Lucene search
+L

137 matches found

Prion
Prion
added 2015/04/14 10:59 p.m.30 views

Memory corruption

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0347,...

10CVSS7.8AI score0.73862EPSS
SaveExploits9References9Affected Software8
Prion
Prion
added 2015/04/14 10:59 p.m.41 views

Memory corruption

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0350,...

10CVSS7.7AI score0.73862EPSS
SaveExploits9References9Affected Software8
Prion
Prion
added 2015/04/14 10:59 p.m.30 views

Memory corruption

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0347,...

10CVSS7.7AI score0.73862EPSS
SaveExploits9References9Affected Software8
CVE
CVE
added 2015/04/14 10:00 p.m.269 views

CVE-2015-0350

Adobe Flash Player vulnerable to memory corruption that can lead to remote code execution or denial of service. Affected versions: Windows/OS X before 13.0.0.281 and 14.x–17.x before 17.0.0.169; Linux before 11.2.202.457. Vectors are unspecified; no exploitation details provided in the source. No...

10CVSS7.8AI score0.05989EPSS
SaveIn wildExploits0References9Affected Software1
OSV
OSV
added 2014/05/05 5:06 p.m.10 views

CVE-2013-0350

tmpsmtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log...

6.2AI score
SaveExploits0References3
NVD
NVD
added 2014/05/05 5:06 p.m.27 views

CVE-2013-0350

tmpsmtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log...

6.3CVSS6.3AI score0.00321EPSS
SaveExploits0References3
CVE
CVE
added 2014/05/05 5:00 p.m.49 views

CVE-2013-0350

CVE-2013-0350 affects pktstat 1.8.5 via a local-symlink vulnerability in /tmp/smtp.log that lets a local user overwrite arbitrary files. The connected documents confirm the affected component and the root cause (symlink attack) and the impact (arbitrary file overwrite). No concrete remediation or...

6.3CVSS6.5AI score0.00321EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2014/04/26 1:55 a.m.14 views

CVE-2014-0350

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate...

6.2AI score
SaveExploits0References4
CVE
CVE
added 2014/04/26 1:00 a.m.74 views

CVE-2014-0350

The CVE concerns POCO C++ Libraries’ NetSSL X509Certificate::verify in Poco::Net, vulnerable before 1.4.6p4 to MITM via crafted DNS PTRs during server-name wildcard comparison. Affected product: POCO’s NetSSL in POCO C++ Libraries; root cause: weak validation of X.509 CN/SAN matching against wild...

6.4CVSS6AI score0.01218EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2014/04/26 1:00 a.m.46 views

CVE-2014-0350

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate...

6.1AI score0.01218EPSS
SaveExploits0References4
CERT
CERT
added 2014/04/24 12:00 a.m.98 views

POCO C++ Libraries NetSSL library fails to properly validate wildcard certificates

Overview The POCO C++ Libraries NetSSL library fails to properly validate wildcard certificates, allowing an attacker to trick the victim application into trusting a malicious certificate. Description CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action Guenter Obiltschnig o...

6.4CVSS6.1AI score0.01218EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:00 a.m.55 views

Oracle Linux 6 : kernel (ELSA-2012-0350)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory. - fs xfs: Fix missing xfsiunlock on error recovery path in xfsreadlink Carlos Maiolino 749161 694702 CVE-2011-4077 - fs xfs: Fix memory corruption in...

7.8CVSS6.4AI score0.20492EPSS
SaveExploits15References11
OpenVAS
OpenVAS
added 2012/07/09 12:00 a.m.49 views

RedHat Update for kernel RHSA-2012:0350-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.8CVSS7.4AI score0.20492EPSS
SaveExploits15References2
Tenable Nessus
Tenable Nessus
added 2012/03/07 12:00 a.m.251 views

RHEL 6 : kernel (RHSA-2012:0350)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0350 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

7.8CVSS6.5AI score0.20492EPSS
SaveExploits15References26
CVE
CVE
added 2011/01/28 9:13 p.m.64 views

CVE-2011-0350

Cisco IOS 12.4(24)MD1+ on the Cisco Content Services Gateway Second Generation (CSG2) is vulnerable to DoS via crafted TCP packets, causing device hang or reload. The issue is tied to Bug IDs CSCth41891 and is separate from CVE-2011-0349 (CVE-2011-0350). The advisory describes two DoS vulnerabili...

7.8CVSS6.6AI score0.04086EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2010/01/15 8:30 p.m.23 views

CVE-2010-0350

Directory traversal vulnerability in the Photo Book gooffotoboek extension 1.7.14 and earlier for TYPO3 has unknown impact and remote attack vectors...

7.5CVSS6.7AI score0.01272EPSS
SaveExploits0References2
CVE
CVE
added 2010/01/15 8:00 p.m.56 views

CVE-2010-0350

CVE-2010-0350 affects TYPO3’s Photo Book (goof_fotoboek) extension versions 1.7.14 and earlier, where a directory traversal vulnerability exists in the Photo Book component. The description notes unknown impact and remote attack vectors; no explicit exploit details, affected file(s), or remediati...

7.5CVSS6.9AI score0.01272EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2009/01/29 7:30 p.m.23 views

CVE-2009-0350

Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file, related to the status bar icon's tooltip. NOTE: some of these details are obtained from third party information...

9.3CVSS8.1AI score0.10196EPSS
SaveExploits3References3
CVE
CVE
added 2009/01/29 7:00 p.m.57 views

CVE-2009-0350

Merak Media Player 3.2 is affected by a stack-based buffer overflow in how it processes the status bar tooltip text for .m3u playlists. A crafted long string in an .m3u file can trigger the overflow, allowing remote attackers to execute arbitrary code. The vulnerability is confirmed by multiple s...

9.3CVSS8.3AI score0.10196EPSS
SaveExploits3References3Affected Software1
Circl
Circl
added 2009/01/25 12:00 a.m.10 views

CVE-2009-0350

creationtimestamp| type| source ---|---|--- 2009-01-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7857 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8126...

9.3CVSS5.8AI score0.10196EPSS
SaveExploits3References2
Rows per page
Query Builder