the-middle (MITM) attack. The vulnerability details specify the affected components as Maven Wa...

CVE-2013-0253

The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle MITM attack...

CVE-2013-0253

Removed by vendor...

Fwd: [SECURITY] CVE-2013-0253 Apache Maven 3.0.4

CVE-2013-0253 Apache Maven Severity: Medium Vendor: The Apache Software Foundation Versions Affected: - Apache Maven 3.0.4 - Apache Maven Wagon 2.1, 2.2, 2.3 Description: Apache Maven 3.0.4 with Apache Maven Wagon 2.1 has introduced a non-secure SSL mode by default. This mode disables all SSL...

CVE-2012-0253

Pluck SiteLife (Demand Media) prior to version 5.0.13 contains multiple XSS vulnerabilities exploitable via parameters jsonRequest, r, cb, and sys/jsonp.app/.htm, enabling arbitrary script/HTML injection. The issue affects Pluck SiteLife software and could lead to information leakage, privilege e...

CVE-2011-2810

CVE-2011-2810 is rejected/not used; reference CVE-2011-0253 instead.

Apple Safari Multiple Vulnerabilities (Jul 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Apple Safari 5.1和5.0.6之前版本多个安全漏洞

BUGTRAQ ID: 48808 CVE ID: CVE-2011-0218,CVE-2011-0221,CVE-2011-0222,CVE-2011-0225,CVE-2011-0232,CVE-2011-0233,CVE-2011-0234,CVE-2011-0235,CVE-2011-0237,CVE-2011-0238,CVE-2011-0240,CVE-2011-0253,CVE-2011-0254,CVE-2011-0255,CVE-2011-1288,CVE-2011-1453,CVE-2011-1457,CVE-2011-1462,CVE-2011-1797...

CVE-2011-0253

CVE-2011-0253 is tied to WebKit in Apple Safari (pre-5.0.6) and is described as allowing remote code execution or memory corruption/DoS via a crafted site. Connected documents confirm WebKit-related vulnerability in Apple software (notably iTunes/WebKit entries) but do not specify exact patch ver...

Mozilla Firefox Status Bar Spoofing Vulnerability - Linux

Mozilla Firefox is prone to a status bar spoofing vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2009-0253

Firefox 3.0.5 is vulnerable to a status bar spoofing/clickjacking attack where an onclick action moves a crafted element to the current mouse position to trick the user into visiting an arbitrary URL. This is remote, with public exploit references available (e.g., Exploit-DB). No remediation deta...

CVE-2009-0253

creationtimestamp| type| source ---|---|--- 2009-01-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7842...

rPSA-2008-0253-1 git gitweb

rPath Security Advisory: 2008-0253-1 Published: 2008-08-12 Products: rPath Linux 2 Rating: Minor Exposure Level Classification: Indirect Non-deterministic Denial of Service Updated Versions: git=conary.rpath.com@rpl:2/1.5.6.4-1-0.1 gitweb=conary.rpath.com@rpl:2/1.5.6.4-1-0.1 rPath Issue Tracking...

CVE-2008-0253

SQL injection vulnerability in fulltext.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2008-0253

CVE-2008-0253 affects Binn SBuilder’s full_text.php, where a vulnerability in the nid parameter allows remote SQL injection. The CVSS v2 base score is 7.5 (HIGH) with network-attack vector, low complexity, and no authentication required, enabling partial data confidentiality, integrity, and avail...

CVE-2007-0253

The available connected documents identify a grsecurity patch vulnerability described as a privilege escalation related to an “expand_stack” issue. The CVE-2007-0253 description in the NVD/NVD-derived entries calls the vulnerability unspecified in impact and vectors, noting the grsecurity develop...

CVE-2006-0253

CVE-2006-0253 describes a buffer overflow in the Bluetooth OBEX Object Push service of AmbiCom Blue Neighbors, specifically in the Blue Neighbors.EXE client. The vulnerability arises from processing a long file name (RFILE argument to ussp-push), enabling a remote attacker to potentially execute ...