Lucene search
+L

168 matches found

Tenable Nessus
Tenable Nessus
added 2013/03/13 12:00 a.m.27 views

Flash Player <= 10.3.183.67 / 11.6.602.171 Multiple Vulnerabilities (APSB13-09)

Binary data 6710.prm...

10CVSS8.9AI score0.09257EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2013/03/13 12:00 a.m.34 views

Adobe AIR 3.x <= 3.6.0.597 Buffer Overflow (APSB13-09)

According to its version, the instance of Adobe AIR 3.x on the remote Windows host is 3.6.0.597 or earlier. It is, therefore, potentially affected by the following vulnerabilities : - An integer overflow error exists that could lead to code execution. CVE-2013-0646 - A use-after-free error exists...

10CVSS6.2AI score0.09257EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2013/03/13 12:00 a.m.37 views

Flash Player <= 10.3.183.67 / 11.6.602.171 Multiple Vulnerabilities (APSB13-09)

According to its version, the instance of Flash Player installed on the remote Windows host is 11.x equal or prior to 11.6.602.171, or 10.x equal or prior to 10.3.183.67. It is, therefore, potentially affected by the following vulnerabilities : - An integer overflow error exists that could lead t...

10CVSS6.2AI score0.09257EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2013/03/13 12:00 a.m.37 views

Flash Player for Mac <= 10.3.183.67 / 11.6.602.171 Multiple Vulnerabilities (APSB13-09)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 11.x equal or prior to 11.6.602.171, or 10.x equal or prior to 10.3.183.67. It is, therefore, potentially affected by the following vulnerabilities : - An integer overflow error exists that could lead ...

10CVSS6.2AI score0.09257EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2013/03/13 12:00 a.m.19 views

MS KB2824670: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10

The remote host is missing KB2824670. It may, therefore, be affected by the following vulnerabilities related to the installed version of the Adobe Flash ActiveX control : - An integer overflow error exists that could lead to code execution. CVE-2013-0646 - A use-after-free error exists that coul...

10CVSS6.2AI score0.09257EPSS
SaveExploits0References7
NVD
NVD
added 2012/03/08 10:55 p.m.26 views

CVE-2012-0646

Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file...

9.3CVSS7AI score0.04838EPSS
SaveExploits0References3
CVE
CVE
added 2012/03/08 10:00 p.m.68 views

CVE-2012-0646

CVE-2012-0646 affects Apple iOS prior to 5.1, describing a format string vulnerability in the VPN racoon configuration handler that could allow remote code execution with system privileges when a crafted racoon file is processed. The core issue is a format-string vulnerability in the VPN configur...

9.3CVSS7.1AI score0.04838EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2011/01/25 6:00 p.m.49 views

CVE-2011-0646

The CVE-2011-0646 entry concerns a SQL injection in viewfaqs.php of PHP LOW BIDS, exploitable via the cat parameter to allow remote SQL commands. Affected component: viewfaqs.php (PHP LOW BIDS). Root cause: improper input handling allowing arbitrary SQL execution. Documented impact: remote code e...

7.5CVSS8.8AI score0.01021EPSS
SaveExploits2References5Affected Software1
Circl
Circl
added 2011/01/20 12:00 a.m.9 views

CVE-2011-0646

creationtimestamp| type| source ---|---|--- 2011-01-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16020...

7.5CVSS5.8AI score0.01021EPSS
SaveExploits2References1
CVE
CVE
added 2010/02/18 5:19 p.m.82 views

CVE-2010-0646

CVE-2010-0646 concerns Google Chrome/V8: multiple integer signedness errors in factory.cc of the V8 engine, exploitable in Chrome builds prior to 4.0.249.89. The issue allows remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays. Affected software i...

10CVSS7.5AI score0.04527EPSS
SaveExploits1References12Affected Software1
CVE
CVE
added 2009/02/18 11:00 p.m.64 views

CVE-2009-0646

CVE-2009-0646 affects 4Site CMS 2.6 and earlier. Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via parameters in several endpoints: pcgi/4site.pl (login, password), print/print.shtml (page), portfolio/index.shtml (s, i), hotel/index.php (h), news/...

7.5CVSS8.9AI score0.03597EPSS
SaveExploits2References14Affected Software1
OpenVAS
OpenVAS
added 2009/02/13 12:00 a.m.25 views

Fedora Update for rb_libtorrent FEDORA-2008-1198

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.8CVSS7.2AI score0.02244EPSS
SaveExploits1References2
NVD
NVD
added 2008/02/07 9:00 p.m.25 views

CVE-2008-0646

The bdecoderecursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service stack exhaustion and crash via a crafted bencoded message...

7.8CVSS6.3AI score0.02244EPSS
SaveExploits1References13
CVE
CVE
added 2008/02/07 8:00 p.m.53 views

CVE-2008-0646

The CVE-2008-0646 issue affects Rasterbar Software libtorrent (bdecode_recursive in include/libtorrent/bencode.hpp) prior to 0.12.1, as used by Deluge prior to 0.5.8.3 and other products. A crafted bencoded message can cause a denial of service via stack exhaustion and crash. The OpenVAS/Nessus e...

7.8CVSS6.3AI score0.02244EPSS
SaveExploits1References13Affected Software2
Tenable Nessus
Tenable Nessus
added 2007/11/14 12:00 a.m.73 views

Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)

The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...

10CVSS6.8AI score0.56309EPSS
SaveExploits18References43
CVE
CVE
added 2007/02/01 12:00 a.m.115 views

CVE-2007-0646

CVE-2007-0646 describes a format string vulnerability in iMovie HD 6.0.3 and Safari on Mac OS X 10.4–10.4.10. The issue arises when handling format specifiers in filenames passed to NSRunCriticalAlertPanel, allowing remote user‑assisted crashes (DoS). Connected Nessus entries reference Mac OS X S...

7.1CVSS6.9AI score0.1018EPSS
SaveExploits2References13Affected Software3
Cvelist
Cvelist
added 2007/02/01 12:00 a.m.45 views

CVE-2007-0646

Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling the NSRunCriticalAlertPanel Apple AppK...

6.9AI score0.1018EPSS
SaveExploits2References13
CVE
CVE
added 2006/02/11 11:00 a.m.75 views

CVE-2006-0646

CVE-2006-0646 affects SUSE Linux 9.1–10.0 and SLES 9. In certain circumstances when linking binaries, the dynamic linker/loader (ld) can leave an empty RPATH or RUNPATH, allowing a local attacker to cause arbitrary code execution by running an ld-linked application from the current directory that...

4.4CVSS7.2AI score0.00418EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2004/11/19 5:00 a.m.36 views

CVE-2004-0646

Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as 1 modjrun and 2 modjrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields...

7.8AI score0.07104EPSS
SaveExploits4References7
CVE
CVE
added 2004/11/19 5:00 a.m.79 views

CVE-2004-0646

CVE-2004-0646: A buffer overflow exists in Macromedia JRun’s Apache connectors mod_jrun and mod_jrun20 WriteToLog when verbose logging is enabled. A remote attacker can trigger via long header fields (e.g., Content-Type) to execute arbitrary code. Affects JRun 3.0–4.0 with the Apache connectors; ...

10CVSS7.8AI score0.07104EPSS
SaveExploits4References7Affected Software2
Rows per page
Query Builder